Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/49ee5b-2c63-41c8-b253-91fe4bc65382/1/BumhMJ-7nOBrxOFYvAs1LuTIhEw.mft
File: BumhMJ-7nOBrxOFYvAs1LuTIhEw.mft (raw, json)
Hash identifier: NsbnmCS9joEdS/Ne+OMl7tUjMZvwuQfQgyygGijRsds=
Subject key identifier: 56:A8:A2:7E:EF:D6:72:4E:EB:F6:32:77:EC:14:86:96:12:CF:84:C7
Authority key identifier: 06:E9:A1:30:9F:BB:9C:E0:6B:C4:E1:58:BC:0B:35:2E:E4:C8:84:4C
Certificate issuer: /CN=06e9a1309fbb9ce06bc4e158bc0b352ee4c8844c
Certificate serial: 019E1C1014F1454C22CD981BA517F1CF4E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BumhMJ-7nOBrxOFYvAs1LuTIhEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/49ee5b-2c63-41c8-b253-91fe4bc65382/1/BumhMJ-7nOBrxOFYvAs1LuTIhEw.mft
Manifest number: 35
Signing time: Tue 12 May 2026 12:01:16 +0000
Manifest this update: Tue 12 May 2026 12:01:16 +0000
Manifest next update: Wed 13 May 2026 12:01:16 +0000
Files and hashes: 1: 2aEEFS3prrbS1dalngjss8ZGfSE.roa (hash: C7TbE8+4+XUsKfnU1RvCd/kxii8rFR7Ig75M/Wtilmg=)
2: BumhMJ-7nOBrxOFYvAs1LuTIhEw.crl (hash: gx3uikl1oyeY8AtkGmyYagREj6ir2dWXwZ1GM99GqPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/49ee5b-2c63-41c8-b253-91fe4bc65382/1/BumhMJ-7nOBrxOFYvAs1LuTIhEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/49ee5b-2c63-41c8-b253-91fe4bc65382/1/BumhMJ-7nOBrxOFYvAs1LuTIhEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BumhMJ-7nOBrxOFYvAs1LuTIhEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:14:f1:45:4c:22:cd:98:1b:a5:17:f1:cf:4e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e9a1309fbb9ce06bc4e158bc0b352ee4c8844c
Validity
Not Before: May 12 12:01:16 2026 GMT
Not After : May 13 12:01:16 2026 GMT
Subject: CN=56a8a27eefd6724eebf63277ec14869612cf84c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b6:2a:b4:8f:ce:a6:20:82:51:c6:12:94:1c:
49:98:11:8c:2d:51:59:27:bf:db:62:8e:46:b3:6a:
be:90:09:2d:ba:7b:c7:33:bb:67:07:e9:dc:6c:8f:
93:38:e1:b6:44:0c:14:10:f5:57:75:03:0b:6b:8e:
d1:f2:00:47:cc:1d:e8:a7:40:e1:a0:4b:6f:32:71:
21:23:08:89:bd:2d:69:d9:2f:db:13:dd:3f:a3:0b:
3a:b8:f7:a1:36:ac:31:dd:a5:f8:8c:e2:4c:b5:f3:
3a:f8:fc:d8:7c:cc:28:c9:3b:cb:31:f7:ba:40:6b:
6a:0e:82:9e:68:d2:82:6a:b1:ec:4c:88:bb:68:8e:
f9:52:e0:ea:4b:1f:35:92:63:0b:d9:91:90:4d:71:
c1:fa:32:bb:7c:00:4f:4c:6b:29:e9:4d:f8:5e:8a:
de:e4:26:c1:28:4f:a1:41:92:ce:ee:6f:0c:cf:22:
42:69:9d:73:f9:bf:8a:d0:1b:40:00:df:a2:dc:b9:
8a:4e:a6:4a:b7:27:ad:cc:79:29:d8:34:10:7e:7f:
7b:07:83:62:2f:7a:6e:bf:e7:2a:fc:25:b7:38:b9:
57:53:8a:ca:72:6d:cb:0d:74:c0:78:ab:bd:e4:d5:
d1:c0:25:ee:c6:e9:da:22:af:3d:6b:b9:62:da:bd:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A8:A2:7E:EF:D6:72:4E:EB:F6:32:77:EC:14:86:96:12:CF:84:C7
X509v3 Authority Key Identifier:
keyid:06:E9:A1:30:9F:BB:9C:E0:6B:C4:E1:58:BC:0B:35:2E:E4:C8:84:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BumhMJ-7nOBrxOFYvAs1LuTIhEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/49ee5b-2c63-41c8-b253-91fe4bc65382/1/BumhMJ-7nOBrxOFYvAs1LuTIhEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/49ee5b-2c63-41c8-b253-91fe4bc65382/1/BumhMJ-7nOBrxOFYvAs1LuTIhEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:08:11:22:d9:a5:42:26:77:de:27:83:b1:6a:4b:19:5b:42:
26:e8:db:2c:4d:fb:98:60:6d:08:eb:16:77:f6:6f:70:33:0d:
fd:a4:d5:b2:61:68:63:49:17:8a:aa:0a:d9:3d:41:bc:6c:4a:
ab:f7:7e:56:6f:a9:97:db:a6:6d:50:af:ec:e2:29:43:af:6f:
1e:88:5b:40:b1:12:39:f0:ab:e2:32:41:d3:60:d6:7e:c0:5c:
9a:eb:f0:d3:42:95:ab:05:d5:2e:4d:40:cb:50:74:a9:67:c8:
20:f9:2c:04:af:4b:6c:71:eb:5e:f1:d5:aa:c7:4b:05:36:eb:
85:6d:5e:9c:d0:b1:bb:49:e6:66:d4:91:2b:6a:78:f7:c6:cb:
66:27:3d:87:de:c7:61:2f:db:b7:eb:3b:3c:e1:89:1a:d7:99:
94:c5:f7:60:e9:5c:54:b4:70:f4:82:dd:95:50:34:ec:de:78:
2e:79:0a:c1:82:3a:41:32:ab:dc:ca:31:c0:7f:85:03:12:22:
c4:4e:c6:08:ab:ad:af:42:f3:2b:73:39:68:34:7c:b5:7d:99:
9f:38:ec:a2:a2:be:22:b6:02:6a:f9:13:f1:f5:21:ae:a4:e1:
db:b1:e6:01:90:ba:cc:57:ba:19:5e:19:0a:8d:1c:8a:75:1a:
a2:f1:2c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:08:01 2026 by rpki-client