Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: MfdAcZR6VL4FXyILBczIDfMtgKawJPg8rSm52tohp6Q=
Subject key identifier: 24:DA:55:0D:F0:C4:1A:0D:EE:8A:CF:EC:15:81:51:2D:D1:FE:A9:CF
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 019D9AE279BB1C8F9A38752D3415E1EFD04F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 10:00:26 +0000
Manifest this update: Fri 17 Apr 2026 10:00:26 +0000
Manifest next update: Sat 18 Apr 2026 10:00:26 +0000
Files and hashes: 1: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: rQI3bL4l684/UMJvXRRGLUzU9z++90Jxm83FVDxziEg=)
2: EFVOpOWZdKE35rgrU-jtXznNsuI.roa (hash: ZDYIfdybtLAlDhDDvMoU7cKEH+7IKf7xCd7YYsfpSC0=)
3: RnV5hShXIae0lSnUpt8VMyIMXCE.roa (hash: pVuZiXTymWxhDl4KCEyg8IDZADRSqa60wrD/ltLvlBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:79:bb:1c:8f:9a:38:75:2d:34:15:e1:ef:d0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Apr 17 10:00:26 2026 GMT
Not After : Apr 18 10:00:26 2026 GMT
Subject: CN=24da550df0c41a0dee8acfec1581512dd1fea9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:51:c4:d5:98:77:3c:b1:fc:bd:c7:30:d5:b5:
0d:ce:d0:43:e6:50:fe:30:78:ad:6d:9a:87:0d:ee:
aa:56:8a:85:e8:ce:34:31:0e:d1:fa:76:b7:22:8b:
56:0f:76:63:27:78:d2:2a:42:d3:0e:ae:7e:ae:44:
fd:0d:1d:e6:ac:90:fe:cc:27:41:f2:5b:a1:c9:7d:
c4:2e:42:ab:9e:b8:b7:da:93:6d:3b:b6:cc:1f:a5:
cd:8f:e2:c0:d1:c5:9f:88:46:b2:5f:9a:9c:9a:3a:
23:79:b9:c1:b2:a1:46:8a:4e:51:e8:9e:6f:74:0b:
03:55:de:e7:cd:e2:6a:32:5f:47:a9:6d:9a:9c:a4:
f3:e5:89:15:fa:85:2a:f2:39:36:9f:48:9e:6c:90:
74:83:31:ef:0c:3c:a4:9b:ef:31:7f:28:05:f5:c3:
08:84:a1:3b:9e:bd:f3:1e:e7:7c:24:68:ae:6b:89:
76:da:b8:b7:42:c5:7c:44:b1:cd:28:57:10:90:53:
99:94:00:95:81:d1:96:4f:82:af:5f:fb:3c:9b:8d:
f2:98:f4:89:47:9d:b0:ff:dc:30:78:47:58:b6:5b:
9f:f2:f8:b8:71:9b:8c:2a:b9:fd:43:09:82:c1:de:
60:4f:5b:35:d7:b0:40:5c:e8:e0:04:0e:d2:94:70:
32:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DA:55:0D:F0:C4:1A:0D:EE:8A:CF:EC:15:81:51:2D:D1:FE:A9:CF
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:37:9d:89:ca:9d:f3:9e:6d:1c:fe:97:86:b0:61:34:c5:db:
8c:a8:af:1b:b8:ff:84:5e:0c:62:95:4d:57:47:09:41:43:b1:
cc:6f:13:8b:a0:e4:44:57:a1:9a:68:15:7b:20:52:ab:c2:40:
11:3c:ce:38:68:66:da:1d:0c:20:e1:48:9b:d7:f2:22:34:d2:
5d:f2:aa:68:52:90:6a:35:91:05:ee:3f:7c:a4:bd:60:39:78:
9a:71:86:d5:87:83:2a:85:5c:02:92:16:d4:c8:6c:22:06:8f:
b3:5e:a5:e5:49:33:52:4b:52:d2:08:2f:57:b8:76:11:84:52:
40:b2:cc:86:da:46:f4:1a:d8:7c:b8:d8:63:7c:8f:a1:2b:1c:
25:b5:68:c7:93:2b:cf:13:39:1d:ab:cc:b2:3c:cf:1f:a1:9a:
46:0d:98:03:ff:e0:f1:96:6c:e4:7c:33:8d:34:7e:0e:df:fc:
42:af:71:ba:27:9c:fd:71:30:4a:f2:e4:36:7c:39:18:a8:28:
d0:21:38:59:97:45:b8:ca:13:b6:37:11:70:2e:8a:3a:13:b2:
ca:a4:fc:b5:c8:ea:54:2f:8c:16:13:2f:a7:3e:fa:c4:11:50:
8d:ca:d2:11:d1:39:bc:65:64:da:1a:2c:22:49:f9:e7:56:e8:
18:f5:62:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4nm7HI+aOHUtNBXh79BPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NzMyYjk4NWY4ZjYzZmY4YWU4ZWFjN2M3MDgzMmIzMGNl
ZTgwYWQwHhcNMjYwNDE3MTAwMDI2WhcNMjYwNDE4MTAwMDI2WjAzMTEwLwYDVQQD
EygyNGRhNTUwZGYwYzQxYTBkZWU4YWNmZWMxNTgxNTEyZGQxZmVhOWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VHE1Zh3PLH8vccw1bUNztBD5lD+
MHitbZqHDe6qVoqF6M40MQ7R+na3IotWD3ZjJ3jSKkLTDq5+rkT9DR3mrJD+zCdB
8luhyX3ELkKrnri32pNtO7bMH6XNj+LA0cWfiEayX5qcmjojebnBsqFGik5R6J5v
dAsDVd7nzeJqMl9HqW2anKTz5YkV+oUq8jk2n0iebJB0gzHvDDykm+8xfygF9cMI
hKE7nr3zHud8JGiua4l22ri3QsV8RLHNKFcQkFOZlACVgdGWT4KvX/s8m43ymPSJ
R52w/9wweEdYtluf8vi4cZuMKrn9QwmCwd5gT1s117BAXOjgBA7SlHAyYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTaVQ3wxBoN7orP7BWBUS3R/qnPMB8GA1UdIwQY
MBaAFARzK5hfj2P/iujqx8cIMrMM7oCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDct
YWRhMjcwODI1MjE4LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDctYWRhMjcwODI1MjE4
LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzedicqd
855tHP6XhrBhNMXbjKivG7j/hF4MYpVNV0cJQUOxzG8Ti6DkRFehmmgVeyBSq8JA
ETzOOGhm2h0MIOFIm9fyIjTSXfKqaFKQajWRBe4/fKS9YDl4mnGG1YeDKoVcApIW
1MhsIgaPs16l5UkzUktS0ggvV7h2EYRSQLLMhtpG9BrYfLjYY3yPoSscJbVox5Mr
zxM5HavMsjzPH6GaRg2YA//g8ZZs5HwzjTR+Dt/8Qq9xuiec/XEwSvLkNnw5GKgo
0CE4WZdFuMoTtjcRcC6KOhOyyqT8tcjqVC+MFhMvpz76xBFQjcrSEdE5vGVk2hos
Ikn551boGPViFA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:48:53 2026 by rpki-client