Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier: Ae/443PQ4yRwb9qjmidx7CgJBJ0jxTLthjRzYloYbQw=
Subject key identifier: 34:49:22:AC:2F:BF:99:7E:77:0F:0F:4F:16:1C:83:62:24:C4:DC:17
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial: 019E1D5938EF63B28D6C87D4FF2BAB1DFA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number: 0BC3
Signing time: Tue 12 May 2026 18:00:46 +0000
Manifest this update: Tue 12 May 2026 18:00:46 +0000
Manifest next update: Wed 13 May 2026 18:00:46 +0000
Files and hashes: 1: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: W2W3sctriR/xRkGicIvvEebE3ofjZiYsbEkuTW2n+UU=)
2: HOmsaADbKL0_Nb10hk_P_lDZ0_Y.roa (hash: 00uvM1qPEx8W9hFfLWy2Rcng+t4mc0OvA6j8KzFwgTQ=)
3: Xc20FTd_9i1cvP_V-us2VR8rcgw.roa (hash: P+2TwYeHZ5Tcfkj30y1ee92Z2pzwCyx2c2a540pfIM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:38:ef:63:b2:8d:6c:87:d4:ff:2b:ab:1d:fa:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Validity
Not Before: May 12 18:00:46 2026 GMT
Not After : May 13 18:00:46 2026 GMT
Subject: CN=344922ac2fbf997e770f0f4f161c836224c4dc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:d1:df:ec:64:82:21:d5:2b:08:bd:03:d9:
75:7d:63:bc:77:85:94:dc:f5:b3:59:8a:04:68:a4:
e2:98:a4:c7:c5:5f:ae:9a:a8:c4:fd:ba:a1:f6:9a:
55:cd:33:df:bc:1a:20:c1:80:e8:9f:ef:e3:d6:8c:
9b:65:b2:64:5a:45:39:fb:58:43:f7:77:15:08:be:
9e:35:b8:d9:ec:5b:a0:0b:fb:81:b6:2b:0b:d8:30:
e1:72:14:27:98:8d:31:0a:c3:71:12:dc:d6:a4:6c:
cf:1f:3e:4c:db:30:bc:71:d2:bd:18:78:52:50:b6:
45:67:71:81:50:57:ee:af:a1:08:be:09:6f:1c:8d:
f9:2e:e5:4a:56:a1:ca:86:83:23:f3:a5:6c:a5:3b:
6d:af:b4:55:88:13:5f:7a:5e:79:44:7d:28:fb:01:
7d:3c:16:22:e0:d7:3d:7f:61:70:8f:ab:05:e6:56:
63:a3:50:41:ed:97:32:b7:58:0b:7c:46:71:16:10:
f7:68:f0:f8:81:aa:44:9d:ad:b4:f0:c2:fa:20:f6:
51:bf:e6:27:dc:90:31:80:ee:72:be:e3:58:f8:f8:
8f:8a:6e:1e:1a:21:e7:f1:69:bc:5d:3f:2d:e9:b0:
83:46:b7:4a:74:36:a7:1d:32:4b:74:d7:27:d0:62:
d0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:49:22:AC:2F:BF:99:7E:77:0F:0F:4F:16:1C:83:62:24:C4:DC:17
X509v3 Authority Key Identifier:
keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b6:b6:1a:98:d3:e5:0a:5a:02:27:34:99:32:dc:c6:b1:9f:
50:24:df:ff:9b:82:91:b2:da:04:3d:ce:04:cc:79:db:ad:4e:
69:f5:4a:ce:03:cf:e3:09:83:5f:6f:cc:0b:94:da:8c:10:41:
ab:57:b1:88:62:c8:c1:d5:ef:2a:fd:7f:07:3e:76:c9:61:ad:
62:ba:ec:3a:59:12:8a:46:9f:77:7e:dd:9a:fb:d7:da:9c:1e:
5c:f0:42:94:0d:80:84:03:37:56:31:ba:af:7f:4a:ee:27:05:
be:9e:75:ee:7e:78:cd:ad:f4:0d:2f:c7:df:11:67:93:4c:54:
c6:62:9b:dd:bd:b9:55:f8:f1:74:29:18:7a:ed:39:bf:bc:1c:
31:4d:ce:1f:87:ab:fc:06:ee:c0:c3:bb:2f:ea:6f:1a:bd:97:
3c:85:8c:73:d4:32:79:6b:35:89:b3:68:fb:86:69:47:48:b3:
a1:a8:3e:45:b7:a2:db:a6:84:8c:51:a8:d7:96:5c:c6:0f:e9:
41:0b:98:96:23:2e:f7:68:82:1e:ca:c7:52:0c:88:61:cc:41:
ad:81:69:49:42:4f:82:78:cf:0e:71:91:32:62:65:9c:32:f7:
76:be:e2:af:97:18:d4:20:12:61:53:11:7e:53:2c:88:66:11:
10:ee:bb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:33 2026 by rpki-client