
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier: 4sv2nxdda/h0u280DLHIcJOeq1RgoUD+BVZJWyEcjLQ=
Subject key identifier: 37:31:DD:14:69:01:5F:F2:1D:C8:0A:A3:56:84:15:08:60:A9:50:79
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial: 01A0C77CC93B499AD36A91F0A12752FA0469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number: 0D25
Signing time: Tue 22 Sep 2026 05:00:38 +0000
Manifest this update: Tue 22 Sep 2026 05:00:38 +0000
Manifest next update: Wed 23 Sep 2026 05:00:38 +0000
Files and hashes: 1: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: haZQsc2tZRKttLKVcAXRQRkv1hI8/mKNqIWISJr9T2E=)
2: HOmsaADbKL0_Nb10hk_P_lDZ0_Y.roa (hash: 00uvM1qPEx8W9hFfLWy2Rcng+t4mc0OvA6j8KzFwgTQ=)
3: Xc20FTd_9i1cvP_V-us2VR8rcgw.roa (hash: P+2TwYeHZ5Tcfkj30y1ee92Z2pzwCyx2c2a540pfIM4=)
4: sYAHM3dA9t7sL8KtPSRxfoaqowk.roa (hash: s0PVxl/MfJ/lQ4s/RbNRindGurEhHhc3J5Bljq8tw4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:c9:3b:49:9a:d3:6a:91:f0:a1:27:52:fa:04:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Validity
Not Before: Sep 22 05:00:38 2026 GMT
Not After : Sep 23 05:00:38 2026 GMT
Subject: CN=3731dd1469015ff21dc80aa35684150860a95079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:ad:fb:ff:e2:92:14:2e:b1:37:6e:39:9b:
41:1b:c6:98:ad:b7:50:4e:82:0e:7b:d7:ea:d7:0b:
82:57:f8:f8:8c:48:7a:00:eb:45:ba:81:07:2c:64:
ba:fb:36:06:07:2f:c2:2e:f8:9c:27:f5:34:e9:e9:
71:7d:bf:11:fe:91:b5:e4:78:23:82:a8:17:1e:91:
fc:b4:54:56:f1:69:1a:eb:07:af:23:2b:4c:cf:b2:
d8:85:39:31:06:ef:ca:62:00:cd:d2:81:82:52:50:
db:9e:1e:2d:b4:33:93:2f:4c:96:7c:78:b9:33:2d:
45:27:c7:81:7c:66:41:51:5e:3a:69:e0:60:50:4d:
32:f9:8b:ee:c4:6a:48:53:f0:2b:b0:b4:d3:d3:9b:
15:54:f5:f1:08:1e:a8:3a:40:d7:7d:81:e3:30:2f:
c6:c0:9c:eb:ca:17:20:57:ee:4d:25:1d:04:af:2d:
5c:de:bb:50:0e:d6:ff:4a:7d:a9:81:20:c9:21:45:
17:e7:ef:ef:6d:c9:e8:e5:4b:92:74:f1:de:02:1e:
0e:c7:20:0a:cd:1c:da:a2:b5:b2:de:35:fd:74:72:
c7:ae:e4:a6:bf:97:02:ac:14:42:5c:f2:93:2a:13:
54:0e:06:06:f9:0e:47:a2:fa:43:df:ef:d3:e0:c8:
52:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:31:DD:14:69:01:5F:F2:1D:C8:0A:A3:56:84:15:08:60:A9:50:79
X509v3 Authority Key Identifier:
keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:05:51:a0:0f:03:a0:b1:35:c3:cf:e4:fc:ac:99:c0:73:3e:
0f:a2:94:d8:57:3f:29:8a:34:06:7c:7b:2f:13:f0:d8:a3:c1:
99:6e:4e:3b:7f:ef:c8:2c:5e:eb:1c:cb:41:5a:b8:c3:7a:80:
13:65:14:76:06:3e:39:c8:26:db:9b:9c:fb:fd:9a:e2:ed:6c:
b3:d7:4f:1e:d4:31:dc:04:6d:4b:61:de:af:5d:f3:1e:fd:e2:
a5:39:38:75:38:8e:cd:d9:99:00:44:f5:c1:d3:7c:5a:af:4d:
60:5b:90:40:16:5a:a8:ce:78:71:96:de:34:04:8b:a4:38:9f:
d1:74:00:68:78:8f:73:c2:d2:f3:4e:fe:07:d7:0c:90:9e:86:
77:6b:27:43:0d:83:18:f3:1a:b1:ae:d8:4d:0f:c7:8c:a1:1c:
d9:09:45:6d:5b:24:81:39:d6:bc:c2:35:eb:61:d1:bc:5b:25:
87:4b:68:4d:c6:ed:06:89:99:bb:f8:7f:a1:ce:fc:49:fd:8b:
06:93:c9:0c:83:af:7a:2b:da:96:d1:90:8f:93:d7:ed:da:57:
a0:4f:42:cf:0d:a2:88:3c:01:77:6a:2a:77:88:ce:10:f2:e2:
3f:de:bb:97:9a:cf:53:87:7d:7f:6f:45:6d:e7:78:c9:55:9d:
17:36:77:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:24:01 2026 by rpki-client