Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: RGnqTeQYfCyULgV9hsvx7t8wx5ay1xTvKqumOJ6iNGM=
Subject key identifier: 81:5D:4F:F1:EC:21:7A:C7:CD:7F:01:DC:7B:A0:1B:FA:9D:44:87:2A
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 01A0EC9C97C0D3409717664DCF5F3A83EDB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 1A7D
Signing time: Tue 29 Sep 2026 10:01:20 +0000
Manifest this update: Tue 29 Sep 2026 10:01:20 +0000
Manifest next update: Wed 30 Sep 2026 10:01:20 +0000
Files and hashes: 1: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: tltnaNlsQmu39klQjPe4VRDUW5ZgqHcTZCcal5pg9cs=)
2: EFVOpOWZdKE35rgrU-jtXznNsuI.roa (hash: ZDYIfdybtLAlDhDDvMoU7cKEH+7IKf7xCd7YYsfpSC0=)
3: RnV5hShXIae0lSnUpt8VMyIMXCE.roa (hash: pVuZiXTymWxhDl4KCEyg8IDZADRSqa60wrD/ltLvlBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9c:97:c0:d3:40:97:17:66:4d:cf:5f:3a:83:ed:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Sep 29 10:01:20 2026 GMT
Not After : Sep 30 10:01:20 2026 GMT
Subject: CN=815d4ff1ec217ac7cd7f01dc7ba01bfa9d44872a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bf:bf:19:59:3e:e3:22:02:80:c4:53:da:2d:
f9:a4:61:ae:0d:6a:9e:dc:54:bb:46:28:69:91:d1:
33:7d:70:fb:78:5e:3d:fc:bc:e5:83:08:1c:0a:9d:
48:bc:44:95:5c:38:46:94:85:10:eb:64:f3:06:25:
57:2d:ae:6b:10:c7:ad:39:cb:62:ec:42:f2:e6:82:
b6:d7:c6:0c:06:a7:08:6d:63:fe:f9:f8:b9:0b:ef:
4b:f4:d3:b7:d2:d2:de:e5:1c:cb:f1:1d:75:50:6e:
6d:b7:d4:ec:6a:d8:33:14:85:d9:c4:8b:db:92:7f:
42:e8:95:60:38:82:87:46:27:b1:ba:34:68:4b:92:
2b:59:11:cc:fa:d7:a4:f5:44:19:fe:cf:b1:b7:ed:
ae:e2:e7:8f:d2:7a:70:1e:64:1b:a2:9b:1e:15:35:
d8:af:e3:ee:2c:c8:0a:bc:ba:f6:9f:8b:24:a2:17:
9c:57:85:08:54:a5:40:b2:91:6e:25:3f:21:ec:bf:
52:a5:b3:12:84:11:2e:6c:96:76:e1:06:1b:47:24:
be:6c:a7:ff:dd:75:d4:2c:58:9c:cb:68:5e:ff:97:
91:40:c6:e5:76:1e:b2:19:68:17:4d:83:36:af:0e:
70:d8:75:f8:42:4a:2d:f9:f9:ac:1e:55:ed:43:e6:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5D:4F:F1:EC:21:7A:C7:CD:7F:01:DC:7B:A0:1B:FA:9D:44:87:2A
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d3:29:2c:90:a6:c1:16:8c:9d:1d:14:4b:b9:6b:2e:3d:46:
58:46:80:85:52:91:af:6d:b7:c6:49:f0:75:fd:c3:21:61:57:
35:17:07:7b:f7:8d:9d:86:2c:67:5f:82:61:e9:01:8d:15:12:
f2:a1:6c:03:f6:1b:a8:04:a9:15:c0:f2:36:bd:a1:7b:a4:83:
63:48:51:fd:41:5e:cd:2c:7d:3a:ce:09:8f:6b:b2:bf:f7:a5:
d8:c6:2c:3e:88:e1:aa:17:87:52:72:89:94:2d:51:60:22:c7:
37:3b:32:23:88:12:78:43:e6:ea:70:06:a2:3e:c0:8a:0a:39:
31:d8:cc:35:37:4f:0f:9e:a7:ec:b6:0c:a8:ca:8c:7b:e8:d2:
d5:e4:df:72:5c:b5:54:44:c9:fa:14:34:02:37:15:b4:8d:26:
8d:4a:bb:76:a8:77:18:f6:73:c0:23:97:af:7f:eb:31:e1:83:
e8:82:35:5a:e3:51:09:3f:fb:c7:fb:a4:38:7a:7d:44:b7:7c:
f1:c1:8d:b6:6f:77:53:29:2f:98:df:98:c2:12:54:62:05:31:
5f:26:a7:c8:3a:2b:04:fb:ee:a7:39:84:ce:39:d1:2c:1a:29:
19:11:d1:f5:14:65:cc:1d:66:4d:a5:a3:07:c4:11:d6:05:66:
f6:0a:e5:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDsnJfA00CXF2ZNz186g+22MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NzMyYjk4NWY4ZjYzZmY4YWU4ZWFjN2M3MDgzMmIzMGNl
ZTgwYWQwHhcNMjYwOTI5MTAwMTIwWhcNMjYwOTMwMTAwMTIwWjAzMTEwLwYDVQQD
Eyg4MTVkNGZmMWVjMjE3YWM3Y2Q3ZjAxZGM3YmEwMWJmYTlkNDQ4NzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb+/GVk+4yICgMRT2i35pGGuDWqe
3FS7RihpkdEzfXD7eF49/LzlgwgcCp1IvESVXDhGlIUQ62TzBiVXLa5rEMetOcti
7ELy5oK218YMBqcIbWP++fi5C+9L9NO30tLe5RzL8R11UG5tt9TsatgzFIXZxIvb
kn9C6JVgOIKHRiexujRoS5IrWRHM+tek9UQZ/s+xt+2u4ueP0npwHmQbopseFTXY
r+PuLMgKvLr2n4skohecV4UIVKVAspFuJT8h7L9SpbMShBEubJZ24QYbRyS+bKf/
3XXULFicy2he/5eRQMbldh6yGWgXTYM2rw5w2HX4Qkot+fmsHlXtQ+b3RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFdT/HsIXrHzX8B3HugG/qdRIcqMB8GA1UdIwQY
MBaAFARzK5hfj2P/iujqx8cIMrMM7oCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDct
YWRhMjcwODI1MjE4LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDctYWRhMjcwODI1MjE4
LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdMpLJCm
wRaMnR0US7lrLj1GWEaAhVKRr223xknwdf3DIWFXNRcHe/eNnYYsZ1+CYekBjRUS
8qFsA/YbqASpFcDyNr2he6SDY0hR/UFezSx9Os4Jj2uyv/el2MYsPojhqheHUnKJ
lC1RYCLHNzsyI4gSeEPm6nAGoj7Aigo5MdjMNTdPD56n7LYMqMqMe+jS1eTfcly1
VETJ+hQ0AjcVtI0mjUq7dqh3GPZzwCOXr3/rMeGD6II1WuNRCT/7x/ukOHp9RLd8
8cGNtm93UykvmN+YwhJUYgUxXyanyDorBPvupzmEzjnRLBopGRHR9RRlzB1mTaWj
B8QR1gVm9grlzQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 14:56:19 2026 by rpki-client