
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
File: BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json)
Hash identifier: HCVD/uOqTi6I7dHr0dQ4NfRzumTFsKPaBLuCn2txYO0=
Subject key identifier: 54:70:71:CA:76:D9:1D:10:91:42:79:D3:29:B0:B4:54:61:F5:BF:FF
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01A169B5711B31C9571CEBF85D5010C11814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
Manifest number: 1BD1
Signing time: Fri 23 Oct 2026 17:01:00 +0000
Manifest this update: Fri 23 Oct 2026 17:01:00 +0000
Manifest next update: Sat 24 Oct 2026 17:01:00 +0000
Files and hashes: 1: 19Q2Dwhtepvh3WfcRXocelqULL8.roa (hash: 5gim+c2a2kpRDHritwN6RumGls9psmp/ew2vMiVkt54=)
2: 4SJJucH40Dscf3Ue62wtU0DfH6E.roa (hash: QGCBTFVXrzql7PtcPo7oGZ6zg9NODVzu4Qj7AspLapc=)
3: 9NFbvxj2w7VM6vxKq1Roz_jojjQ.roa (hash: kit6Kwkn9tJ2JznDgHVoh92jAz03quG3UuogXP7lLQY=)
4: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: +KSkOSCkvLFaPHRl3ORj1FbdH+ZRNOL4Pqg9z9Jmqx0=)
5: GM3ERJU6CIy7dwdH0zdNwprJcyY.roa (hash: IlzjX1IkwyvBmzjj9sSoXNpn+4Aebe2rR4YjxBC4Rpw=)
6: HOHhNiuwB0cMh5RUFF-1lXt5zw8.roa (hash: k0AGLs0YgoPPmCz6XJ6TT1Z/0Wgwq5Qa6Ym6t+Mb83g=)
7: HmuiSy6DiqyFIS3hKu7LdivnQl0.roa (hash: AUDFtOT4GZ2PlVwxPCH5qqp0l2hQvma3gFblT+w1Ox0=)
8: MkSbjLOlmst8deBiijIo10b1oHk.roa (hash: yW0Ku46kGVp8zzGWpKKCyQj4uBhe1YgR4EtXIh+G4lU=)
9: RahpEOjDk8JGqVaMnjYNHjqMCDk.roa (hash: 3i16wtfdxMwVP4jwU43s2Etd+QzTAEC6HDDbzF8Ohw4=)
10: TC_eT-_uQmNc7oH25j9ouSW_pbQ.roa (hash: tFzELYSe05eXp55I4gzQwEHo9uvcyGGItcMS2z7uaLI=)
11: oe9__c4vQI-1sLDyADedRP1CO-k.roa (hash: oY6L5eGC8aMPjhIdr6obVmsLpQESXuitNzVikpRUca0=)
12: pXmxylidYiS8qdJ3VaZ9yLskNbE.roa (hash: TusGBQalo9CLc6zboQZGITSpw51x7npY2VYZcmB0+eY=)
13: vOegqKH11j2ljvuv3PcKJ5eKLGQ.roa (hash: Xifos647golhy2/qMNU8LvVXxPFJdsELgOMybMZy3CM=)
14: xBCJBwVBWVhFXMpZnk1hhNHEtus.roa (hash: JhFeug15ySPa9A1JPmxH1r0jpNDX2NFdPlUO6jS53AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:b5:71:1b:31:c9:57:1c:eb:f8:5d:50:10:c1:18:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Oct 23 17:01:00 2026 GMT
Not After : Oct 24 17:01:00 2026 GMT
Subject: CN=547071ca76d91d10914279d329b0b45461f5bfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:86:c1:83:f1:63:dc:de:58:05:ea:30:7b:
b8:66:46:a6:eb:3e:de:3f:fb:67:91:07:2e:28:16:
a6:0f:60:f0:4c:db:90:36:84:1c:b4:14:3c:ce:bf:
e1:b6:bd:42:34:e2:7b:75:3a:7e:1a:22:5c:82:c0:
47:b4:5f:8a:3a:4b:3f:e5:71:d4:63:17:d5:8f:7d:
48:24:80:a9:ed:ca:df:63:40:10:a9:54:62:fa:aa:
45:64:a1:85:b2:c4:9d:a6:36:91:93:01:73:4b:0b:
42:7a:e6:79:3a:59:d6:0e:ee:14:78:4b:f7:61:72:
e5:10:81:37:ee:4d:90:b1:34:40:1b:4e:a4:f1:ff:
79:fd:06:77:2b:07:81:36:31:c8:14:f0:0e:19:b2:
db:9b:72:50:90:00:a6:5f:9d:81:83:22:06:b6:39:
82:21:5f:81:5d:8e:49:42:e7:d9:6b:b4:de:27:07:
73:9c:37:a8:84:d4:db:88:86:61:1b:8f:50:1a:c5:
25:74:d5:84:ee:f3:b7:b7:18:eb:12:0d:e3:b8:21:
21:3e:86:12:91:9b:6f:21:73:d3:ef:b5:c7:34:71:
f4:b7:3e:ba:25:6c:b6:09:ae:6f:df:4f:1d:67:be:
25:33:82:51:1c:0c:cc:96:13:2f:d3:5f:00:8e:6e:
59:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:70:71:CA:76:D9:1D:10:91:42:79:D3:29:B0:B4:54:61:F5:BF:FF
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f7:fe:65:e6:28:9b:99:51:09:63:d9:a3:7f:fd:24:1d:c1:
e6:37:79:47:fa:c3:5d:08:17:e0:d9:76:16:d9:de:61:5d:90:
96:de:13:18:a8:70:aa:63:8c:9e:ac:c3:3d:a7:cd:f7:05:07:
0b:9f:46:8d:d7:9b:2c:7f:7a:dc:43:14:6a:63:8d:e7:95:c9:
8f:5a:ae:dd:96:2c:20:95:dc:5e:bb:f8:cb:59:aa:8d:d2:74:
bc:d4:f0:f1:f1:5c:a8:2a:9c:3d:1e:5b:ac:64:cc:7c:26:1e:
be:17:5e:6d:c5:98:b1:2a:0e:52:6b:6b:1e:09:e8:1c:00:9a:
94:d7:a0:65:c7:3f:50:8a:36:6b:be:90:29:fc:2d:c4:17:a0:
a8:4a:f8:76:25:57:61:2d:f1:83:bf:0e:24:d1:c6:d3:98:8b:
d6:30:5f:05:36:7c:36:e8:7c:9f:26:1c:e7:48:88:06:fd:a7:
12:7c:1a:c3:8f:64:fd:b0:23:07:b6:19:eb:b1:34:45:b1:2b:
14:61:f3:4a:69:39:d9:92:ef:e6:00:66:c2:7c:17:c5:ee:3c:
9b:c4:a1:f7:95:5c:98:d6:f7:86:67:e8:4e:96:78:ff:bb:55:
f5:ae:c6:2b:ad:77:42:ef:1c:0c:4b:1b:63:1d:45:74:3c:29:
0a:d3:9e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:47:02 2026 by rpki-client