
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
File: BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json)
Hash identifier: QlPopr8Ii7PrjmzDzYfARD95qT9HTCR5aScevjAEJ3I=
Subject key identifier: 3A:51:C3:4E:94:27:80:B6:8D:AA:D5:B7:F6:F0:8C:53:64:95:C9:BF
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 019EBEED43B8B546B425BADF376BA2B1BFF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
Manifest number: 1A6E
Signing time: Sat 13 Jun 2026 03:01:20 +0000
Manifest this update: Sat 13 Jun 2026 03:01:20 +0000
Manifest next update: Sun 14 Jun 2026 03:01:20 +0000
Files and hashes: 1: 19Q2Dwhtepvh3WfcRXocelqULL8.roa (hash: 5gim+c2a2kpRDHritwN6RumGls9psmp/ew2vMiVkt54=)
2: 4SJJucH40Dscf3Ue62wtU0DfH6E.roa (hash: QGCBTFVXrzql7PtcPo7oGZ6zg9NODVzu4Qj7AspLapc=)
3: 9NFbvxj2w7VM6vxKq1Roz_jojjQ.roa (hash: kit6Kwkn9tJ2JznDgHVoh92jAz03quG3UuogXP7lLQY=)
4: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: JttjJMoK9/YJDBxEkY/ZTdQFnNlzq7QjYg84ngo+ikA=)
5: Fm8UQDDxRj3AapGVONseve1Vu_c.roa (hash: /MMrY/Cw2vuv3Ihg0AIYNFIDKJbp4cDD3gVv3uf72Gk=)
6: GM3ERJU6CIy7dwdH0zdNwprJcyY.roa (hash: IlzjX1IkwyvBmzjj9sSoXNpn+4Aebe2rR4YjxBC4Rpw=)
7: HOHhNiuwB0cMh5RUFF-1lXt5zw8.roa (hash: k0AGLs0YgoPPmCz6XJ6TT1Z/0Wgwq5Qa6Ym6t+Mb83g=)
8: HmuiSy6DiqyFIS3hKu7LdivnQl0.roa (hash: AUDFtOT4GZ2PlVwxPCH5qqp0l2hQvma3gFblT+w1Ox0=)
9: IKu2yGBkoazXpkiiazb1p4jf3OI.roa (hash: sGPG+CicCuj6ii9AJ1UODtX4hYRlCD8JM7C2FLI0Fac=)
10: RahpEOjDk8JGqVaMnjYNHjqMCDk.roa (hash: 3i16wtfdxMwVP4jwU43s2Etd+QzTAEC6HDDbzF8Ohw4=)
11: TC_eT-_uQmNc7oH25j9ouSW_pbQ.roa (hash: tFzELYSe05eXp55I4gzQwEHo9uvcyGGItcMS2z7uaLI=)
12: oe9__c4vQI-1sLDyADedRP1CO-k.roa (hash: oY6L5eGC8aMPjhIdr6obVmsLpQESXuitNzVikpRUca0=)
13: pXmxylidYiS8qdJ3VaZ9yLskNbE.roa (hash: TusGBQalo9CLc6zboQZGITSpw51x7npY2VYZcmB0+eY=)
14: vOegqKH11j2ljvuv3PcKJ5eKLGQ.roa (hash: Xifos647golhy2/qMNU8LvVXxPFJdsELgOMybMZy3CM=)
15: xBCJBwVBWVhFXMpZnk1hhNHEtus.roa (hash: JhFeug15ySPa9A1JPmxH1r0jpNDX2NFdPlUO6jS53AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:43:b8:b5:46:b4:25:ba:df:37:6b:a2:b1:bf:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jun 13 03:01:20 2026 GMT
Not After : Jun 14 03:01:20 2026 GMT
Subject: CN=3a51c34e942780b68daad5b7f6f08c536495c9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:99:ce:7e:dd:94:a7:5d:5e:a8:79:cf:0a:
bd:6e:52:fa:95:42:64:cc:1c:dc:23:e5:e0:6e:cd:
a6:99:ee:e3:2e:04:5a:88:13:98:0d:c1:63:00:f9:
25:58:43:a3:a5:69:2e:a9:39:d8:4e:fd:a1:d4:c4:
31:1a:64:b6:5d:ed:66:01:c4:91:89:04:15:a6:60:
76:8e:ff:f2:84:ab:1f:b7:4b:3d:96:3d:84:15:98:
95:98:b5:69:48:d2:49:11:2d:d2:ed:d6:02:ff:10:
37:15:09:6e:26:08:87:f7:95:c0:25:c3:d1:2f:04:
d7:aa:49:df:bc:24:28:a4:dd:19:ba:16:88:80:e0:
21:93:5d:4c:a4:e1:f6:ce:7a:d5:95:b2:b0:10:b0:
9c:8e:f7:92:4c:3d:23:ef:1b:32:ff:fa:78:d4:af:
88:06:2e:28:1e:2b:23:35:8f:b4:f5:8c:1b:68:d8:
b3:b2:0c:fc:28:a6:aa:a3:b6:13:a9:88:54:00:7f:
f1:c1:6b:a2:e8:70:cf:68:1a:2d:dd:0d:f3:c4:80:
a7:1c:d5:3f:23:15:85:85:ed:a2:4b:d5:11:da:1d:
0f:7b:89:e8:06:d0:f1:c8:cb:b9:00:82:68:bd:c5:
89:1c:51:7d:b8:2e:7d:a0:78:16:74:9e:b7:0b:bc:
d0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:51:C3:4E:94:27:80:B6:8D:AA:D5:B7:F6:F0:8C:53:64:95:C9:BF
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e2:41:79:eb:5f:ab:e2:35:5b:95:2d:2b:84:06:ea:03:8a:
27:71:04:02:71:8e:9d:89:af:9b:37:60:b3:f6:8e:d8:3e:87:
fe:49:88:b8:2f:2f:01:d9:1b:d5:0d:16:fd:74:ac:88:24:ba:
c9:34:49:ed:78:68:ce:63:29:07:c1:e6:42:54:0f:f6:b5:6b:
1e:1d:80:98:1b:64:ef:60:f5:a3:58:3f:7d:56:92:58:fb:b6:
b1:f9:a6:2e:c0:11:dc:48:c6:ea:49:4a:31:53:b4:0c:5f:32:
6c:59:95:e8:46:44:ff:28:2e:04:67:5f:f8:10:c7:e1:b4:7a:
d9:62:55:b7:c5:3b:b1:89:b9:3c:97:76:dd:f2:51:41:7b:8a:
6a:d3:a3:b4:21:42:c5:2e:f0:0d:12:dd:77:7b:2b:0d:76:7e:
f6:75:84:b0:07:93:6b:e5:dd:6d:aa:32:e0:e2:73:d6:23:d2:
86:de:96:3b:a1:f8:2c:c6:4e:cf:d5:af:eb:74:f4:a6:53:b0:
c6:e3:03:d5:f0:3a:24:e2:d7:be:be:a2:aa:5b:2c:af:b1:06:
c0:61:b2:c9:d7:8e:8c:32:d7:1f:20:fe:5d:49:59:1d:fd:06:
c2:3d:bb:5a:46:51:c9:c9:2d:a7:ed:4b:3d:d9:98:9c:81:d1:
94:88:eb:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7UO4tUa0JbrfN2uisb/4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2
NGIyMGYwHhcNMjYwNjEzMDMwMTIwWhcNMjYwNjE0MDMwMTIwWjAzMTEwLwYDVQQD
EygzYTUxYzM0ZTk0Mjc4MGI2OGRhYWQ1YjdmNmYwOGM1MzY0OTVjOWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR2Zzn7dlKddXqh5zwq9blL6lUJk
zBzcI+Xgbs2mme7jLgRaiBOYDcFjAPklWEOjpWkuqTnYTv2h1MQxGmS2Xe1mAcSR
iQQVpmB2jv/yhKsft0s9lj2EFZiVmLVpSNJJES3S7dYC/xA3FQluJgiH95XAJcPR
LwTXqknfvCQopN0ZuhaIgOAhk11MpOH2znrVlbKwELCcjveSTD0j7xsy//p41K+I
Bi4oHisjNY+09YwbaNizsgz8KKaqo7YTqYhUAH/xwWui6HDPaBot3Q3zxICnHNU/
IxWFhe2iS9UR2h0Pe4noBtDxyMu5AIJovcWJHFF9uC59oHgWdJ63C7zQOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpRw06UJ4C2jarVt/bwjFNklcm/MB8GA1UdIwQY
MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct
NDkwNTI0M2JjODI4LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4
LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+JBeetf
q+I1W5UtK4QG6gOKJ3EEAnGOnYmvmzdgs/aO2D6H/kmIuC8vAdkb1Q0W/XSsiCS6
yTRJ7XhozmMpB8HmQlQP9rVrHh2AmBtk72D1o1g/fVaSWPu2sfmmLsAR3EjG6klK
MVO0DF8ybFmV6EZE/yguBGdf+BDH4bR62WJVt8U7sYm5PJd23fJRQXuKatOjtCFC
xS7wDRLdd3srDXZ+9nWEsAeTa+Xdbaoy4OJz1iPSht6WO6H4LMZOz9Wv63T0plOw
xuMD1fA6JOLXvr6iqlssr7EGwGGyydeOjDLXHyD+XUlZHf0Gwj27WkZRycktp+1L
PdmYnIHRlIjrsg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:17:52 2026 by rpki-client