Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier: QiW7OI44UlsCO1SoDSKI7oSS4R1TN4SKNBO7d5YZHfo=
Subject key identifier: C4:B5:A7:20:C2:BE:0A:5C:78:F3:60:60:B6:1F:D0:68:5A:8B:B1:1D
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial: 019DC0A70BC0011724A5362A3FDDA361FF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number: 0B93
Signing time: Fri 24 Apr 2026 18:01:06 +0000
Manifest this update: Fri 24 Apr 2026 18:01:06 +0000
Manifest next update: Sat 25 Apr 2026 18:01:06 +0000
Files and hashes: 1: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: 5stpPM6drQD2MeHRcnr6ArCXYbSiXGpeKfcHY/TLI6o=)
2: HOmsaADbKL0_Nb10hk_P_lDZ0_Y.roa (hash: 00uvM1qPEx8W9hFfLWy2Rcng+t4mc0OvA6j8KzFwgTQ=)
3: Xc20FTd_9i1cvP_V-us2VR8rcgw.roa (hash: P+2TwYeHZ5Tcfkj30y1ee92Z2pzwCyx2c2a540pfIM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c0:a7:0b:c0:01:17:24:a5:36:2a:3f:dd:a3:61:ff:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Validity
Not Before: Apr 24 18:01:06 2026 GMT
Not After : Apr 25 18:01:06 2026 GMT
Subject: CN=c4b5a720c2be0a5c78f36060b61fd0685a8bb11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:c6:36:ca:60:7e:dd:ac:fc:fc:b4:a4:73:
f8:08:b4:b2:3f:e9:3c:ca:9c:5e:18:d1:5e:f7:36:
9f:46:e9:c2:98:77:d1:2a:47:ea:3e:1a:4a:23:99:
c0:3d:13:3d:02:3a:8a:3a:9c:fe:c8:0b:a4:dd:e7:
e5:02:a2:e3:aa:20:0e:2f:f3:b5:1b:6e:de:62:7d:
23:e2:c9:e8:33:01:55:d8:a3:33:74:1f:8d:dd:9a:
18:f5:d3:10:45:25:95:e0:87:ee:9e:9a:70:8a:5d:
7d:6a:e3:f7:69:f3:f5:8c:45:ae:19:85:f1:f7:df:
5a:94:1e:05:4c:de:6f:da:68:e0:4c:2b:f5:14:22:
d6:ba:94:6b:b0:eb:df:1c:e4:44:c1:5b:22:a3:0c:
ec:d6:52:34:0e:ae:d9:94:11:5e:85:f1:87:f9:ad:
2a:f9:d0:70:1b:32:44:12:05:0a:99:12:f2:d0:5d:
94:de:b2:00:4a:85:b3:ae:51:16:6f:8c:a6:20:95:
bd:75:ca:b5:34:35:88:61:05:36:09:57:4c:36:67:
57:60:06:39:21:9e:2c:47:b5:d3:8f:b0:99:01:c7:
4c:5d:e2:9a:de:c9:21:42:b0:6c:2e:b8:26:8a:25:
0b:3b:da:d3:31:2b:7b:67:a4:54:c1:af:bf:29:1d:
c4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B5:A7:20:C2:BE:0A:5C:78:F3:60:60:B6:1F:D0:68:5A:8B:B1:1D
X509v3 Authority Key Identifier:
keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b5:cf:38:47:3d:d6:d2:75:f1:77:3b:e4:8c:f9:9b:7d:89:
eb:84:37:17:dc:91:55:15:a3:a0:02:00:9c:2d:89:26:28:6b:
58:d0:53:5a:b5:d2:7a:46:10:78:c6:df:2e:4b:53:8f:28:20:
dd:a2:d8:cc:e0:13:2b:d6:74:35:83:a0:2a:fe:46:36:e3:7e:
3c:ec:8d:d0:5d:d9:72:20:b1:3c:d9:c2:bc:47:0a:0a:7c:9f:
8f:aa:90:d0:72:22:9a:38:97:52:c5:5d:6d:57:b8:54:53:1d:
ef:c2:76:50:55:3c:24:08:9b:d9:c0:85:34:f9:a3:93:40:b2:
82:e7:5b:22:40:c3:4a:ab:ea:a9:7f:e9:bc:0a:72:27:0f:03:
05:f0:a8:79:cf:b8:34:f4:8c:34:36:23:b0:d4:0e:41:9a:42:
c2:ee:f8:43:3a:0f:1e:2e:7c:f3:71:14:da:62:a0:e6:c4:c7:
55:58:99:3a:42:ef:be:0b:99:e8:c7:37:05:be:da:75:cb:1b:
ee:f7:7c:79:45:a8:1f:f4:47:39:b3:4f:a9:f3:7c:ac:df:00:
f4:a3:bb:67:ef:43:3b:59:f7:7f:50:bd:d0:99:06:ca:c0:51:
f0:1a:f0:ff:7d:22:fe:6e:5c:88:71:fc:1b:97:c4:b9:76:84:
4a:34:3b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 03:05:26 2026 by rpki-client