
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
File: BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json)
Hash identifier: FlJ6WGhMUtLmPZIcNAw5tXrfJmYemPVnkk5WgaW60bc=
Subject key identifier: AC:DE:15:D1:F0:2B:2F:27:6C:7C:ED:17:04:5B:09:B2:80:23:C0:EC
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 019DA41D13C2E8B139853C4692EBDB3BFA5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
Manifest number: 19DA
Signing time: Sun 19 Apr 2026 05:01:02 +0000
Manifest this update: Sun 19 Apr 2026 05:01:02 +0000
Manifest next update: Mon 20 Apr 2026 05:01:02 +0000
Files and hashes: 1: 19Q2Dwhtepvh3WfcRXocelqULL8.roa (hash: 5gim+c2a2kpRDHritwN6RumGls9psmp/ew2vMiVkt54=)
2: 4SJJucH40Dscf3Ue62wtU0DfH6E.roa (hash: QGCBTFVXrzql7PtcPo7oGZ6zg9NODVzu4Qj7AspLapc=)
3: 9NFbvxj2w7VM6vxKq1Roz_jojjQ.roa (hash: kit6Kwkn9tJ2JznDgHVoh92jAz03quG3UuogXP7lLQY=)
4: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: KItxojRiScswPuEBkjbB5N64n9duCNelDNOsjElpUJo=)
5: BccvOb5tz2ziFEK85ZOpWUCZhZk.roa (hash: FnA1RabC7GLAVqBqv4NkvPpvO4WhD2fmQEx4Eoys9zY=)
6: Fm8UQDDxRj3AapGVONseve1Vu_c.roa (hash: /MMrY/Cw2vuv3Ihg0AIYNFIDKJbp4cDD3gVv3uf72Gk=)
7: GM3ERJU6CIy7dwdH0zdNwprJcyY.roa (hash: IlzjX1IkwyvBmzjj9sSoXNpn+4Aebe2rR4YjxBC4Rpw=)
8: HOHhNiuwB0cMh5RUFF-1lXt5zw8.roa (hash: k0AGLs0YgoPPmCz6XJ6TT1Z/0Wgwq5Qa6Ym6t+Mb83g=)
9: HmuiSy6DiqyFIS3hKu7LdivnQl0.roa (hash: AUDFtOT4GZ2PlVwxPCH5qqp0l2hQvma3gFblT+w1Ox0=)
10: IKu2yGBkoazXpkiiazb1p4jf3OI.roa (hash: sGPG+CicCuj6ii9AJ1UODtX4hYRlCD8JM7C2FLI0Fac=)
11: PQMgW1HRfhVCC4A0rqKkLRtSKgI.roa (hash: NWh4sEhWXJV1zztcEC8I1G7mQeHGMVng7Y6sdknUnN0=)
12: RahpEOjDk8JGqVaMnjYNHjqMCDk.roa (hash: 3i16wtfdxMwVP4jwU43s2Etd+QzTAEC6HDDbzF8Ohw4=)
13: TC_eT-_uQmNc7oH25j9ouSW_pbQ.roa (hash: tFzELYSe05eXp55I4gzQwEHo9uvcyGGItcMS2z7uaLI=)
14: fuRxNjIE-qr9KmN8J_hE59ecEq4.roa (hash: 3CHRC0a/akTbPAJFu8OuUkQRKmDMyUzzK4GIXg8sWws=)
15: oe9__c4vQI-1sLDyADedRP1CO-k.roa (hash: oY6L5eGC8aMPjhIdr6obVmsLpQESXuitNzVikpRUca0=)
16: pXmxylidYiS8qdJ3VaZ9yLskNbE.roa (hash: TusGBQalo9CLc6zboQZGITSpw51x7npY2VYZcmB0+eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:13:c2:e8:b1:39:85:3c:46:92:eb:db:3b:fa:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Apr 19 05:01:02 2026 GMT
Not After : Apr 20 05:01:02 2026 GMT
Subject: CN=acde15d1f02b2f276c7ced17045b09b28023c0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:01:b5:09:07:8b:85:64:68:1d:c3:f2:11:
98:c8:6a:74:44:f0:d4:17:08:f3:c3:4b:95:7f:5f:
32:34:66:99:38:18:18:72:21:05:78:cf:41:27:de:
0c:50:31:ac:17:88:bf:94:37:57:d5:80:14:cb:80:
07:b1:c1:3c:3c:d3:00:59:f1:fa:71:61:ed:90:cc:
15:e0:2a:13:d5:36:0c:66:51:4f:2d:bf:7d:df:e2:
05:ea:a8:d0:f2:68:aa:a2:b7:5a:c7:72:a6:35:ae:
a9:bc:69:b3:b0:db:26:8e:70:ee:24:a5:5f:5b:70:
00:19:d1:82:db:6c:8c:97:68:a2:35:df:ab:f2:4f:
4e:19:43:3b:f4:59:63:cb:cf:4a:9c:ac:e8:22:cb:
07:01:48:08:ce:70:62:cf:92:5a:b8:66:7a:a4:fa:
6a:5d:a4:c5:7e:39:78:84:0d:15:03:72:d2:1a:03:
3c:6e:07:26:41:de:c2:46:fc:3c:11:3f:ad:56:e1:
94:ed:b5:22:11:7f:2c:65:f3:73:0a:74:a3:75:0d:
df:67:0a:d8:00:a1:ce:c2:a1:25:5d:73:58:20:83:
cf:9b:af:94:56:67:78:8e:86:21:e2:7b:b3:4f:59:
cb:a2:67:13:b4:4b:31:ac:1f:cd:80:19:6f:ec:27:
7f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DE:15:D1:F0:2B:2F:27:6C:7C:ED:17:04:5B:09:B2:80:23:C0:EC
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:02:03:3c:ba:40:78:bc:12:f1:ad:a8:b4:35:fd:a8:06:4c:
51:e1:c9:8e:3e:18:c0:7e:01:0c:4f:19:34:7e:45:5d:3d:b6:
ba:f1:00:b8:38:27:78:52:80:3e:49:a5:c6:36:81:74:d1:be:
ce:fd:4f:c6:62:7a:0d:00:ed:08:54:97:1e:01:da:55:41:fa:
3d:e8:99:7c:8d:a0:5d:f1:81:f2:76:c3:d3:53:7d:ac:25:18:
ea:d4:c4:81:dd:f3:21:23:56:07:af:59:51:59:b4:65:77:96:
2b:16:ac:d7:2c:07:cb:00:0b:bc:d2:aa:0b:59:ba:18:e9:14:
8a:10:3b:37:5d:eb:bb:06:f1:a3:bb:db:68:81:e8:0d:4c:74:
aa:55:ec:e6:48:80:83:0a:0d:53:9e:04:f2:b6:22:1a:bb:00:
58:dd:32:64:1c:20:c6:2e:f6:e4:2f:86:13:0d:19:df:19:5c:
69:30:89:36:4c:2a:62:86:af:df:ce:cb:89:62:db:a6:c7:cd:
02:f8:c9:e5:2c:d9:99:9e:65:b6:69:da:32:54:75:cf:b3:4e:
a8:dc:56:c6:ec:d5:73:38:06:21:c0:ba:84:a1:98:b8:9f:73:
12:27:0d:40:34:e7:95:96:e3:94:da:a2:18:ea:bc:27:34:01:
cf:4b:eb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:20:40 2026 by rpki-client