Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier: m7qsSOOskNPUOzPnL5s5Ul74eypqdY+8GInWp3lzzZE=
Subject key identifier: 79:E7:F9:46:3D:52:01:A2:CE:FE:8B:88:50:4B:18:1E:CF:8D:0B:5E
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial: 019D98187DC2A91CE70A3E254A5315792035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number: 0B7E
Signing time: Thu 16 Apr 2026 21:00:34 +0000
Manifest this update: Thu 16 Apr 2026 21:00:34 +0000
Manifest next update: Fri 17 Apr 2026 21:00:34 +0000
Files and hashes: 1: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: nXXmSYnYstl14TjiJs39k+ijcLHzlUioYTxwghxWabc=)
2: HOmsaADbKL0_Nb10hk_P_lDZ0_Y.roa (hash: 00uvM1qPEx8W9hFfLWy2Rcng+t4mc0OvA6j8KzFwgTQ=)
3: Xc20FTd_9i1cvP_V-us2VR8rcgw.roa (hash: P+2TwYeHZ5Tcfkj30y1ee92Z2pzwCyx2c2a540pfIM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:7d:c2:a9:1c:e7:0a:3e:25:4a:53:15:79:20:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Validity
Not Before: Apr 16 21:00:34 2026 GMT
Not After : Apr 17 21:00:34 2026 GMT
Subject: CN=79e7f9463d5201a2cefe8b88504b181ecf8d0b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:73:c9:d7:42:c9:0f:dc:c3:7e:28:92:f4:1f:
db:20:53:53:1e:ce:75:11:dc:db:1c:a3:c8:79:80:
4a:99:e5:d4:ea:de:9c:fc:6e:81:63:7a:76:6d:b9:
44:5b:56:fa:b3:fa:8e:81:93:77:dd:aa:2b:11:b9:
80:03:bd:bf:a4:61:96:d1:55:f3:4c:7a:73:55:e3:
db:ad:5e:d7:c1:94:cd:2b:5a:43:ff:65:30:83:d7:
b5:7e:cf:91:55:4d:23:90:1c:ac:bb:c1:b0:7f:d3:
69:6e:b6:3f:d2:d5:02:0a:f7:96:8b:df:64:05:66:
25:3b:6b:9d:f6:de:59:bc:24:fb:a1:60:a2:40:df:
91:a8:fe:4a:c5:c6:58:d3:cc:5d:68:b0:ad:0d:3f:
1c:4f:d7:37:cd:2b:fb:fb:09:a1:47:3f:81:89:2f:
c1:47:2a:ee:3b:ee:2d:d2:b8:cc:41:20:a8:bf:a7:
2a:d7:5b:cb:9c:0a:21:13:52:61:ce:6e:bc:f1:b2:
a0:ef:51:b6:e1:29:37:3d:2b:ec:6b:3d:7f:0f:ba:
36:66:6c:3c:93:99:a9:15:e9:a2:f9:a3:92:1f:2f:
6a:2a:da:24:e8:e7:34:70:91:20:7d:44:c0:a6:d0:
59:31:cc:0c:8d:93:a0:be:6a:3a:40:34:35:43:00:
06:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E7:F9:46:3D:52:01:A2:CE:FE:8B:88:50:4B:18:1E:CF:8D:0B:5E
X509v3 Authority Key Identifier:
keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3b:14:85:9d:01:39:44:77:dc:b6:e7:2b:e5:37:f6:58:cb:
44:ca:04:a0:63:d2:34:ed:f9:b2:a5:84:82:35:7e:df:13:60:
7a:4b:70:bc:a3:a0:a5:b8:ac:db:43:6e:46:94:f3:72:ea:00:
b8:6f:46:41:62:c9:5c:b0:ba:f7:79:97:c8:26:d0:ad:86:1b:
b0:10:97:27:a5:a3:a1:68:e5:58:10:ee:65:79:a1:eb:eb:e1:
51:6a:1b:a1:38:4d:a9:72:34:d4:55:11:fd:5f:c6:45:b0:be:
cb:b1:d5:89:35:81:16:5f:01:bf:22:65:0b:12:c6:90:8d:20:
48:a1:4d:f7:ba:21:80:80:bf:a1:93:c1:5b:b8:ae:9a:bd:e0:
0f:5c:af:3b:7a:66:a1:2a:3e:31:8f:a0:72:04:0f:df:82:e2:
52:55:8d:cb:18:54:63:9d:32:d4:99:e9:d7:4e:ab:42:25:86:
5a:79:0c:19:51:a2:80:d0:9d:a5:10:a8:f4:67:e6:27:7e:da:
cf:a3:05:e0:8b:a7:44:39:58:d3:0b:04:28:42:a5:bb:35:3b:
49:f8:0b:12:55:e1:90:89:23:5a:0c:79:02:74:9c:b3:b5:9a:
fd:49:f6:64:97:f2:06:d7:06:ed:4e:a8:a5:5e:2a:96:63:71:
bd:dc:9a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:32:04 2026 by rpki-client