Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: ID/hZeOVd5MchxR1wQY5E7MCVAdwqYAniMVpQmTvurY=
Subject key identifier: 25:45:B5:F4:B2:77:D3:6D:C7:94:14:1D:C0:F7:53:10:48:E0:A3:7A
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 01A0E8C08E4741FF0231AFE13F43A4F4D292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 1A7B
Signing time: Mon 28 Sep 2026 16:02:08 +0000
Manifest this update: Mon 28 Sep 2026 16:02:08 +0000
Manifest next update: Tue 29 Sep 2026 16:02:08 +0000
Files and hashes: 1: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: UbMsPqTjQtPP3cBkwE8/146vi3rFrQWoO+faEvYlmxI=)
2: EFVOpOWZdKE35rgrU-jtXznNsuI.roa (hash: ZDYIfdybtLAlDhDDvMoU7cKEH+7IKf7xCd7YYsfpSC0=)
3: RnV5hShXIae0lSnUpt8VMyIMXCE.roa (hash: pVuZiXTymWxhDl4KCEyg8IDZADRSqa60wrD/ltLvlBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c0:8e:47:41:ff:02:31:af:e1:3f:43:a4:f4:d2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Sep 28 16:02:08 2026 GMT
Not After : Sep 29 16:02:08 2026 GMT
Subject: CN=2545b5f4b277d36dc794141dc0f7531048e0a37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f0:9b:cc:14:89:80:d2:76:fe:75:32:a1:93:
e4:d9:e4:eb:e3:ee:17:7e:8d:d0:5c:31:ad:aa:20:
12:74:d2:b3:bb:21:96:ae:b1:73:12:f1:d6:b2:88:
dc:f5:dd:8a:96:a5:e1:21:4d:ed:55:b7:1d:11:2e:
9b:6b:3c:4d:80:1f:4a:2e:eb:c7:26:33:08:8e:82:
59:17:c6:ea:56:8c:3c:9e:3f:0f:b9:ca:45:1c:a6:
2a:b6:0a:86:32:ce:0a:b1:28:b9:d0:e6:4e:5a:d3:
04:81:4f:81:c5:c7:ef:7a:ae:78:1e:51:ac:37:34:
f4:3b:17:b3:27:42:d8:95:a2:a4:1d:28:7c:6d:be:
67:ea:44:21:d4:3f:aa:1d:ac:17:df:d8:aa:2c:49:
49:d3:29:9e:16:54:f4:69:f0:72:ea:a8:16:91:30:
af:65:ca:b2:1b:33:da:0b:6f:ac:d7:42:8a:13:b1:
9b:5a:2f:b1:23:ff:ba:30:3b:a2:d7:cd:39:c4:2b:
04:94:ec:a0:96:66:cd:c6:2e:6f:14:f6:e1:6c:b8:
2e:8b:a2:97:25:e2:47:ad:b2:41:f6:d5:1d:af:bc:
b2:64:16:97:af:d4:e9:81:ed:e7:f1:a8:a3:41:8c:
69:27:bf:68:90:d2:90:f1:8b:53:d8:db:18:f7:54:
d9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:45:B5:F4:B2:77:D3:6D:C7:94:14:1D:C0:F7:53:10:48:E0:A3:7A
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:02:27:da:e4:0f:3d:b7:e7:e9:9f:a2:75:9f:98:03:17:a2:
f0:fe:05:cd:37:c1:ad:46:30:8d:f2:be:76:6a:5a:2a:2e:97:
a7:c9:b8:ed:cc:bf:2a:c6:8b:75:1a:6b:d5:38:c3:5d:3a:a9:
de:5e:d1:d9:00:d1:bb:75:f1:6e:70:77:2b:a5:72:7c:0d:26:
59:9b:67:4e:95:9d:7d:da:12:4f:70:bd:17:fd:7c:14:9a:3b:
91:08:0a:f5:f7:d6:ea:bb:f4:ae:25:c3:03:ad:a2:6b:a4:a4:
9f:0b:26:ed:93:d0:b0:6a:2b:22:8f:40:75:6c:d0:e6:f9:69:
36:ee:84:aa:de:03:23:12:2e:0a:73:99:d8:f6:27:b6:ca:1a:
f0:f9:8c:4a:f4:32:10:4f:a6:03:ad:16:49:eb:f3:7a:cf:fb:
e5:8a:63:e1:3f:9c:5a:52:a7:77:51:b7:1c:3d:31:c4:6c:0c:
2c:e5:23:c2:6d:d0:03:d6:98:c4:ac:54:bf:0c:27:06:95:3c:
79:7a:83:5c:f7:6e:49:c9:05:f0:39:26:13:e2:f0:cf:fb:4b:
29:47:3b:79:21:6e:f8:6e:04:18:e3:38:3e:59:f7:77:7c:30:
7a:75:a4:fc:bc:b8:35:5e:56:6a:3f:e6:89:50:46:c5:d1:99:
b1:f7:6d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:10:44 2026 by rpki-client