
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json)
Hash identifier: N0SaeUrqaDbV5tJjOUs1sbBqxTy1e2F396LRz10BadI=
Subject key identifier: 3D:72:9C:97:96:4D:0D:57:C3:06:9B:A2:80:F8:CE:3A:B0:32:36:49
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 019D9962A4654A272AEA2545B0ACFBED435A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
Manifest number: 1627
Signing time: Fri 17 Apr 2026 03:01:11 +0000
Manifest this update: Fri 17 Apr 2026 03:01:11 +0000
Manifest next update: Sat 18 Apr 2026 03:01:11 +0000
Files and hashes: 1: 1-d4L6hcvfvVSJj2al6x8i-6-Aiw.roa (hash: /UHbAWZkwPjrqgnVqWgrTchojit0XWT8TQ+LY6IFuyU=)
2: 6v3_UhJ7MUeUjwMs45OUb0uqJnE.roa (hash: HmoRuDjbo63Mi/Ve6hqQucNjqbfAMk5jwYB8klrtmn4=)
3: 7geGfuYNebN29vuSfOy_GV5rEnI.roa (hash: HCwsGLsuz7RM9sjbDLuG2DbSJJu30k5afVWUwaIVEjo=)
4: B08LenF7yMg-N_h3Vsro44gwUvU.roa (hash: lBlkYBGRq6hhb9CFJXeVSFMPTiDOZk1Hd5NmnUdVAgk=)
5: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: MN2EkcapzpsTYPUhNM8bJ3dMevx9kFwCy160nNaxZ8k=)
6: CYsGcdSH7bcw6ttptcbOdbODOc4.roa (hash: wXe45N0RFs32ccEALNCnd59LOD4wha28MAHYlRsCzAg=)
7: HZdvkaCB4ILKrJSpSkIYqIrfW1k.roa (hash: FQaM849Za5tChtOyzAM+7VK73HDYttogAR0AVk6y8iE=)
8: MNqklcC3mDcAx_nY7EwvhOa8X9U.roa (hash: y5cME2lImwSwJDF/yo1BlC7NlPtCoBG+Fen0gJCa020=)
9: OeSFxPx28HOZ5SP5OFGE4eN9Dkw.roa (hash: IUd/UJp2vz5KGesc4FkG7eW+Uztewk/WazlNqWRZVZg=)
10: P2O8JsbQrSj7hbLlWPhRJkg8f3g.roa (hash: 97KV+nHVxx1mm0wDQuutRXEyv0WrBkuC6RQafxbvZg8=)
11: RYbdj0NLewtXWCgXlYi3OlXXkB4.roa (hash: 81qii9MMa1xqhNFHKwnbqG3tyFuEh9+IuizOP4tFZBA=)
12: RvSp46XarM4KQjsjmd8W8ihdY60.roa (hash: vQ45p3Cs9W4CLKvtCbt/Hgg92ogtLOQSOOU3HtQxzyY=)
13: YLjsu-ME555sTWq6xQaBk12RTHI.roa (hash: iZDrgab1o/HZT8v/s/c94kd+y7+rf2+jsai5MRtDr7U=)
14: YXJuTkaR2hNWDD-AQJZEPPH5ZUM.roa (hash: 0tbVorz/zIP5tFqTzCgpmpkbjskH9+GPr5OhsxgbofA=)
15: beJcu8jp7XoMcK6rAEcUFSDQrYI.roa (hash: zYxTg1jfn9EG78umE8ZucP90B5Y2rJZ1b3uK6DJnlYk=)
16: fAM3pa0EE7jiHrAFo6eOqMsPdek.roa (hash: jl6qmU6yzE54DspheNxyX+IEtosMtIzC14e7gTFFKCk=)
17: nu5qc3FurPA7ene0-Ao16QprmLc.roa (hash: jAdY6e3psk45qZp7fo2Mwz+KQFyicWuxyaHfYwP1ULM=)
18: oOrjHph7LCFfAGNpngQ3mhai8xA.roa (hash: mgAQXj5D8f8s+hAa9EBd/XiB7pdR7qEvc/zDtmhktUc=)
19: wW5pOo-Yi2Fr6-80PQNsGsyzCh0.roa (hash: XuJE9f/EqSb5uZJo5N71rfDUSYnvs1YtjC46AbxvWx4=)
20: wggGh2w-6sQB6ovzilMkq6DwW4c.roa (hash: PBLu8QpYUa8mUZdHc+q4W4ziy06dQNRUZGYN3WcmH2U=)
21: zKosVsnnSwnan5xK-AKXc-6q3RA.roa (hash: AR+C5oOYJwVvPymmFfXk0qR5THoCvoOhDXOz0Nd5wXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:a4:65:4a:27:2a:ea:25:45:b0:ac:fb:ed:43:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Apr 17 03:01:11 2026 GMT
Not After : Apr 18 03:01:11 2026 GMT
Subject: CN=3d729c97964d0d57c3069ba280f8ce3ab0323649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:fd:e6:9a:28:00:38:e1:87:70:57:86:f9:
c7:78:a2:e2:97:72:16:1a:08:7b:77:a5:17:de:a3:
fa:8b:80:b3:e0:87:50:96:2a:46:54:94:49:ae:c0:
22:08:bd:d0:c3:d4:d7:4f:4c:d4:17:77:4a:4e:6e:
da:eb:66:7b:d6:46:11:7b:de:b9:c9:ee:fb:67:06:
fa:5b:23:53:c7:47:16:ad:26:59:73:d7:40:22:b6:
c2:a6:89:e4:ce:b2:88:1f:f4:54:f3:a1:c9:fd:42:
11:73:2a:0e:19:ee:85:92:96:e0:13:c6:84:c0:3b:
cb:9b:c9:10:e9:b2:ca:6d:b5:d4:32:59:5d:a1:d9:
2e:52:ed:4f:15:04:8b:1a:54:14:14:8c:fd:51:2a:
07:67:3b:05:54:99:b8:8c:26:21:b0:5c:29:a8:71:
59:b5:14:04:18:05:a9:00:dc:d9:25:34:37:ec:ac:
f8:2b:91:9a:38:77:a6:d7:98:7c:9a:61:71:ad:a7:
ba:f8:d0:2f:e2:11:38:17:99:5b:2a:c3:2d:a5:13:
e5:98:b4:8f:cb:52:14:0a:9a:c6:63:5a:54:25:1b:
f4:1c:d5:cb:69:38:3a:9f:5d:f6:51:a7:49:48:df:
fa:5d:6f:74:c7:7c:7d:83:00:d2:fc:69:43:6a:4d:
39:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:72:9C:97:96:4D:0D:57:C3:06:9B:A2:80:F8:CE:3A:B0:32:36:49
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:85:ed:60:6e:75:09:ae:80:dc:6e:92:59:a8:fc:4c:81:a1:
79:02:82:99:48:d8:72:7a:1c:97:4e:24:6f:52:62:64:c1:99:
a0:e1:e5:68:ac:34:39:53:96:e9:ea:fa:d3:74:23:1e:8e:b5:
c0:dc:b1:4a:80:74:e9:97:40:4d:f4:e1:17:6c:33:13:d0:0e:
a0:d9:cb:8c:03:a2:e6:c9:77:45:24:ad:3f:ab:94:22:cf:30:
bb:a5:61:65:7d:17:8b:19:9e:b1:61:02:19:a6:32:4b:16:76:
d6:3c:4b:6c:35:e5:3d:37:b5:1d:a8:7f:8e:cb:54:a5:ea:33:
77:77:a2:21:47:56:29:d7:57:7e:ed:6f:53:ab:af:12:1d:83:
2e:ba:ef:b2:8f:c3:bf:fd:2e:52:f4:4c:81:bc:d0:1d:84:a1:
81:6a:c8:8a:94:53:2f:52:16:6d:ae:61:f3:e2:b8:3b:e9:f6:
4f:1c:d5:e2:d1:a3:0f:8c:79:03:fd:33:d9:18:3b:46:4c:ab:
25:eb:1b:57:82:fe:23:ff:30:bd:5e:b8:ec:77:db:f4:5a:98:
b6:06:ef:32:17:de:a6:28:24:93:ee:28:e9:38:c9:23:b3:c1:
64:19:bf:5c:c5:7b:b1:46:12:22:e4:d5:49:50:21:86:9a:a0:
ac:00:0b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:14:01 2026 by rpki-client