Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier: P5Zzg5Gvqlo2yQ2vcrlmO2+e+qxVADNe7esRv4Fx3w4=
Subject key identifier: 97:D8:99:B1:25:4C:45:0A:E8:C8:AA:53:93:AA:76:50:72:0F:2E:9B
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial: 019CAC7E0896D581CEA347070F43082D4A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number: 0B04
Signing time: Mon 02 Mar 2026 03:01:06 +0000
Manifest this update: Mon 02 Mar 2026 03:01:06 +0000
Manifest next update: Tue 03 Mar 2026 03:01:06 +0000
Files and hashes: 1: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: eQedlJaF1CK6+fQ+XUlTn4WIdJQBIBGkMIJAWNx5ENs=)
2: HOmsaADbKL0_Nb10hk_P_lDZ0_Y.roa (hash: 00uvM1qPEx8W9hFfLWy2Rcng+t4mc0OvA6j8KzFwgTQ=)
3: Xc20FTd_9i1cvP_V-us2VR8rcgw.roa (hash: P+2TwYeHZ5Tcfkj30y1ee92Z2pzwCyx2c2a540pfIM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:08:96:d5:81:ce:a3:47:07:0f:43:08:2d:4a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Validity
Not Before: Mar 2 03:01:06 2026 GMT
Not After : Mar 3 03:01:06 2026 GMT
Subject: CN=97d899b1254c450ae8c8aa5393aa7650720f2e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d4:a5:53:27:c4:0e:d5:35:5a:26:e7:9a:3d:
5b:9b:df:dc:55:bf:45:7e:f0:e1:82:1d:ca:63:ad:
00:b2:ff:db:d6:99:e6:9b:81:fd:d2:5d:c5:f3:e1:
61:26:97:e9:da:52:db:4c:da:f6:f0:6d:ad:8e:c6:
64:7e:a7:98:df:58:16:38:80:55:05:d1:da:83:8b:
1b:7a:d1:b2:08:51:8f:61:dc:8a:68:95:a6:00:01:
8e:d5:53:94:d3:06:89:73:49:32:9d:50:1f:62:e1:
70:72:43:16:95:54:dd:53:79:37:46:3c:86:56:db:
cf:84:88:90:ee:ac:41:ac:6e:d2:aa:8a:3e:7a:a6:
c4:9c:7b:a8:01:93:45:6e:f3:b0:e6:cc:39:55:8b:
59:5e:e0:9d:bb:b8:70:a3:4b:11:a9:29:4c:4a:b4:
05:b1:a0:e3:63:68:cc:f6:b9:b7:3f:15:3c:1c:2b:
c2:0b:28:7f:43:64:3d:6d:90:3c:80:92:c0:e2:48:
ce:95:81:c5:cf:18:76:33:d6:d1:45:43:2f:44:83:
e3:83:f9:d2:05:2d:31:90:39:72:a6:be:66:57:0e:
0b:5d:ee:4c:d7:37:de:74:9a:9e:b7:ce:d8:16:c0:
0a:54:84:8e:69:fd:74:8a:b1:b2:5b:73:f1:da:22:
56:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D8:99:B1:25:4C:45:0A:E8:C8:AA:53:93:AA:76:50:72:0F:2E:9B
X509v3 Authority Key Identifier:
keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f1:94:12:38:4d:ce:93:47:0a:82:de:2b:5c:97:45:23:f0:
1d:c9:44:32:c8:3f:21:3e:5d:ed:2c:51:fa:a7:09:89:49:03:
ec:b9:fb:a5:07:68:a9:00:8a:d6:8a:83:80:39:6d:68:8e:58:
bb:ca:ab:d5:8f:88:a9:a6:70:1b:0f:7a:87:30:0f:d1:fc:62:
e9:7f:0f:5b:36:43:ba:21:44:b2:c9:36:40:de:b3:70:ab:4d:
ad:3c:dd:c5:a6:2b:48:d3:bd:23:e0:f7:2f:a1:8c:3f:4b:36:
b7:8c:7b:82:82:92:ba:9e:97:cc:c2:f0:48:29:84:ce:46:15:
7c:a9:bb:df:46:77:7c:e8:ac:08:31:8d:bd:ec:bf:83:36:9b:
3c:c1:35:b3:19:23:c3:11:05:93:13:94:c2:d7:f9:95:ae:93:
54:9a:c6:55:9e:2b:7f:64:eb:78:cb:5c:3b:9a:d1:21:f0:fd:
f5:ce:89:64:63:0f:42:6a:ef:74:eb:56:ef:b8:57:f8:d0:6d:
e5:0d:5a:4d:82:7f:27:b5:61:9a:d4:c4:a4:da:05:fe:aa:7c:
bd:39:57:46:69:e3:eb:39:c5:69:62:cb:e0:3d:e2:c8:80:37:
84:1e:c3:a9:ed:71:32:79:83:48:c4:bf:87:0c:b1:62:f7:dd:
74:81:47:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:47 2026 by rpki-client