Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
File: bm17yr_MMI1CAFPEgqDVn7EoLjA.mft (raw, json)
Hash identifier: ZaOqh6r1+p2+ssjL9eePmBQSOII0epPJFSYmjQ7Hbt4=
Subject key identifier: 1C:97:3D:4F:2E:F0:B5:F9:45:C7:65:E9:01:FA:31:DD:28:BF:05:A7
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial: 019D277212C3B476C988CFBDC2FB65B16F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
Manifest number: 189C
Signing time: Thu 26 Mar 2026 00:01:20 +0000
Manifest this update: Thu 26 Mar 2026 00:01:20 +0000
Manifest next update: Fri 27 Mar 2026 00:01:20 +0000
Files and hashes: 1: InqWS5rTHtoJHqAAMNFNS-6YNzU.roa (hash: PCgwCy8zvVIhGv1SDbFVEmkSMCsbV4aCFlf6s9OR4Ns=)
2: NF7flV9Z7UaOMGg6mJH46C1-Xq0.roa (hash: fmiuFA8CeszA+aip616DB8dgdxALGZBhtxt21OyYIWM=)
3: NdjagWCchyoUBDH_RRwhcy-qdpY.roa (hash: rfUn6HMhfHmkmcQD7GkdDWgPYr7YZfPMYcAy3H0prJk=)
4: bVJONHJfgKZDBK0Jlsu-AiUrumY.roa (hash: 1OcxCV/N7P1Um6U586/l5XgFjBvwzM7c2rUdENhKMFs=)
5: bm17yr_MMI1CAFPEgqDVn7EoLjA.crl (hash: Hy1HwBogkwSE3rLDh3h4my2MVJS56ra3puGhIPI92tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:12:c3:b4:76:c9:88:cf:bd:c2:fb:65:b1:6f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Validity
Not Before: Mar 26 00:01:20 2026 GMT
Not After : Mar 27 00:01:20 2026 GMT
Subject: CN=1c973d4f2ef0b5f945c765e901fa31dd28bf05a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:a6:84:20:7c:19:f4:60:4c:9c:31:a5:2b:
42:29:2b:e7:fa:6f:9f:7b:cf:e6:3f:f2:77:45:81:
ca:69:63:86:2f:b7:4a:bc:33:d3:9a:84:24:9a:9f:
9e:ca:ae:5c:22:b3:b4:8d:e0:19:12:1b:88:a9:aa:
38:7c:4a:26:f2:f6:6f:94:46:be:a3:28:d5:8a:a9:
d3:87:7a:2d:b9:a2:87:b7:df:55:c8:5b:52:6f:f4:
5c:40:0e:e9:07:51:ad:9f:11:84:7f:f1:50:a1:36:
1e:c7:a3:d4:e3:29:d5:6b:7d:27:99:8c:48:9f:6f:
67:6e:e2:49:c5:b0:ec:af:33:0c:21:af:08:17:fe:
33:24:3e:32:70:ae:8a:9c:bf:51:d9:f3:9b:d4:73:
cf:33:dc:ca:3f:e2:74:09:c2:1b:07:0f:f7:5b:85:
d6:ad:93:87:a3:15:f5:00:9e:8a:a3:6a:6b:d5:47:
b0:69:e8:67:0c:8d:7e:4d:67:c1:d3:4b:65:e4:db:
22:41:5e:1b:89:8d:c2:2b:0b:46:1e:88:4d:73:41:
37:2a:a5:d5:aa:a5:4c:a7:a0:72:52:a0:a9:f7:45:
72:c4:cf:16:82:3b:58:18:e7:36:b1:4c:60:85:33:
15:7e:c6:a0:ae:29:8f:c9:f0:b5:f4:54:09:8d:5e:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:97:3D:4F:2E:F0:B5:F9:45:C7:65:E9:01:FA:31:DD:28:BF:05:A7
X509v3 Authority Key Identifier:
keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b3:95:47:e6:b8:5e:33:bb:1f:48:62:4b:f6:5e:48:1b:09:
79:f4:e7:f9:7e:b1:02:dd:9c:87:0f:f3:5d:c6:4d:c5:e2:01:
5b:cc:e8:34:af:d0:a6:61:96:c5:8b:8a:0c:0e:15:a4:47:84:
2c:46:a4:cc:fc:92:ab:e7:df:fe:b9:63:a1:da:0c:6c:d9:b1:
9f:b4:d0:49:92:60:09:0d:72:86:55:ce:03:9c:70:0f:b7:e0:
75:4d:7b:50:f2:7f:bb:6f:e6:37:86:a5:7d:97:40:75:7f:5a:
c9:56:2d:63:df:34:1d:04:19:ab:3b:42:44:c9:de:1a:80:2e:
ef:63:c1:42:1d:bb:a7:ca:76:57:76:61:ba:7d:4b:d5:9e:d1:
46:29:51:4e:8a:7c:aa:2d:d0:04:44:c3:e8:10:9c:86:b8:49:
2a:fe:70:8d:c8:1d:23:54:1a:a6:9a:02:46:b9:21:05:d1:99:
7a:a2:3e:8e:88:a3:f4:8d:b3:e4:4d:9a:6a:d4:71:f6:ee:58:
18:cd:8d:a9:93:9b:60:a3:a1:97:99:e6:de:35:db:6c:11:09:
37:20:dd:2d:9a:a3:a9:87:46:c8:71:1f:d9:ef:dc:0a:7b:7c:
b6:2c:ee:38:8f:01:03:c9:53:02:74:f0:52:f5:e2:9a:84:b0:
9f:4f:da:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:07 2026 by rpki-client