Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier: v1SVi/U1YPh/+8un0XT1M0wursVKHgddmiVYBsNz/EY=
Subject key identifier: 5D:F1:8A:23:D5:5C:7A:D2:21:47:6D:FD:37:3B:3A:A6:60:5E:AE:7A
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial: 019CC787045E3B0D0923AA97ECB53C7659FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number: 0B12
Signing time: Sat 07 Mar 2026 09:00:40 +0000
Manifest this update: Sat 07 Mar 2026 09:00:40 +0000
Manifest next update: Sun 08 Mar 2026 09:00:40 +0000
Files and hashes: 1: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: RXpMixBEUarh+y8kHwYpDaIvmu36dQyfah6TLfYP3yc=)
2: HOmsaADbKL0_Nb10hk_P_lDZ0_Y.roa (hash: 00uvM1qPEx8W9hFfLWy2Rcng+t4mc0OvA6j8KzFwgTQ=)
3: Xc20FTd_9i1cvP_V-us2VR8rcgw.roa (hash: P+2TwYeHZ5Tcfkj30y1ee92Z2pzwCyx2c2a540pfIM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:87:04:5e:3b:0d:09:23:aa:97:ec:b5:3c:76:59:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Validity
Not Before: Mar 7 09:00:40 2026 GMT
Not After : Mar 8 09:00:40 2026 GMT
Subject: CN=5df18a23d55c7ad221476dfd373b3aa6605eae7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:8d:ad:f8:59:0b:cb:50:5b:bc:51:c6:b5:
e7:a6:3d:00:ea:6a:7e:9e:f5:c4:ea:38:e3:b0:fa:
3f:ce:4a:83:b3:35:1e:41:47:c3:28:5d:be:b5:c2:
57:5d:20:b0:c6:59:9f:91:df:6c:8c:74:e5:e7:aa:
d4:64:52:e8:f3:97:2f:a2:e6:68:ab:ab:70:88:4a:
99:20:01:98:6f:5b:51:fb:a3:47:8f:f8:9d:5d:a4:
45:b0:71:74:13:7c:92:6a:6b:bc:76:c4:ba:8f:4b:
41:1d:4a:89:18:2b:62:00:6f:5f:7b:bb:17:8a:aa:
bf:36:f3:17:12:10:5e:14:40:be:18:f7:89:0e:bf:
20:51:87:6f:b6:62:5c:c6:06:31:d1:6b:8a:b7:85:
94:a0:f8:97:8f:38:52:9c:b7:b6:b0:40:77:1b:e9:
e0:fd:55:1c:e2:21:01:48:9d:38:96:67:e8:6e:48:
49:19:aa:a9:64:5b:69:1b:45:d1:9c:ab:a9:a0:3d:
3a:d2:fa:be:85:f4:e5:02:e0:2b:fa:3c:bc:3c:fc:
e8:dc:bf:59:ac:bd:fe:79:de:05:e5:50:0b:67:5d:
0f:aa:ea:79:bc:b1:a7:c9:aa:6a:05:c9:ff:40:4e:
24:dc:e2:b7:3f:13:1f:79:84:91:5e:86:fe:e7:60:
9e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F1:8A:23:D5:5C:7A:D2:21:47:6D:FD:37:3B:3A:A6:60:5E:AE:7A
X509v3 Authority Key Identifier:
keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ab:42:0a:a4:f9:2a:5a:8c:87:4d:00:8b:bf:65:df:e6:1a:
4a:97:63:ac:fa:c9:03:6c:fc:dd:fc:33:20:80:80:f2:30:07:
06:e5:44:00:ce:af:a7:9d:aa:10:69:32:da:fd:74:10:2f:a3:
72:6d:7c:03:44:06:45:0e:94:da:ba:60:54:64:90:a0:33:90:
5a:8d:b5:6e:76:b0:ab:b3:c2:8a:9d:fb:21:66:fd:0f:2e:53:
e8:c9:cc:02:3e:c7:fc:d5:7c:66:9c:66:6d:88:a5:b1:6f:b1:
14:af:55:a6:f1:1b:f9:8d:ba:4e:df:50:7b:26:69:d9:9c:19:
48:7b:eb:37:5e:9e:43:a1:c1:09:5d:98:97:17:3d:cb:87:60:
8e:24:de:6b:60:75:a1:01:c7:a2:5d:33:1b:14:29:89:2c:36:
68:ce:b6:29:02:c2:08:50:25:8b:1b:4b:fc:04:ad:e4:ee:a7:
a1:15:f8:be:c5:16:4a:23:2d:b8:c5:0f:27:dd:d0:a8:93:cb:
68:42:51:15:37:28:79:11:7d:60:8b:f7:98:fd:a0:f4:d8:23:
b5:a3:93:d4:10:db:b0:ad:26:e4:73:ff:ed:99:b2:f4:87:a6:
a7:16:05:e7:88:04:ea:5d:65:30:65:f9:3d:9b:24:0a:91:67:
40:80:27:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzHhwReOw0JI6qX7LU8dln8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NjFmMjBmYjhhN2U2MzVkN2JjYzk0YzAwYmVkNzE3OWI3
NjA4ZjYwHhcNMjYwMzA3MDkwMDQwWhcNMjYwMzA4MDkwMDQwWjAzMTEwLwYDVQQD
Eyg1ZGYxOGEyM2Q1NWM3YWQyMjE0NzZkZmQzNzNiM2FhNjYwNWVhZTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu6NrfhZC8tQW7xRxrXnpj0A6mp+
nvXE6jjjsPo/zkqDszUeQUfDKF2+tcJXXSCwxlmfkd9sjHTl56rUZFLo85cvouZo
q6twiEqZIAGYb1tR+6NHj/idXaRFsHF0E3ySamu8dsS6j0tBHUqJGCtiAG9fe7sX
iqq/NvMXEhBeFEC+GPeJDr8gUYdvtmJcxgYx0WuKt4WUoPiXjzhSnLe2sEB3G+ng
/VUc4iEBSJ04lmfobkhJGaqpZFtpG0XRnKupoD060vq+hfTlAuAr+jy8PPzo3L9Z
rL3+ed4F5VALZ10Pqup5vLGnyapqBcn/QE4k3OK3PxMfeYSRXob+52CeWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3xiiPVXHrSIUdt/Tc7OqZgXq56MB8GA1UdIwQY
MBaAFAZh8g+4p+Y117zJTAC+1xebdgj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMt
YWQ4ZWRmZTVmMGY3LzEvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMtYWQ4ZWRmZTVmMGY3
LzEvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqtCCqT5
KlqMh00Ai79l3+YaSpdjrPrJA2z83fwzIICA8jAHBuVEAM6vp52qEGky2v10EC+j
cm18A0QGRQ6U2rpgVGSQoDOQWo21bnawq7PCip37IWb9Dy5T6MnMAj7H/NV8Zpxm
bYilsW+xFK9VpvEb+Y26Tt9QeyZp2ZwZSHvrN16eQ6HBCV2Ylxc9y4dgjiTea2B1
oQHHol0zGxQpiSw2aM62KQLCCFAlixtL/ASt5O6noRX4vsUWSiMtuMUPJ93QqJPL
aEJRFTcoeRF9YIv3mP2g9NgjtaOT1BDbsK0m5HP/7Zmy9IempxYF54gE6l1lMGX5
PZskCpFnQIAnRQ==
-----END CERTIFICATE-----
Generated at Sat Mar 7 15:55:34 2026 by rpki-client