Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier: 2avyf6ic/IAArdcfoK9PkzYZbLmA0VP81X01URwqSY4=
Subject key identifier: 5B:B6:2D:6D:69:12:82:EC:1C:9C:7A:CC:8E:9E:3A:98:28:3E:C5:6E
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial: 019EBDA2C6B9EC876D4A4D302FEDB219D572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number: 0C16
Signing time: Fri 12 Jun 2026 21:00:21 +0000
Manifest this update: Fri 12 Jun 2026 21:00:21 +0000
Manifest next update: Sat 13 Jun 2026 21:00:21 +0000
Files and hashes: 1: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: +tOuO9LjeDAKqBGVPwFfVQ+WD9+QSOKYfwVnx2EkRC4=)
2: HOmsaADbKL0_Nb10hk_P_lDZ0_Y.roa (hash: 00uvM1qPEx8W9hFfLWy2Rcng+t4mc0OvA6j8KzFwgTQ=)
3: Xc20FTd_9i1cvP_V-us2VR8rcgw.roa (hash: P+2TwYeHZ5Tcfkj30y1ee92Z2pzwCyx2c2a540pfIM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a2:c6:b9:ec:87:6d:4a:4d:30:2f:ed:b2:19:d5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Validity
Not Before: Jun 12 21:00:21 2026 GMT
Not After : Jun 13 21:00:21 2026 GMT
Subject: CN=5bb62d6d691282ec1c9c7acc8e9e3a98283ec56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:59:4a:1d:97:5b:fc:eb:22:bd:28:57:d0:
fd:58:26:1c:d3:9c:77:ed:e5:80:f1:07:a9:50:83:
72:1c:a6:13:8a:39:35:e5:52:63:e1:51:46:49:88:
d2:e1:7b:4f:97:ef:3a:91:96:f7:90:86:3d:02:32:
48:f5:93:c2:09:02:19:07:3f:c0:0f:79:73:34:dc:
4c:b5:49:37:a9:1c:c4:35:3e:ae:68:81:6e:27:a2:
f3:98:b2:be:88:e0:85:1b:0d:24:9d:03:3d:f2:06:
70:6b:71:62:2b:10:ce:f1:63:9a:14:cf:7c:e2:de:
bc:f0:30:98:05:0f:b0:b3:cf:8a:d4:d5:c3:af:3f:
f7:36:87:b2:11:74:67:ad:d9:6a:f4:90:15:2a:39:
c3:e2:77:3f:04:41:52:f8:0a:5b:10:32:35:83:15:
76:19:0a:0d:60:59:dd:eb:eb:e5:53:24:3c:e4:b7:
e3:40:cc:8e:6e:c0:47:f4:f1:90:f0:35:13:4e:5e:
37:5f:25:a8:bb:dc:66:4c:e7:3e:7c:b6:97:d8:3a:
c9:37:bd:94:57:3d:8f:00:43:c5:f9:10:a3:7b:0f:
cb:10:11:3c:ce:b8:9b:77:e0:6b:39:78:63:1e:70:
df:b2:12:40:7d:47:e6:20:6d:2f:ba:60:c3:c3:5d:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B6:2D:6D:69:12:82:EC:1C:9C:7A:CC:8E:9E:3A:98:28:3E:C5:6E
X509v3 Authority Key Identifier:
keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:50:7b:fa:0a:9e:01:87:bf:8a:0c:0d:3a:8a:cc:ac:93:4b:
b9:76:fd:7e:2c:1f:a1:4a:ed:07:e4:44:5c:62:1f:90:72:25:
9b:cf:6f:a5:dc:0a:5a:dc:1d:e4:63:63:e7:9a:83:e2:df:13:
c9:ef:a4:34:f8:65:89:23:41:e7:78:88:d0:bd:cd:2e:a8:b7:
8a:51:3e:13:f4:d5:01:51:82:4c:d5:3f:71:a6:c7:9d:95:2d:
8c:a2:8e:1b:af:6f:c2:0e:89:77:91:23:10:85:21:b2:7f:5b:
ca:33:93:9a:d5:99:53:81:78:c8:4f:e8:f6:d4:ae:a3:40:e2:
30:56:8b:c7:2a:ae:ee:f7:9d:bc:ef:25:dc:25:6d:f3:ac:35:
0e:e1:70:85:1f:71:a9:98:55:b2:c9:fa:0a:17:fb:b4:3a:61:
b7:88:eb:34:e1:fe:55:2c:92:6e:13:64:ff:9c:aa:48:05:f8:
e9:32:a6:5d:5b:59:48:be:17:b0:23:73:35:97:71:d4:28:ae:
3c:33:b1:06:78:45:c0:b0:d6:0e:a1:ab:05:98:f7:32:fd:88:
2f:6a:81:e4:79:51:87:d9:85:82:cc:2a:eb:c5:ac:22:51:e5:
c2:84:5d:1b:5c:9b:54:7c:98:20:39:e1:29:69:19:f0:89:32:
4d:5c:19:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:51 2026 by rpki-client