Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/49ee5b-2c63-41c8-b253-91fe4bc65382/1/BumhMJ-7nOBrxOFYvAs1LuTIhEw.mft
File: BumhMJ-7nOBrxOFYvAs1LuTIhEw.mft (raw, json)
Hash identifier: UUTQvR3DNttRfZJCu5xnWq6tntBSxaRSoEQrnGt68uc=
Subject key identifier: 03:8C:3B:03:D5:89:A3:71:9C:A1:EA:A3:54:AE:B0:23:50:86:AB:D8
Authority key identifier: 06:E9:A1:30:9F:BB:9C:E0:6B:C4:E1:58:BC:0B:35:2E:E4:C8:84:4C
Certificate issuer: /CN=06e9a1309fbb9ce06bc4e158bc0b352ee4c8844c
Certificate serial: 01A0CD7EE2B3FF38E2847569FD4F23F0B3F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BumhMJ-7nOBrxOFYvAs1LuTIhEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/49ee5b-2c63-41c8-b253-91fe4bc65382/1/BumhMJ-7nOBrxOFYvAs1LuTIhEw.mft
Manifest number: 019A
Signing time: Wed 23 Sep 2026 09:00:39 +0000
Manifest this update: Wed 23 Sep 2026 09:00:39 +0000
Manifest next update: Thu 24 Sep 2026 09:00:39 +0000
Files and hashes: 1: 2aEEFS3prrbS1dalngjss8ZGfSE.roa (hash: C7TbE8+4+XUsKfnU1RvCd/kxii8rFR7Ig75M/Wtilmg=)
2: BumhMJ-7nOBrxOFYvAs1LuTIhEw.crl (hash: nki+pAJGUX5L6m4tNB0mw6PDNUtahqE3UxUxnc167mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/49ee5b-2c63-41c8-b253-91fe4bc65382/1/BumhMJ-7nOBrxOFYvAs1LuTIhEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/49ee5b-2c63-41c8-b253-91fe4bc65382/1/BumhMJ-7nOBrxOFYvAs1LuTIhEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BumhMJ-7nOBrxOFYvAs1LuTIhEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:e2:b3:ff:38:e2:84:75:69:fd:4f:23:f0:b3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e9a1309fbb9ce06bc4e158bc0b352ee4c8844c
Validity
Not Before: Sep 23 09:00:39 2026 GMT
Not After : Sep 24 09:00:39 2026 GMT
Subject: CN=038c3b03d589a3719ca1eaa354aeb0235086abd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:08:cd:f4:05:59:76:73:5f:aa:3f:ea:d0:
bc:74:aa:64:23:92:28:35:6b:da:ea:e0:e1:79:76:
ed:2f:6c:31:8e:8a:5c:ce:ec:4b:0e:47:34:9c:5f:
a9:4b:61:c7:ae:97:d1:13:19:e8:ce:e9:82:4f:54:
9b:57:e4:64:dd:2a:02:f7:fc:f0:82:09:55:7e:f3:
b9:78:b9:08:83:f7:cd:c0:36:0f:5c:24:50:d8:e8:
83:8b:8b:64:e8:fc:ee:e9:92:57:8f:2c:15:8b:3b:
01:e3:52:f2:93:80:57:1a:15:25:5b:b3:37:ed:fd:
bc:21:89:ac:79:83:5b:49:b6:14:8c:5a:c9:46:fa:
87:c0:04:6a:c1:65:9c:f0:7a:26:67:af:d7:b1:c3:
b2:67:53:98:62:c0:07:59:c3:e8:b9:cf:53:24:28:
3c:b8:57:36:61:85:8d:1d:37:30:e1:4f:de:74:af:
2d:12:94:90:4e:35:d2:9a:9a:b0:c1:1b:3b:20:c6:
60:50:4a:49:39:8a:15:04:70:42:67:db:04:0a:6c:
59:25:17:b7:9c:35:71:8a:a5:b4:e3:5e:cc:27:a0:
08:eb:1d:f9:c8:af:a1:7f:cf:00:b4:2f:03:a8:00:
cb:ae:d0:77:98:ad:38:84:c9:db:4d:6e:86:82:0a:
f0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8C:3B:03:D5:89:A3:71:9C:A1:EA:A3:54:AE:B0:23:50:86:AB:D8
X509v3 Authority Key Identifier:
keyid:06:E9:A1:30:9F:BB:9C:E0:6B:C4:E1:58:BC:0B:35:2E:E4:C8:84:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BumhMJ-7nOBrxOFYvAs1LuTIhEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/49ee5b-2c63-41c8-b253-91fe4bc65382/1/BumhMJ-7nOBrxOFYvAs1LuTIhEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/49ee5b-2c63-41c8-b253-91fe4bc65382/1/BumhMJ-7nOBrxOFYvAs1LuTIhEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3f:0a:44:ca:a2:ae:f2:ec:12:42:6c:1a:dd:e2:0f:bb:a5:
66:d6:dd:dc:cc:23:d4:57:c1:77:e0:b1:3d:fc:3b:aa:cf:40:
5e:55:c9:30:f9:4b:20:b0:6a:50:1c:91:bb:8d:1f:9a:1a:cd:
89:90:7a:70:08:ed:cd:ff:25:35:53:c7:1d:a0:9d:1a:bc:80:
35:11:dd:73:b5:b3:cc:cb:77:d7:2a:62:15:1a:c9:e5:42:da:
c4:d0:78:5a:c9:4e:c8:18:69:67:b4:35:7b:7b:53:7f:19:58:
9a:19:28:9f:0b:05:19:61:6a:65:78:df:e7:70:52:34:3e:a3:
ba:b1:75:c0:a7:e3:26:70:94:0b:40:e9:61:fe:46:a8:68:b2:
80:3d:e2:cd:3c:8c:08:cb:64:1c:cb:ed:0a:b6:12:52:bd:54:
59:41:9e:12:78:90:7d:26:fc:28:4a:54:14:b6:b5:09:1b:5a:
c7:4d:9d:0e:a7:c6:d6:06:69:3b:3e:2b:cb:11:68:3b:2d:35:
de:0b:f3:a3:ec:8e:f4:ba:b7:9b:f2:4b:d4:72:d3:6d:2d:a7:
63:7b:35:f8:bd:61:62:6a:f9:23:c4:8e:5c:99:63:ad:07:c5:
ad:11:44:0d:9d:91:80:78:aa:0b:48:99:dd:17:2a:44:ff:0e:
ec:78:ac:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:44:45 2026 by rpki-client