Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: jDNqxE4SM9ilXQf7PbldUl0tZeFx+WSPGQbKY8bp/mM=
Subject key identifier: FC:A4:D5:8D:02:10:C6:D5:52:B7:C7:D5:BC:4D:9D:1D:27:D8:E9:78
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 019E1C473BEB847BEB2C90979E40F2DD5A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 13:01:30 +0000
Manifest this update: Tue 12 May 2026 13:01:30 +0000
Manifest next update: Wed 13 May 2026 13:01:30 +0000
Files and hashes: 1: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: a7/5UK1XFH5KKL9+0xEVzb9ukWCD2J5gdcXbI0ipchc=)
2: EFVOpOWZdKE35rgrU-jtXznNsuI.roa (hash: ZDYIfdybtLAlDhDDvMoU7cKEH+7IKf7xCd7YYsfpSC0=)
3: RnV5hShXIae0lSnUpt8VMyIMXCE.roa (hash: pVuZiXTymWxhDl4KCEyg8IDZADRSqa60wrD/ltLvlBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:3b:eb:84:7b:eb:2c:90:97:9e:40:f2:dd:5a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: May 12 13:01:30 2026 GMT
Not After : May 13 13:01:30 2026 GMT
Subject: CN=fca4d58d0210c6d552b7c7d5bc4d9d1d27d8e978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:0d:fb:98:d0:14:0e:ce:2d:6e:f7:85:9c:
d5:8a:a4:c6:50:80:e6:d5:e8:2a:0f:4f:c9:1c:8c:
5e:c4:b4:0d:43:69:21:53:70:a5:cc:f4:b5:c0:a0:
0a:c4:53:be:a4:37:da:f9:9b:d8:1d:db:66:0a:da:
50:97:45:a5:54:ae:c3:7b:c3:22:4e:25:cf:fb:d2:
3e:3c:93:64:36:eb:3b:78:f2:10:aa:d6:b1:37:52:
84:34:4f:9c:8e:90:9b:7a:e8:fa:69:4d:7e:71:e9:
25:1c:fc:ee:8b:43:0b:c9:6c:8d:6a:c1:40:07:38:
8f:65:6f:28:66:71:74:fd:a6:16:80:ba:ec:ef:87:
f0:c8:b3:d5:54:b2:3a:02:61:6b:79:6a:94:67:13:
06:bf:96:cc:5a:bf:6a:f1:43:37:04:8f:b5:4b:7c:
9a:a3:9e:71:96:a9:65:38:a0:b3:10:d9:19:d0:79:
e6:9c:81:e7:dd:84:6f:d3:24:7a:a6:5a:c1:b0:80:
83:b3:f3:ea:8e:c9:32:06:b6:47:5c:60:af:ba:c0:
50:96:4e:9b:0c:47:c3:8d:ac:f5:a0:d9:c4:2d:ab:
3d:20:3a:00:b3:c3:04:4b:48:14:cd:c1:be:c7:ee:
0d:7a:54:e7:b4:50:18:a0:0e:54:4b:c1:8e:18:88:
53:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A4:D5:8D:02:10:C6:D5:52:B7:C7:D5:BC:4D:9D:1D:27:D8:E9:78
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ac:b4:44:cd:47:05:aa:d0:e9:6e:6c:0c:36:bd:5b:ff:8a:
d6:ba:5d:da:17:3c:02:e2:95:ee:79:8e:07:f4:7d:2f:5f:7f:
b7:4d:77:64:35:8d:87:b2:af:14:21:db:c0:01:e3:9c:16:11:
57:b6:79:04:52:4e:7d:9a:a5:6d:dc:26:50:f1:34:27:2f:43:
98:a8:28:2c:81:92:d0:3d:e5:e3:1e:07:b9:ab:5c:36:66:67:
c9:f5:2a:dd:38:45:d2:56:db:f9:0c:f9:f8:ac:fd:07:6e:11:
d7:ed:db:d4:26:a1:bb:0b:a7:15:9a:d7:b7:39:20:84:18:f9:
d0:5e:52:bf:42:6d:b3:3f:49:8d:cd:c5:62:53:1f:30:1a:6c:
a2:c4:e7:d6:8a:2b:a0:fc:f3:e2:ec:f6:b5:10:37:b5:09:0b:
99:4f:59:d1:bc:61:a9:eb:74:6d:ba:47:22:fb:35:f2:c3:a7:
d4:9a:b8:1b:ad:e9:09:55:fa:6d:b3:32:23:54:10:92:21:61:
d4:85:ad:d7:6c:e8:53:f6:dc:24:3f:91:97:3b:27:b2:da:03:
24:31:cd:d3:fc:e2:f7:15:8a:97:ac:49:f7:d5:37:0b:93:ac:
10:35:5a:e1:6c:d2:8b:1f:a8:05:73:26:a7:1a:99:0b:d9:6b:
a3:1d:7b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:19 2026 by rpki-client