Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
File: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft (raw, json)
Hash identifier: nhtj1+DtmOAaoUZ4bVkKwcQjjvX+AsLskUmJMbnsxC0=
Subject key identifier: 44:3C:F4:09:04:AE:8B:D5:66:5F:03:01:EC:A8:C8:18:2C:C0:ED:E0
Authority key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
Certificate issuer: /CN=047ee74ac490e31f1d40764f092411ee25eb1665
Certificate serial: 019CAA582B3D7F6FD94CBB12B55D8357F1E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 17:00:30 +0000
Manifest this update: Sun 01 Mar 2026 17:00:30 +0000
Manifest next update: Mon 02 Mar 2026 17:00:30 +0000
Files and hashes: 1: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl (hash: S70OTPZO4keUSb9B5FM5vLMs9pZIIJuvcdDJ01SxQbY=)
2: tdO4wEk8YpGTzq5kd9vPeqnDeDo.roa (hash: cB5CSJkT3O+9UBmuTizqC0w9ZxVIs1IRBERe6k5DKkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:2b:3d:7f:6f:d9:4c:bb:12:b5:5d:83:57:f1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=047ee74ac490e31f1d40764f092411ee25eb1665
Validity
Not Before: Mar 1 17:00:30 2026 GMT
Not After : Mar 2 17:00:30 2026 GMT
Subject: CN=443cf40904ae8bd5665f0301eca8c8182cc0ede0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:97:73:2b:fb:da:48:3b:d4:47:c7:4f:88:76:
3a:99:5b:74:48:6f:24:3a:ba:a8:02:c5:37:d0:98:
41:ab:b1:0a:14:d0:a2:47:ad:c0:74:90:85:27:b2:
6c:b6:7d:35:25:bb:3e:b8:8e:32:b0:0c:f7:92:3d:
32:d0:2e:ce:6e:54:8d:37:8f:b4:7d:f7:21:e4:33:
37:82:5f:8e:46:fe:e1:23:f8:8b:35:2c:87:b0:45:
ee:22:3f:63:c9:c4:10:94:fa:20:6b:ae:87:0e:32:
3e:aa:11:f1:44:91:e2:75:b7:da:cf:ec:4b:2b:ca:
8a:47:ac:42:b4:e5:e1:ff:31:63:ee:2d:06:5e:b0:
08:01:15:c3:8b:d6:13:ac:2d:05:5b:4b:1d:30:07:
3c:2b:2c:57:eb:8b:02:b5:25:a4:23:14:f0:8e:dc:
01:cb:0d:74:47:d7:0a:b4:03:0b:e4:e1:95:50:97:
21:92:ed:60:24:95:05:35:bd:ec:e3:de:4b:07:3e:
74:d0:6f:50:de:07:0c:c3:3a:9d:41:40:dd:66:5d:
ce:b5:78:e7:e0:cd:b4:39:6b:6b:0f:f6:f2:3c:2f:
22:0c:80:b1:40:b6:25:c0:5a:08:7b:37:6a:72:c2:
d4:80:f9:ad:5c:1a:da:dd:de:07:fa:58:72:aa:6c:
38:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3C:F4:09:04:AE:8B:D5:66:5F:03:01:EC:A8:C8:18:2C:C0:ED:E0
X509v3 Authority Key Identifier:
keyid:04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:7b:36:5e:ea:1b:43:fc:78:96:31:d4:43:9b:0e:90:e3:27:
b0:89:af:9c:8f:f4:29:3f:4b:8f:15:6e:d4:5f:ac:cb:90:a4:
b0:dc:9c:57:31:13:20:61:e6:a9:58:b8:87:76:7e:15:58:29:
7c:e9:41:d2:9b:5d:18:01:3c:48:82:5e:7e:4c:28:e6:75:2f:
92:b5:2f:81:ef:6c:a7:8c:8c:47:09:84:d4:f1:ff:58:fe:43:
39:d1:e6:fd:7c:dc:5e:37:2c:0c:1a:0a:b7:3d:75:64:4d:c9:
11:7f:38:37:87:4f:d6:6c:1d:66:ed:e9:db:5d:09:4a:a7:16:
47:3b:df:ad:fe:7c:5c:14:f7:fe:51:f4:b3:db:d6:84:e3:ec:
8d:0d:86:57:04:63:4c:cb:86:8f:85:8f:85:d1:98:43:e7:2d:
3e:ad:99:b0:9f:49:66:f2:2c:9c:b6:21:f9:04:b9:3b:71:ec:
f5:81:fb:ff:02:16:af:a0:db:f1:23:b7:e0:aa:34:5c:db:ae:
53:89:68:47:b1:b7:ee:53:af:26:74:f0:19:1d:88:4e:a5:c0:
7f:dd:a3:ae:c9:86:96:09:a8:0d:2d:26:b7:d7:78:7c:24:56:
14:b2:03:e9:65:13:24:c6:4b:75:7a:d5:1b:ae:f7:3e:45:85:
5e:25:e3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:35 2026 by rpki-client