Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: zq2dn8rOKGoKF3HqZliuKXRiN2/KDqd2s+e2sQZ9d54=
Subject key identifier: E7:E3:02:98:8D:8D:F7:B6:C0:6C:3A:F4:95:86:81:7B:EC:5C:49:6D
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 019D2703F2CFF2F7270B17411449E6CEB7AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 22:01:03 +0000
Manifest this update: Wed 25 Mar 2026 22:01:03 +0000
Manifest next update: Thu 26 Mar 2026 22:01:03 +0000
Files and hashes: 1: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: 92VDUuNuAc3DGO75ED3ECtwQw8298+x79qrlxxwB/vI=)
2: EFVOpOWZdKE35rgrU-jtXznNsuI.roa (hash: ZDYIfdybtLAlDhDDvMoU7cKEH+7IKf7xCd7YYsfpSC0=)
3: RnV5hShXIae0lSnUpt8VMyIMXCE.roa (hash: pVuZiXTymWxhDl4KCEyg8IDZADRSqa60wrD/ltLvlBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:f2:cf:f2:f7:27:0b:17:41:14:49:e6:ce:b7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Mar 25 22:01:03 2026 GMT
Not After : Mar 26 22:01:03 2026 GMT
Subject: CN=e7e302988d8df7b6c06c3af49586817bec5c496d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:4a:76:58:7d:b1:b2:2b:e2:49:17:1c:64:
ee:b7:ba:f1:d0:f4:be:c7:01:26:af:62:56:36:f6:
94:8f:d6:b0:ed:33:69:bb:34:29:a1:c5:68:5e:d3:
0d:47:04:69:1b:bc:3d:d5:d4:5d:ef:87:86:e5:aa:
4f:3f:fd:c5:fe:b8:44:0f:f7:60:32:64:d5:6a:7b:
3e:57:4b:b5:fe:b0:05:a0:ad:3a:18:e8:03:27:ab:
7a:e9:d2:8a:16:d6:b9:7e:a3:5f:53:7e:5d:68:45:
fd:d3:7a:0a:3b:b2:f7:52:5d:e5:0d:01:1e:f1:93:
24:b0:cd:e9:46:60:e9:36:4d:4a:05:7e:49:99:a8:
aa:66:cf:9c:6e:a3:fa:3b:e2:07:23:ef:20:95:95:
9b:bc:99:ec:45:6b:77:9a:04:be:ef:9b:04:47:67:
8c:4e:eb:66:a4:29:0e:c4:d9:4b:36:e8:9c:7d:32:
78:89:fe:4b:69:50:8f:e0:e7:25:2b:e6:e7:a2:b8:
c9:95:d0:ec:cc:37:7e:69:53:a2:0d:d1:97:f2:d0:
36:b8:07:76:e4:f9:0a:fc:04:7b:2a:5a:62:6c:15:
97:0f:ec:cc:ec:e5:97:a7:ed:29:43:df:f5:5a:39:
5d:ed:8b:d4:ec:30:6c:3d:c1:bd:a0:fa:7e:46:a2:
35:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E3:02:98:8D:8D:F7:B6:C0:6C:3A:F4:95:86:81:7B:EC:5C:49:6D
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b4:b7:74:4c:19:6d:68:5d:2f:4e:36:bd:c3:f0:0d:cd:90:
a1:61:ec:b5:9d:9a:78:1e:8d:ae:2b:e7:cb:4d:33:fa:45:64:
f4:2a:7d:02:2a:17:3a:b7:3d:e9:89:2c:4b:09:50:cc:05:a1:
78:d6:67:a7:0b:6b:38:28:b3:ff:eb:0a:58:b2:67:67:9d:d9:
ef:f5:ac:70:77:6c:14:79:78:0f:8c:cb:fc:58:9a:9f:1d:07:
53:d7:ca:3f:24:3f:18:db:93:13:9a:2a:b6:2e:76:ae:22:5e:
5b:f8:81:a0:42:0b:21:bd:fa:08:6d:45:a7:4b:72:fa:f0:5a:
5b:74:51:e0:9f:62:26:83:9d:11:34:ee:d1:e4:89:70:27:81:
ab:6a:2a:fa:7b:95:84:c4:fa:39:2d:71:9b:6a:41:55:88:05:
9d:c0:98:96:1f:af:74:43:6c:8c:e8:fb:2f:c9:39:7f:ab:42:
6c:b9:11:7f:29:fa:c3:b8:4e:51:93:f4:65:b1:ee:12:bc:3d:
b7:a4:b7:89:ea:db:32:3a:cf:25:44:9c:a9:e9:07:27:c7:23:
d2:59:5e:ed:cc:a8:c3:76:0d:59:3a:7d:3f:98:b3:4f:29:bf:
00:04:2e:70:7d:6d:e5:31:f8:36:cd:5b:b5:55:a9:4a:2c:c2:
49:19:21:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:59 2026 by rpki-client