Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
File: bm17yr_MMI1CAFPEgqDVn7EoLjA.mft (raw, json)
Hash identifier: r44YvDiP61ODNf/xA/yU75g4rrrQOUdMcJDUosL56Ps=
Subject key identifier: 36:8B:58:55:F4:6B:FE:07:5E:76:6F:A0:5B:55:C7:01:75:2D:4B:99
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial: 01A06BDD3C37735E6CA9DB123137B524D77A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
Manifest number: 1A59
Signing time: Fri 04 Sep 2026 10:00:55 +0000
Manifest this update: Fri 04 Sep 2026 10:00:55 +0000
Manifest next update: Sat 05 Sep 2026 10:00:55 +0000
Files and hashes: 1: 3wWxSXnn1AkR2FQz-cSLXCO25fE.roa (hash: 9Mau/Rvq7d0nRIpqNv+3vxuSV8Oxqjuu2vQqrrKBRSo=)
2: InqWS5rTHtoJHqAAMNFNS-6YNzU.roa (hash: PCgwCy8zvVIhGv1SDbFVEmkSMCsbV4aCFlf6s9OR4Ns=)
3: P1TIIWKnTolq8pRBzgGiHbOaqgQ.roa (hash: gL2/PVEx/BkWJ9c7qys5mfYr8ijPQCI4jEJ/mb5fIUI=)
4: WNIo6fh_J1JaSjunj1Z5Xu1CXJ0.roa (hash: I9y0xJA8TLrCiSo9CMmPRbQsrLPI2QdSmCxydXLI1h0=)
5: bm17yr_MMI1CAFPEgqDVn7EoLjA.crl (hash: 7LlE/uHN9OvlPiucRJpuH0ISbIP2fNsVQoslBJfNTRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:dd:3c:37:73:5e:6c:a9:db:12:31:37:b5:24:d7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Validity
Not Before: Sep 4 10:00:55 2026 GMT
Not After : Sep 5 10:00:55 2026 GMT
Subject: CN=368b5855f46bfe075e766fa05b55c701752d4b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a8:29:8f:7a:9d:8c:16:53:94:03:32:5c:d3:
52:c5:dd:22:05:17:2f:ee:71:f3:c2:2d:bc:ee:16:
be:fc:8f:58:3e:d9:6d:1f:c3:82:54:b0:75:39:1d:
ef:3b:ba:30:c1:cc:11:7b:e4:06:9a:a4:82:39:ba:
92:e7:7a:c1:29:94:4e:62:27:7f:aa:98:ea:f0:db:
a0:49:ed:e0:77:c5:d3:f0:30:58:0b:fc:ce:5b:7e:
9b:27:49:fe:ae:85:ba:1e:a7:a7:f0:b1:ea:7e:12:
8b:a3:2b:60:57:00:9a:0b:ec:85:98:2a:42:3c:61:
45:8b:b3:ae:73:05:58:0d:37:15:68:53:96:b4:d3:
17:0e:c7:81:70:b6:4b:5f:5a:50:94:54:30:a3:c7:
d2:be:71:f0:12:f9:6f:6b:82:7b:3d:13:27:1f:8b:
ed:ce:af:e3:16:90:f4:8d:c4:c7:83:0c:0c:70:93:
2d:da:16:dc:00:3b:9f:ff:18:2e:ee:f3:cf:4f:05:
78:61:9e:7b:84:6e:4a:8c:92:2b:c3:d5:79:5b:e4:
eb:2b:0d:f6:d3:e4:35:6d:ca:ee:03:e6:66:83:9e:
54:77:6a:fb:2e:5d:d7:9a:04:94:e7:0b:fc:6b:b1:
e5:cd:ca:1f:2c:b5:07:0e:d9:40:1c:1a:17:7e:79:
84:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8B:58:55:F4:6B:FE:07:5E:76:6F:A0:5B:55:C7:01:75:2D:4B:99
X509v3 Authority Key Identifier:
keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:92:d7:7b:71:83:1b:be:6d:02:3b:c3:c2:0d:8b:a8:e8:ce:
fe:4c:48:af:95:10:a5:79:d1:fb:c4:61:5f:00:33:42:61:9f:
b2:8d:48:ec:23:ac:eb:42:27:b5:c6:9f:2f:d5:ed:fa:11:fb:
ad:4a:26:dd:a1:4b:fb:f6:d1:ed:52:83:b4:23:34:61:5f:6e:
e8:6f:53:a3:0e:13:e5:90:2a:39:7d:1c:20:02:34:83:2c:60:
ca:6f:2e:59:7b:f4:32:b3:bf:f1:e8:84:45:cd:4f:eb:da:f6:
db:83:68:41:17:56:d1:c7:94:81:32:27:37:d5:c0:ad:57:5f:
86:f7:e0:62:66:d6:9b:9c:5c:34:e2:92:03:66:7a:32:19:53:
dd:96:86:c2:6e:a4:89:8a:b9:9f:e8:bf:5e:da:82:f4:8a:0e:
2b:e6:df:f1:75:fb:30:78:b5:60:f8:9b:bd:a8:cc:b0:fb:d2:
5f:e4:19:9c:6c:99:25:34:6d:09:ee:32:4c:5f:0a:e8:11:56:
73:10:c6:0b:89:64:01:66:f6:94:a4:72:90:5a:89:3e:a6:e8:
a7:81:4c:1d:21:62:30:97:03:91:b8:34:4f:ad:a3:58:b0:62:
81:fc:39:e8:1b:ba:47:66:08:00:f8:87:36:d0:aa:30:c0:ca:
e8:4a:8f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:10:37 2026 by rpki-client