Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier: qhGjWRK2sd8v2pnRYCN/8PU8CV5AXvLn0Lo5cUjDOrU=
Subject key identifier: A4:B1:37:27:C1:89:1E:14:85:F3:BB:EF:5B:D1:36:72:3D:9B:77:82
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial: 019D281643C6D64FA400B94307EF2B4E86F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number: 0B44
Signing time: Thu 26 Mar 2026 03:00:40 +0000
Manifest this update: Thu 26 Mar 2026 03:00:40 +0000
Manifest next update: Fri 27 Mar 2026 03:00:40 +0000
Files and hashes: 1: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: EyXY7bhLHFQV6WNnAdTPf2hrOr4Lt9GVYqdJ3G2e0HQ=)
2: HOmsaADbKL0_Nb10hk_P_lDZ0_Y.roa (hash: 00uvM1qPEx8W9hFfLWy2Rcng+t4mc0OvA6j8KzFwgTQ=)
3: Xc20FTd_9i1cvP_V-us2VR8rcgw.roa (hash: P+2TwYeHZ5Tcfkj30y1ee92Z2pzwCyx2c2a540pfIM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:43:c6:d6:4f:a4:00:b9:43:07:ef:2b:4e:86:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Validity
Not Before: Mar 26 03:00:40 2026 GMT
Not After : Mar 27 03:00:40 2026 GMT
Subject: CN=a4b13727c1891e1485f3bbef5bd136723d9b7782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:f4:31:bd:ed:4b:0d:2c:4e:a7:af:51:83:
20:f6:4d:26:b6:ed:8a:f2:7b:21:c2:6c:6d:3a:43:
90:d5:ef:5d:a1:88:18:7c:42:ba:9a:d2:b4:f0:fa:
f4:9f:36:eb:cb:8f:5c:c6:df:c5:b6:a0:59:fe:ef:
50:e1:76:e6:44:56:75:0a:47:74:73:94:46:ef:5a:
33:a2:47:9a:52:47:a2:1f:01:ff:11:bf:8e:64:4d:
ca:7d:a9:22:32:56:15:ba:a0:7c:c4:96:68:be:72:
9d:9c:9a:8e:13:a6:62:c5:16:60:d8:95:f8:cc:7f:
bf:7c:7d:7e:94:e3:56:af:c8:32:2c:d8:97:de:60:
12:7f:68:21:8a:56:fe:b5:dd:65:7b:ab:61:52:27:
25:20:61:73:95:3a:6d:70:d0:7d:25:cb:af:5e:dd:
e1:67:0c:f4:db:08:96:01:9b:c1:31:ea:83:00:76:
ab:bb:f8:73:4d:ff:d2:8e:cb:a0:e5:5d:92:b6:da:
2a:b5:d3:07:36:45:f4:3b:bd:03:be:1c:a9:7e:b2:
03:d2:8c:63:70:63:d3:14:1f:70:f2:84:da:71:98:
a4:66:28:87:4f:97:91:24:73:1d:0c:29:2e:a4:30:
de:74:a0:67:a0:52:2b:22:c7:60:be:a3:89:0f:89:
cc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B1:37:27:C1:89:1E:14:85:F3:BB:EF:5B:D1:36:72:3D:9B:77:82
X509v3 Authority Key Identifier:
keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:71:e6:cc:17:2f:19:95:d0:b9:38:95:5e:ba:0a:da:fb:be:
e9:16:ef:3d:56:8b:a9:bd:5c:ec:db:8f:d5:90:59:38:f2:d8:
fe:87:6c:20:df:c1:23:b8:03:47:d2:01:cd:8a:dc:06:08:6a:
92:49:e2:65:77:b9:72:ad:0b:77:ae:6b:00:43:64:64:36:a8:
05:99:ce:5f:da:66:de:27:c2:d3:0c:ca:4a:21:c0:70:b9:dc:
de:b8:67:ef:a2:46:c8:e9:c5:f5:ea:a0:e5:07:1b:7e:7f:4f:
7d:d7:01:77:ca:eb:ef:57:b5:64:e0:69:9e:67:db:33:43:13:
9e:79:dd:69:d6:52:a1:65:e1:ba:7d:07:36:be:9e:bf:b1:3a:
80:f9:62:c0:ea:67:50:48:c4:66:62:61:2f:3d:64:38:07:7f:
48:ed:3e:67:5d:35:eb:2a:e2:18:43:40:cf:46:bd:81:15:78:
6d:e2:30:40:a5:07:28:57:01:52:7e:c7:e2:79:34:28:59:f2:
2b:09:03:ce:b7:9e:5d:78:a7:c6:53:d6:12:ac:13:dd:62:a8:
45:c8:a8:88:9f:66:df:9a:f5:c4:70:f7:d1:90:0c:f7:3b:77:
c6:73:3a:67:bc:6b:de:c0:26:3c:28:8f:5a:c9:c8:74:b0:af:
1d:44:d7:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFkPG1k+kALlDB+8rTob1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NjFmMjBmYjhhN2U2MzVkN2JjYzk0YzAwYmVkNzE3OWI3
NjA4ZjYwHhcNMjYwMzI2MDMwMDQwWhcNMjYwMzI3MDMwMDQwWjAzMTEwLwYDVQQD
EyhhNGIxMzcyN2MxODkxZTE0ODVmM2JiZWY1YmQxMzY3MjNkOWI3NzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFH0Mb3tSw0sTqevUYMg9k0mtu2K
8nshwmxtOkOQ1e9doYgYfEK6mtK08Pr0nzbry49cxt/FtqBZ/u9Q4XbmRFZ1Ckd0
c5RG71ozokeaUkeiHwH/Eb+OZE3KfakiMlYVuqB8xJZovnKdnJqOE6ZixRZg2JX4
zH+/fH1+lONWr8gyLNiX3mASf2ghilb+td1le6thUiclIGFzlTptcNB9JcuvXt3h
Zwz02wiWAZvBMeqDAHaru/hzTf/Sjsug5V2SttoqtdMHNkX0O70DvhypfrID0oxj
cGPTFB9w8oTacZikZiiHT5eRJHMdDCkupDDedKBnoFIrIsdgvqOJD4nMHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSxNyfBiR4UhfO771vRNnI9m3eCMB8GA1UdIwQY
MBaAFAZh8g+4p+Y117zJTAC+1xebdgj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMt
YWQ4ZWRmZTVmMGY3LzEvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMtYWQ4ZWRmZTVmMGY3
LzEvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3HmzBcv
GZXQuTiVXroK2vu+6RbvPVaLqb1c7NuP1ZBZOPLY/odsIN/BI7gDR9IBzYrcBghq
kkniZXe5cq0Ld65rAENkZDaoBZnOX9pm3ifC0wzKSiHAcLnc3rhn76JGyOnF9eqg
5Qcbfn9PfdcBd8rr71e1ZOBpnmfbM0MTnnndadZSoWXhun0HNr6ev7E6gPliwOpn
UEjEZmJhLz1kOAd/SO0+Z1016yriGENAz0a9gRV4beIwQKUHKFcBUn7H4nk0KFny
KwkDzreeXXinxlPWEqwT3WKoRcioiJ9m35r1xHD30ZAM9zt3xnM6Z7xr3sAmPCiP
WsnIdLCvHUTX8w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:33 2026 by rpki-client