Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
File: bm17yr_MMI1CAFPEgqDVn7EoLjA.mft (raw, json)
Hash identifier: 65l5umNHjM7AW1JXf8KSZjfcnJEr/EKjbud6g9nB0TI=
Subject key identifier: 3C:1A:AB:D0:6E:5B:2D:C0:2D:85:FD:D2:6D:78:7F:30:72:F9:6F:05
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial: 01A1686BB04D82368F634B9B8D62B97BD139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
Manifest number: 1AE3
Signing time: Fri 23 Oct 2026 11:00:50 +0000
Manifest this update: Fri 23 Oct 2026 11:00:50 +0000
Manifest next update: Sat 24 Oct 2026 11:00:50 +0000
Files and hashes: 1: 328obmvXVWbvAMop_HfnB4VBuFY.roa (hash: A+vzGJG6ZYLioHt2aiC6BoYmTu3H+L0hP4qvDiW+fN4=)
2: InqWS5rTHtoJHqAAMNFNS-6YNzU.roa (hash: PCgwCy8zvVIhGv1SDbFVEmkSMCsbV4aCFlf6s9OR4Ns=)
3: JR2M09GCpZW9QLiWPV5Nh4Xzi2Y.roa (hash: oLtprbGhXfon2wItL/gqD1O+okJBDODvKqWcSysscUY=)
4: NWHW5q_qhg6SlW3OG9l3k3r4P3w.roa (hash: y/S2uulJMpPFuOlueA/dlGtJQcnVeWIduCeRXiRzsbs=)
5: bm17yr_MMI1CAFPEgqDVn7EoLjA.crl (hash: Z2CHPpHOucJhwMUk1/jCqOQIDoEPIk4sixQBAgO+aNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:6b:b0:4d:82:36:8f:63:4b:9b:8d:62:b9:7b:d1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Validity
Not Before: Oct 23 11:00:50 2026 GMT
Not After : Oct 24 11:00:50 2026 GMT
Subject: CN=3c1aabd06e5b2dc02d85fdd26d787f3072f96f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:82:b7:18:73:f3:1a:7d:ea:f6:c6:0c:6a:
52:5c:19:7d:15:9a:55:93:4b:e8:3d:43:80:ec:11:
e8:85:3f:a5:0a:9a:30:01:c5:e3:64:6a:2e:2a:40:
59:60:a4:09:39:79:23:ee:e1:c1:ca:b4:f4:56:d2:
36:b8:10:c0:35:1d:68:af:d7:42:c9:71:a7:b8:fa:
5c:b6:3c:0f:8c:5c:ec:c2:9f:30:f3:58:96:a2:6e:
f0:d1:ac:e7:f6:8a:57:6c:d3:9f:17:13:92:cf:ab:
47:9d:1f:68:c0:50:c4:da:cc:50:04:9e:95:03:9b:
00:1a:1a:4b:ac:00:83:d8:a3:df:1e:67:9f:fc:46:
9e:d4:54:ec:36:02:64:f0:c4:c2:1d:06:a0:c0:f3:
ce:ac:6f:7b:cf:f4:2c:8f:b1:0f:86:84:b1:ff:58:
50:26:d1:89:01:11:d0:a0:3f:bd:90:33:4e:f9:91:
10:16:a6:44:72:cd:68:c4:0c:e9:f7:41:da:a3:bf:
fd:7c:bc:f2:ab:52:16:86:99:37:84:35:28:49:7a:
f2:ce:cb:a6:69:5e:5a:b3:bf:73:cd:08:d7:55:55:
40:1c:af:d2:06:e2:86:37:cf:e3:3d:4b:74:0b:21:
1a:d5:0a:a7:6f:67:3e:79:b4:08:d2:63:97:c8:67:
12:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1A:AB:D0:6E:5B:2D:C0:2D:85:FD:D2:6D:78:7F:30:72:F9:6F:05
X509v3 Authority Key Identifier:
keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:da:5a:c0:17:00:bf:62:12:1e:6e:52:0a:12:1e:0e:eb:60:
0c:20:91:2f:ee:13:79:f3:59:6a:d9:97:31:c5:10:00:b4:a8:
e4:d6:85:73:d2:50:81:c6:b6:64:82:39:3e:19:67:73:cf:89:
5a:60:55:1c:7a:03:fd:50:75:c8:00:af:6f:73:d5:9f:d5:d5:
2a:c8:a6:20:eb:c4:63:17:d2:71:b1:a1:a4:ee:a3:7e:bb:55:
c4:74:f4:23:51:c7:f2:92:73:f2:b4:33:9d:86:69:9d:25:5c:
0a:e5:57:d0:07:8d:42:88:84:c2:24:d5:10:8a:38:fa:23:b0:
f6:c4:55:34:90:2a:ce:7b:bc:83:82:18:21:81:09:af:df:50:
4b:3b:96:45:5f:d9:63:4d:82:87:d2:ab:9b:a7:db:1b:47:86:
97:d3:1a:5e:f0:68:82:7c:f7:32:7f:d9:e1:63:27:ef:28:44:
4e:07:65:58:ea:fd:04:21:7e:fe:b5:b9:48:6a:d2:43:69:4e:
50:13:a5:18:bf:a6:d2:54:bd:4a:38:d8:f8:c7:90:87:e8:14:
01:15:9b:4f:7c:46:77:68:5a:02:37:fa:e9:80:8f:d8:43:e9:
74:6c:c9:50:87:7d:03:bb:24:4b:50:d3:79:58:da:13:1d:2d:
12:b4:f4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 13:39:47 2026 by rpki-client