Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier: MvymhX87vVJ5emNE+T49D87TCrbXR4EDfphnXTGlxcE=
Subject key identifier: AD:3C:56:18:BA:3E:43:FD:D3:4D:4F:27:3C:92:CE:7E:0C:D9:75:15
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial: 019F9022D3785FF04AFC88FF250BADB417D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number: 0C83
Signing time: Thu 23 Jul 2026 18:00:28 +0000
Manifest this update: Thu 23 Jul 2026 18:00:28 +0000
Manifest next update: Fri 24 Jul 2026 18:00:28 +0000
Files and hashes: 1: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: tqhx2DJ4ACPXvZlRUz2++3vj3CqyngR9Mfb+CFC7EGE=)
2: HOmsaADbKL0_Nb10hk_P_lDZ0_Y.roa (hash: 00uvM1qPEx8W9hFfLWy2Rcng+t4mc0OvA6j8KzFwgTQ=)
3: Xc20FTd_9i1cvP_V-us2VR8rcgw.roa (hash: P+2TwYeHZ5Tcfkj30y1ee92Z2pzwCyx2c2a540pfIM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:d3:78:5f:f0:4a:fc:88:ff:25:0b:ad:b4:17:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Validity
Not Before: Jul 23 18:00:28 2026 GMT
Not After : Jul 24 18:00:28 2026 GMT
Subject: CN=ad3c5618ba3e43fdd34d4f273c92ce7e0cd97515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bb:a3:76:4d:6e:00:20:89:5e:f2:03:7d:4e:
8d:b0:66:ca:3e:82:e5:1b:e5:a4:ee:3d:00:3c:ae:
7c:ce:c9:ea:d5:27:43:ae:ba:cb:f3:70:3c:22:93:
16:a8:5f:e2:22:33:05:36:7b:7d:4b:77:2a:d6:5a:
0a:e4:1b:33:40:3c:cd:31:2b:85:ae:1a:7d:a8:fa:
3a:46:ee:46:6e:b8:57:37:3e:21:bd:12:56:14:b7:
27:04:3c:59:5d:61:18:1f:96:a0:40:a4:cc:6b:7b:
45:59:54:0d:5a:73:f7:b9:8e:08:a5:ba:30:36:fc:
28:3a:68:a1:5b:3c:33:01:4a:3d:37:bc:3a:95:d0:
96:74:b5:f6:0b:cd:04:a4:1d:f8:43:07:ab:93:25:
53:7e:b0:c7:ff:4f:c6:44:6f:e5:ac:3b:1b:dc:a2:
57:c6:13:63:92:49:d6:31:40:81:7c:20:87:7c:b6:
ab:de:78:eb:e2:2e:c3:33:76:37:49:13:d6:c9:30:
66:aa:ca:57:b0:1f:fe:52:9e:64:d3:bd:2f:f4:85:
14:73:97:ff:d6:20:ea:84:dc:16:9b:fa:f2:3d:75:
1e:5a:28:56:fb:49:ef:d6:bd:11:20:68:c5:4f:6e:
97:2c:54:35:9f:b3:af:22:8e:81:01:a7:78:06:e8:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3C:56:18:BA:3E:43:FD:D3:4D:4F:27:3C:92:CE:7E:0C:D9:75:15
X509v3 Authority Key Identifier:
keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:94:1b:0d:8c:03:81:b1:e8:ec:49:f1:6e:53:d6:26:16:94:
2b:7f:a8:54:89:e9:f0:40:e2:68:7f:fc:09:cc:3c:56:76:1a:
6c:aa:2b:c3:7d:a2:46:a4:93:a4:64:aa:41:54:6c:25:7a:13:
51:60:3f:bf:ca:39:55:51:3c:8d:b1:15:fc:6b:a5:5f:b2:4c:
fc:3c:ce:75:db:f8:61:5b:7b:40:32:84:9b:92:ca:71:aa:16:
c8:85:bd:2d:57:0c:21:2d:80:3a:36:6a:a2:2b:e6:95:ab:fb:
5a:41:e0:df:ba:04:4c:a9:fb:31:d5:d6:6c:2d:51:b5:e5:7b:
fd:d5:ec:83:38:e1:a2:18:cb:8d:f5:1b:ca:0f:dd:94:06:4f:
a3:bd:97:ff:99:55:78:1e:25:6c:fb:a2:c8:c3:14:c9:83:76:
4e:5a:40:55:cf:cb:47:c6:01:a6:4a:90:cf:50:63:b9:3e:b4:
96:4d:37:cd:bf:32:cb:da:5f:62:06:e8:15:b6:0d:11:13:54:
e1:cb:1e:97:1a:4a:b9:23:da:e4:d7:63:ec:2d:46:c4:62:05:
2d:f6:75:50:a9:e7:27:31:8e:9f:d8:de:35:8c:3b:04:1c:70:
b9:e9:a5:00:f5:f4:8b:32:dc:7a:5c:90:ed:9b:93:03:30:1c:
0c:79:19:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:12 2026 by rpki-client