
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json)
Hash identifier: CPYaR6+cIiuxhNwYIHLcmKaU9z/BiWf7S0i1oItBN1A=
Subject key identifier: 87:29:74:23:77:64:11:EE:D2:E5:28:B7:5E:F0:8F:1E:46:C3:6E:F5
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 019EC0DACAB092C5155C61657A5C598C46AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
Manifest number: 16C0
Signing time: Sat 13 Jun 2026 12:00:24 +0000
Manifest this update: Sat 13 Jun 2026 12:00:24 +0000
Manifest next update: Sun 14 Jun 2026 12:00:24 +0000
Files and hashes: 1: 1-d4L6hcvfvVSJj2al6x8i-6-Aiw.roa (hash: /UHbAWZkwPjrqgnVqWgrTchojit0XWT8TQ+LY6IFuyU=)
2: 6v3_UhJ7MUeUjwMs45OUb0uqJnE.roa (hash: HmoRuDjbo63Mi/Ve6hqQucNjqbfAMk5jwYB8klrtmn4=)
3: 7geGfuYNebN29vuSfOy_GV5rEnI.roa (hash: HCwsGLsuz7RM9sjbDLuG2DbSJJu30k5afVWUwaIVEjo=)
4: B08LenF7yMg-N_h3Vsro44gwUvU.roa (hash: lBlkYBGRq6hhb9CFJXeVSFMPTiDOZk1Hd5NmnUdVAgk=)
5: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: v0l+p5i0fTnTGNb4hTrHVWl3WTnkaBFW+F5y4yoyEK8=)
6: CYsGcdSH7bcw6ttptcbOdbODOc4.roa (hash: wXe45N0RFs32ccEALNCnd59LOD4wha28MAHYlRsCzAg=)
7: HZdvkaCB4ILKrJSpSkIYqIrfW1k.roa (hash: FQaM849Za5tChtOyzAM+7VK73HDYttogAR0AVk6y8iE=)
8: MNqklcC3mDcAx_nY7EwvhOa8X9U.roa (hash: y5cME2lImwSwJDF/yo1BlC7NlPtCoBG+Fen0gJCa020=)
9: OeSFxPx28HOZ5SP5OFGE4eN9Dkw.roa (hash: IUd/UJp2vz5KGesc4FkG7eW+Uztewk/WazlNqWRZVZg=)
10: P2O8JsbQrSj7hbLlWPhRJkg8f3g.roa (hash: 97KV+nHVxx1mm0wDQuutRXEyv0WrBkuC6RQafxbvZg8=)
11: RYbdj0NLewtXWCgXlYi3OlXXkB4.roa (hash: 81qii9MMa1xqhNFHKwnbqG3tyFuEh9+IuizOP4tFZBA=)
12: RvSp46XarM4KQjsjmd8W8ihdY60.roa (hash: vQ45p3Cs9W4CLKvtCbt/Hgg92ogtLOQSOOU3HtQxzyY=)
13: YLjsu-ME555sTWq6xQaBk12RTHI.roa (hash: iZDrgab1o/HZT8v/s/c94kd+y7+rf2+jsai5MRtDr7U=)
14: YXJuTkaR2hNWDD-AQJZEPPH5ZUM.roa (hash: 0tbVorz/zIP5tFqTzCgpmpkbjskH9+GPr5OhsxgbofA=)
15: beJcu8jp7XoMcK6rAEcUFSDQrYI.roa (hash: zYxTg1jfn9EG78umE8ZucP90B5Y2rJZ1b3uK6DJnlYk=)
16: fAM3pa0EE7jiHrAFo6eOqMsPdek.roa (hash: jl6qmU6yzE54DspheNxyX+IEtosMtIzC14e7gTFFKCk=)
17: nu5qc3FurPA7ene0-Ao16QprmLc.roa (hash: jAdY6e3psk45qZp7fo2Mwz+KQFyicWuxyaHfYwP1ULM=)
18: oOrjHph7LCFfAGNpngQ3mhai8xA.roa (hash: mgAQXj5D8f8s+hAa9EBd/XiB7pdR7qEvc/zDtmhktUc=)
19: wW5pOo-Yi2Fr6-80PQNsGsyzCh0.roa (hash: XuJE9f/EqSb5uZJo5N71rfDUSYnvs1YtjC46AbxvWx4=)
20: wggGh2w-6sQB6ovzilMkq6DwW4c.roa (hash: PBLu8QpYUa8mUZdHc+q4W4ziy06dQNRUZGYN3WcmH2U=)
21: zKosVsnnSwnan5xK-AKXc-6q3RA.roa (hash: AR+C5oOYJwVvPymmFfXk0qR5THoCvoOhDXOz0Nd5wXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:ca:b0:92:c5:15:5c:61:65:7a:5c:59:8c:46:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jun 13 12:00:24 2026 GMT
Not After : Jun 14 12:00:24 2026 GMT
Subject: CN=87297423776411eed2e528b75ef08f1e46c36ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:bb:03:16:e8:15:29:4f:55:37:27:18:54:
bd:c2:7a:a1:01:c7:af:9d:87:b4:15:2b:be:1c:15:
84:b3:85:8b:24:d7:e1:f2:e0:a3:60:e0:bd:ff:a0:
d3:69:f6:ff:1b:fa:4d:0a:15:fb:e6:0a:c8:e2:da:
6e:9f:88:e6:18:ea:a7:8f:ab:9f:0e:ae:2c:1c:5e:
63:1a:b4:d7:b2:5f:02:81:bc:c8:ba:ef:55:6c:11:
ff:7d:7b:3b:a6:72:0f:f4:2e:76:51:38:bc:82:ad:
58:86:dc:32:ac:07:3a:91:92:5f:4a:87:a9:15:00:
1c:5b:48:bf:7b:49:3b:58:9e:31:34:a8:62:b5:a6:
8e:84:ed:0a:46:ce:5a:46:2d:83:c6:7f:83:7a:65:
df:d9:2e:5d:e1:11:86:10:97:f2:6e:7e:3b:dd:25:
d9:d6:8e:16:0b:fe:5c:a0:d8:4c:aa:39:93:3b:a1:
13:20:83:0d:9f:ee:f2:1c:5f:c6:b1:71:68:1a:28:
70:2d:dd:cd:b1:f8:a4:58:57:dd:3e:f6:ae:88:d1:
21:0d:2e:1d:6f:c6:2a:e7:57:ab:c1:a7:1f:90:50:
9a:35:e7:c5:76:ee:c3:f7:cf:6c:ca:03:08:17:b5:
94:35:62:f1:93:5b:5e:fa:49:e3:b2:15:99:2d:f5:
2b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:29:74:23:77:64:11:EE:D2:E5:28:B7:5E:F0:8F:1E:46:C3:6E:F5
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0f:64:b5:c5:df:86:75:00:74:35:ba:3a:b9:44:77:79:94:
b1:c9:d7:1b:79:07:e4:6f:cc:e3:31:90:20:bf:ac:13:0d:96:
f3:29:3a:f0:5f:71:7e:2d:47:ae:96:b3:9a:57:ee:2c:a3:44:
a0:67:da:f7:94:3c:c8:93:44:1e:51:77:d4:4c:72:41:f7:94:
87:de:bb:99:57:d8:d9:68:ca:e7:12:a4:67:bd:06:6e:8b:af:
42:b9:6a:7c:e9:f2:e3:fd:6a:14:2f:5b:62:42:49:c3:2f:ba:
47:b2:3c:5e:93:82:15:2f:da:16:84:ef:f2:cc:3f:3d:e2:ee:
67:74:2b:cb:c1:4e:01:01:a0:5e:dc:8c:27:2a:ad:43:1f:e4:
06:b0:9d:3b:14:f9:bc:1b:f6:db:6e:7a:a7:e3:87:c4:1f:ab:
18:51:09:dd:3f:01:ad:08:db:6e:18:27:ac:29:25:63:f9:66:
c7:fa:9c:ff:29:cd:f7:85:e0:7a:1f:4e:18:f7:d8:7d:2b:25:
a6:54:3a:40:91:91:00:56:9b:d3:48:fc:e2:66:bb:ba:b4:02:
d5:a0:8d:6b:81:bb:2a:f0:89:dc:54:74:dc:7e:d1:f3:b9:51:
58:9e:50:99:1d:1b:9e:5b:aa:ec:67:f6:cb:56:98:ea:f6:0c:
c5:d4:bf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:57:59 2026 by rpki-client