
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json)
Hash identifier: B13l1aRBNxq0W0N0eu2JMud7oPMw9Q84l0e4NXOcQhw=
Subject key identifier: 4F:15:74:5B:E5:16:BF:1C:35:C4:6A:8D:85:3C:58:A5:3A:91:85:49
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 01A17BBAF24DA1FF5BBA47886FD3F0B971BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
Manifest number: 182A
Signing time: Tue 27 Oct 2026 05:00:11 +0000
Manifest this update: Tue 27 Oct 2026 05:00:11 +0000
Manifest next update: Wed 28 Oct 2026 05:00:11 +0000
Files and hashes: 1: 1-d4L6hcvfvVSJj2al6x8i-6-Aiw.roa (hash: /UHbAWZkwPjrqgnVqWgrTchojit0XWT8TQ+LY6IFuyU=)
2: 6v3_UhJ7MUeUjwMs45OUb0uqJnE.roa (hash: HmoRuDjbo63Mi/Ve6hqQucNjqbfAMk5jwYB8klrtmn4=)
3: 7geGfuYNebN29vuSfOy_GV5rEnI.roa (hash: HCwsGLsuz7RM9sjbDLuG2DbSJJu30k5afVWUwaIVEjo=)
4: B08LenF7yMg-N_h3Vsro44gwUvU.roa (hash: lBlkYBGRq6hhb9CFJXeVSFMPTiDOZk1Hd5NmnUdVAgk=)
5: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: J2zoBy+QyOK/oMAuuUMR+T7QID3BrhptlCWy8B+UqpA=)
6: CYsGcdSH7bcw6ttptcbOdbODOc4.roa (hash: wXe45N0RFs32ccEALNCnd59LOD4wha28MAHYlRsCzAg=)
7: HZdvkaCB4ILKrJSpSkIYqIrfW1k.roa (hash: FQaM849Za5tChtOyzAM+7VK73HDYttogAR0AVk6y8iE=)
8: MNqklcC3mDcAx_nY7EwvhOa8X9U.roa (hash: y5cME2lImwSwJDF/yo1BlC7NlPtCoBG+Fen0gJCa020=)
9: OeSFxPx28HOZ5SP5OFGE4eN9Dkw.roa (hash: IUd/UJp2vz5KGesc4FkG7eW+Uztewk/WazlNqWRZVZg=)
10: P2O8JsbQrSj7hbLlWPhRJkg8f3g.roa (hash: 97KV+nHVxx1mm0wDQuutRXEyv0WrBkuC6RQafxbvZg8=)
11: RYbdj0NLewtXWCgXlYi3OlXXkB4.roa (hash: 81qii9MMa1xqhNFHKwnbqG3tyFuEh9+IuizOP4tFZBA=)
12: RvSp46XarM4KQjsjmd8W8ihdY60.roa (hash: vQ45p3Cs9W4CLKvtCbt/Hgg92ogtLOQSOOU3HtQxzyY=)
13: YLjsu-ME555sTWq6xQaBk12RTHI.roa (hash: iZDrgab1o/HZT8v/s/c94kd+y7+rf2+jsai5MRtDr7U=)
14: YXJuTkaR2hNWDD-AQJZEPPH5ZUM.roa (hash: 0tbVorz/zIP5tFqTzCgpmpkbjskH9+GPr5OhsxgbofA=)
15: beJcu8jp7XoMcK6rAEcUFSDQrYI.roa (hash: zYxTg1jfn9EG78umE8ZucP90B5Y2rJZ1b3uK6DJnlYk=)
16: fAM3pa0EE7jiHrAFo6eOqMsPdek.roa (hash: jl6qmU6yzE54DspheNxyX+IEtosMtIzC14e7gTFFKCk=)
17: nu5qc3FurPA7ene0-Ao16QprmLc.roa (hash: jAdY6e3psk45qZp7fo2Mwz+KQFyicWuxyaHfYwP1ULM=)
18: oOrjHph7LCFfAGNpngQ3mhai8xA.roa (hash: mgAQXj5D8f8s+hAa9EBd/XiB7pdR7qEvc/zDtmhktUc=)
19: srboMmwqKHPhkNbkM6WH4OcVY48.roa (hash: QTHUB96thFjrx3rv4+7lC/X2cBokeJcDuu0PFdqOJcA=)
20: wW5pOo-Yi2Fr6-80PQNsGsyzCh0.roa (hash: XuJE9f/EqSb5uZJo5N71rfDUSYnvs1YtjC46AbxvWx4=)
21: wggGh2w-6sQB6ovzilMkq6DwW4c.roa (hash: PBLu8QpYUa8mUZdHc+q4W4ziy06dQNRUZGYN3WcmH2U=)
22: zKosVsnnSwnan5xK-AKXc-6q3RA.roa (hash: AR+C5oOYJwVvPymmFfXk0qR5THoCvoOhDXOz0Nd5wXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:ba:f2:4d:a1:ff:5b:ba:47:88:6f:d3:f0:b9:71:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Oct 27 05:00:11 2026 GMT
Not After : Oct 28 05:00:11 2026 GMT
Subject: CN=4f15745be516bf1c35c46a8d853c58a53a918549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:af:b8:e8:4f:d7:69:31:6e:0c:ba:ca:ad:
d1:33:be:63:f9:90:78:03:26:20:6b:33:1f:ec:b2:
be:2d:31:b7:6b:70:57:df:d3:24:54:3c:4b:d3:d0:
4a:77:85:dc:4d:a9:de:53:2b:2a:0d:e0:8d:ff:fd:
6a:c5:d0:b9:29:e4:c5:3f:7d:66:8c:3b:5c:40:3f:
c4:14:36:54:df:38:7f:35:41:b6:60:53:36:3f:0d:
18:e9:8d:c1:cd:90:b7:ee:8c:d7:c5:8a:e3:4c:d8:
d6:50:a8:5d:75:6f:35:01:4d:c7:1e:7b:b4:75:3d:
e2:38:80:46:f0:3f:67:f3:01:77:7e:5d:08:6c:84:
72:59:cc:3f:81:67:f3:ce:f9:e5:ee:6d:60:e8:6a:
7d:83:5e:d7:22:ed:30:5b:85:a2:72:11:82:9d:f1:
24:f6:a0:5a:81:96:8a:8a:ff:ea:aa:dd:57:e7:52:
3b:8e:e1:49:c8:ea:e0:f9:1d:d6:06:b7:34:f2:29:
e6:48:40:55:d1:00:18:b9:fc:38:2b:a8:ea:e1:71:
d4:fe:93:7e:ec:f7:6e:b4:9c:e3:b7:b7:92:8a:6e:
14:4b:fc:44:18:ae:51:10:e7:74:4c:cf:bd:25:25:
08:99:06:ea:ed:fe:de:3d:31:04:3f:dd:cf:b3:1d:
5b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:15:74:5B:E5:16:BF:1C:35:C4:6A:8D:85:3C:58:A5:3A:91:85:49
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ac:ad:22:20:32:80:71:d3:18:87:a5:df:9e:ee:44:66:59:
dd:4e:d9:67:d4:80:d1:74:bf:c5:43:6a:3b:db:ec:51:67:9a:
3c:b1:fd:49:80:85:c1:8e:79:9d:97:46:47:c7:43:b4:55:a6:
4d:d6:32:47:47:5a:e8:82:21:81:f2:52:d4:de:da:ec:6f:75:
5b:43:30:90:cd:60:db:b2:0b:50:26:95:24:ff:f4:10:ea:c3:
35:8b:58:0c:c5:cb:4e:87:52:b0:fc:de:4d:4e:e9:ad:a7:95:
43:24:06:4e:f0:79:eb:bf:b9:70:a2:8e:0c:32:29:a6:06:9b:
5b:a6:a0:90:3e:2d:cf:33:21:8e:99:6e:15:45:72:b9:6b:10:
ae:ff:06:8d:92:f7:d0:bd:b2:02:ef:28:11:5b:bb:8f:6b:12:
46:90:44:2a:5b:61:18:32:7b:3c:d4:89:b8:a5:01:f0:39:88:
78:a1:5d:c4:ac:cd:ce:21:bd:2b:11:49:6e:dc:f7:67:81:a2:
50:57:18:87:77:9d:b7:30:6d:7f:02:2d:c8:83:a1:cb:57:71:
8b:cd:f5:34:03:4a:c0:ce:37:47:9c:7a:27:6f:53:de:8f:6e:
f3:ad:d2:6b:2a:d5:09:cc:17:2a:99:9f:1b:d6:8b:ff:a2:8b:
41:09:38:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:49:42 2026 by rpki-client