Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: rJIEPLTod7+rv+MVegnSNAQL+gIyusnVqPvGAbEbwjo=
Subject key identifier: 31:02:70:0C:18:B6:C4:F0:37:29:B8:67:B7:75:52:F0:FD:9A:05:31
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 019F92ED5832752E09B26606B8DFBCDA4F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 07:00:55 +0000
Manifest this update: Fri 24 Jul 2026 07:00:55 +0000
Manifest next update: Sat 25 Jul 2026 07:00:55 +0000
Files and hashes: 1: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: XKhyj0OZ8fuPj2dFkm9fiawb27O8eN5ijyY821eSMac=)
2: EFVOpOWZdKE35rgrU-jtXznNsuI.roa (hash: ZDYIfdybtLAlDhDDvMoU7cKEH+7IKf7xCd7YYsfpSC0=)
3: RnV5hShXIae0lSnUpt8VMyIMXCE.roa (hash: pVuZiXTymWxhDl4KCEyg8IDZADRSqa60wrD/ltLvlBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:58:32:75:2e:09:b2:66:06:b8:df:bc:da:4f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Jul 24 07:00:55 2026 GMT
Not After : Jul 25 07:00:55 2026 GMT
Subject: CN=3102700c18b6c4f03729b867b77552f0fd9a0531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:8f:2e:11:76:dc:7a:dc:92:49:2a:03:47:
17:91:c6:8f:38:5f:a4:ab:e7:65:4f:21:b5:38:21:
48:05:3e:ef:13:f5:18:86:55:45:8d:52:68:1e:4c:
ff:10:c9:4b:38:a9:70:88:fb:58:9d:4c:b4:9c:ca:
68:32:9a:e4:16:14:2b:36:9e:a3:30:3c:0b:75:0a:
ed:11:7a:59:84:c7:53:52:2e:86:f3:c2:5e:81:fa:
da:62:3b:4a:b4:64:e5:41:b4:b3:7e:e4:aa:11:f9:
31:51:60:42:01:fd:81:db:05:9a:e7:17:81:52:25:
1f:47:7f:12:1c:a3:e2:fb:c2:3d:4a:62:75:73:8c:
7d:00:2c:8e:c9:7d:1a:0a:6b:d6:c1:60:c8:24:13:
14:c2:95:ec:0f:99:22:9f:3b:1e:c8:ed:df:b8:ab:
6f:0e:9f:48:6c:42:8b:29:68:f3:1a:b2:38:b6:f7:
20:70:f0:b9:5b:22:8a:dd:c8:05:c2:1e:29:9f:c5:
94:9d:ba:b9:1e:8f:55:29:81:52:06:20:b1:34:2e:
8e:d0:99:91:a4:18:af:12:84:be:f2:b5:61:b2:0d:
0e:a9:e4:3a:2e:11:42:87:5c:bb:d4:f0:f4:9c:23:
ec:3b:ba:2b:00:fd:6f:ab:22:ec:33:37:e4:ea:ce:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:02:70:0C:18:B6:C4:F0:37:29:B8:67:B7:75:52:F0:FD:9A:05:31
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9e:3f:de:0b:ee:69:f4:f5:1a:95:a6:4c:66:b6:c2:da:03:
d1:b8:8a:ec:44:cc:82:16:f5:f1:4e:55:b6:4b:72:7d:04:f9:
da:0c:e4:36:69:62:7c:23:92:c2:b6:b8:97:67:8f:3c:36:53:
20:19:28:9e:00:25:08:7b:1f:ec:c7:3f:80:a2:fe:6a:b7:18:
0d:cb:33:f4:53:30:7a:6f:8c:15:61:18:12:e7:3b:e0:2f:e4:
26:fb:f1:9a:a6:82:1a:ba:61:a4:a3:d4:ab:5e:96:de:b9:71:
19:fd:e9:63:bd:c3:7a:fa:5a:81:08:b6:9e:e5:bb:de:e8:07:
3e:75:35:15:57:7e:3b:26:7b:1b:7c:24:a3:91:38:3d:fc:9e:
bf:a7:9e:d0:72:c9:77:bc:8f:88:2f:a4:3b:fd:a7:dc:10:b4:
66:7a:af:55:63:fb:83:a4:18:3e:a5:0a:ae:dd:ca:19:d2:7d:
cc:83:47:70:b5:0e:2a:6d:b1:ee:a7:2c:7d:5f:c3:14:3c:87:
d4:a0:24:a4:02:72:fc:17:b5:91:d7:07:29:c9:82:86:d2:9a:
57:d5:5f:e2:2a:8a:05:35:5c:d0:ac:18:f4:9b:b8:08:de:0a:
89:07:10:40:3d:4e:10:9c:bd:21:a5:3f:58:46:22:bb:1e:a9:
76:a7:ea:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:22:57 2026 by rpki-client