
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: mTomUUdF2sMNL+lwwQYCV6M8z17Zbv5ZVCPmIuJr8L8=
Subject key identifier: 13:64:8B:58:93:DD:FB:54:98:C8:7B:11:25:08:AF:C2:9D:E6:D4:4B
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 019CAD5A1B1DF8E3CD3633B730BA0D0DA3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 07:01:29 +0000
Manifest this update: Mon 02 Mar 2026 07:01:29 +0000
Manifest next update: Tue 03 Mar 2026 07:01:29 +0000
Files and hashes: 1: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: diwq4Jxsaz0ZQAJBKtgAPPNhV+HMtr2z1GvZGmdxLAk=)
2: EFVOpOWZdKE35rgrU-jtXznNsuI.roa (hash: ZDYIfdybtLAlDhDDvMoU7cKEH+7IKf7xCd7YYsfpSC0=)
3: RnV5hShXIae0lSnUpt8VMyIMXCE.roa (hash: pVuZiXTymWxhDl4KCEyg8IDZADRSqa60wrD/ltLvlBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:1b:1d:f8:e3:cd:36:33:b7:30:ba:0d:0d:a3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Mar 2 07:01:29 2026 GMT
Not After : Mar 3 07:01:29 2026 GMT
Subject: CN=13648b5893ddfb5498c87b112508afc29de6d44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4e:8b:2d:51:00:cd:a4:78:90:2a:92:f5:a9:
e4:d0:68:3e:dd:8f:75:e0:7c:c0:c0:c4:2d:51:97:
6f:8b:55:e5:16:e8:e4:30:6f:86:ad:de:d3:a2:57:
e7:11:79:eb:d2:5f:7e:b5:87:fc:e4:96:d9:7a:62:
68:38:a2:c1:0c:a5:c3:d5:7d:08:46:f7:7a:d0:02:
87:0b:e8:26:59:50:5b:63:05:30:8a:55:36:5f:b7:
9f:8b:52:dd:1e:b9:55:38:80:88:42:58:ef:23:83:
50:03:aa:c7:40:2f:10:18:7d:10:43:e8:9e:5f:30:
ce:8c:f8:2e:17:ff:38:93:75:d3:57:3e:90:30:9f:
d2:14:30:88:d5:e1:32:fb:99:6c:8d:25:ec:4d:6b:
db:a7:35:a9:29:70:9e:06:48:ae:32:ed:83:54:af:
12:c0:8c:58:ca:62:a7:39:71:c6:1c:73:86:68:f4:
86:16:fc:80:80:55:ca:01:e7:2c:2c:f0:50:fd:a3:
2d:e6:78:4a:42:04:6f:06:62:66:b2:78:76:f8:1a:
c2:40:d6:79:ae:6c:65:aa:d9:10:f4:51:a9:88:f1:
5e:7a:9b:81:6c:9f:ef:67:83:a9:1a:a4:16:6d:fd:
f6:1f:10:56:9b:b3:e8:45:43:28:86:ff:c4:2a:97:
2c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:64:8B:58:93:DD:FB:54:98:C8:7B:11:25:08:AF:C2:9D:E6:D4:4B
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:97:44:e1:d0:1f:4b:44:d6:b9:b6:27:cb:05:0a:13:cc:56:
e6:dc:bc:0e:bf:30:99:df:c1:fe:74:1c:6f:9d:af:18:07:52:
6d:0a:30:70:4f:0d:2c:2c:5b:57:80:9f:02:92:8e:c1:f1:af:
b6:f4:ca:e8:4c:c9:ba:3d:b6:81:d8:ab:a3:60:93:8b:2b:1c:
30:cc:6f:7b:8d:48:36:2e:24:92:ff:1d:7b:31:90:78:9d:e6:
9c:cd:cf:7f:30:2c:a0:ca:99:94:09:d9:61:36:4e:d1:d8:9b:
8f:95:51:0d:d8:cc:c4:c9:c9:39:2b:48:78:a8:0d:8e:5a:9f:
12:20:ef:32:ec:a9:bd:22:9d:2c:bb:96:ac:dc:63:c7:3a:9e:
48:fc:3a:66:16:da:5a:f3:28:d9:fa:20:2e:77:40:06:0d:88:
f5:73:b2:94:68:fb:46:5f:ab:af:8a:5b:fd:f8:8d:ae:f5:94:
76:23:b1:ae:cc:1e:5e:28:db:51:25:5c:df:39:a8:16:0d:05:
57:3d:eb:d4:9a:f2:70:79:1d:13:58:08:19:97:1e:f0:76:df:
5e:45:12:90:c2:b8:bb:15:f7:88:4f:fe:2a:a8:4a:af:eb:e2:
6c:f9:0f:74:68:d8:8b:68:d3:29:94:44:fe:47:a4:b7:22:ca:
62:b6:b2:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWhsd+OPNNjO3MLoNDaP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NzMyYjk4NWY4ZjYzZmY4YWU4ZWFjN2M3MDgzMmIzMGNl
ZTgwYWQwHhcNMjYwMzAyMDcwMTI5WhcNMjYwMzAzMDcwMTI5WjAzMTEwLwYDVQQD
EygxMzY0OGI1ODkzZGRmYjU0OThjODdiMTEyNTA4YWZjMjlkZTZkNDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5k6LLVEAzaR4kCqS9ank0Gg+3Y91
4HzAwMQtUZdvi1XlFujkMG+Grd7TolfnEXnr0l9+tYf85JbZemJoOKLBDKXD1X0I
Rvd60AKHC+gmWVBbYwUwilU2X7efi1LdHrlVOICIQljvI4NQA6rHQC8QGH0QQ+ie
XzDOjPguF/84k3XTVz6QMJ/SFDCI1eEy+5lsjSXsTWvbpzWpKXCeBkiuMu2DVK8S
wIxYymKnOXHGHHOGaPSGFvyAgFXKAecsLPBQ/aMt5nhKQgRvBmJmsnh2+BrCQNZ5
rmxlqtkQ9FGpiPFeepuBbJ/vZ4OpGqQWbf32HxBWm7PoRUMohv/EKpcsDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNki1iT3ftUmMh7ESUIr8Kd5tRLMB8GA1UdIwQY
MBaAFARzK5hfj2P/iujqx8cIMrMM7oCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDct
YWRhMjcwODI1MjE4LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDctYWRhMjcwODI1MjE4
LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5dE4dAf
S0TWubYnywUKE8xW5ty8Dr8wmd/B/nQcb52vGAdSbQowcE8NLCxbV4CfApKOwfGv
tvTK6EzJuj22gdiro2CTiyscMMxve41INi4kkv8dezGQeJ3mnM3PfzAsoMqZlAnZ
YTZO0dibj5VRDdjMxMnJOStIeKgNjlqfEiDvMuypvSKdLLuWrNxjxzqeSPw6Zhba
WvMo2fogLndABg2I9XOylGj7Rl+rr4pb/fiNrvWUdiOxrsweXijbUSVc3zmoFg0F
Vz3r1JrycHkdE1gIGZce8HbfXkUSkMK4uxX3iE/+KqhKr+vibPkPdGjYi2jTKZRE
/kektyLKYrayvg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:40:51 2026 by rpki-client