
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier: m1xuZcU48O0Cq9n0Fm8JPSinUcS+PKNzvs6FPu1kjQk=
Subject key identifier: BF:C0:E1:D8:95:2C:F5:F2:E4:3F:3F:08:23:77:90:3E:99:6A:31:67
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial: 019F97DCC0D7C0E076639B4F688E677402FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number: 0C87
Signing time: Sat 25 Jul 2026 06:00:54 +0000
Manifest this update: Sat 25 Jul 2026 06:00:54 +0000
Manifest next update: Sun 26 Jul 2026 06:00:54 +0000
Files and hashes: 1: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: F5SJbhoy2Hg/6nSTZa6IEDrWBkBeNG32lC9etxZWjzQ=)
2: HOmsaADbKL0_Nb10hk_P_lDZ0_Y.roa (hash: 00uvM1qPEx8W9hFfLWy2Rcng+t4mc0OvA6j8KzFwgTQ=)
3: Xc20FTd_9i1cvP_V-us2VR8rcgw.roa (hash: P+2TwYeHZ5Tcfkj30y1ee92Z2pzwCyx2c2a540pfIM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:dc:c0:d7:c0:e0:76:63:9b:4f:68:8e:67:74:02:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Validity
Not Before: Jul 25 06:00:54 2026 GMT
Not After : Jul 26 06:00:54 2026 GMT
Subject: CN=bfc0e1d8952cf5f2e43f3f082377903e996a3167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7f:92:60:99:f7:47:e4:c1:45:68:c8:b3:68:
5d:9f:83:eb:28:f3:a5:7b:d8:9c:fd:b1:7b:3e:3a:
71:fd:de:f8:5c:0b:a0:a4:a2:38:1e:45:fc:7a:bc:
6f:ed:58:65:fe:43:23:3e:a9:f4:b0:ac:64:ee:39:
6d:9e:e0:6c:d9:7c:21:8f:32:db:44:6c:dc:e4:b1:
90:7c:b0:80:92:ba:3d:71:fd:20:2f:de:22:64:a2:
3c:27:21:ee:c2:7c:07:00:e8:9e:d8:f4:a3:c6:48:
84:79:47:52:db:78:d3:63:9f:87:07:64:2a:09:f0:
86:85:d0:5f:31:d4:8f:0b:43:e4:cc:38:a4:2f:9e:
a7:a1:0b:74:8b:62:66:b1:24:2d:9d:5c:c7:5a:25:
9c:8a:9c:c6:d5:42:47:14:87:91:8b:bd:40:68:fc:
20:9a:e0:56:f5:74:76:ea:56:b4:6a:c3:72:67:80:
10:fc:98:a2:5a:82:e7:d2:d7:5a:b6:03:53:7b:eb:
53:93:1d:b5:59:18:d1:56:36:b5:87:e1:09:ae:87:
a6:df:7d:d7:81:20:4d:87:2a:1c:07:46:a0:d7:b0:
a1:de:b2:78:26:93:c1:50:25:f9:32:3b:5e:fc:ca:
03:5c:8a:1e:49:83:ff:fb:94:94:e4:c3:98:b7:d2:
01:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C0:E1:D8:95:2C:F5:F2:E4:3F:3F:08:23:77:90:3E:99:6A:31:67
X509v3 Authority Key Identifier:
keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b1:f5:b6:02:64:05:89:fd:ee:4f:c1:e5:6b:26:54:0a:8a:
de:67:6b:27:be:ca:27:28:09:99:61:b6:08:4c:fc:a8:0f:97:
e7:d0:5b:83:fa:e4:6f:bf:ff:f8:99:79:c9:4d:eb:ed:60:2f:
b1:21:41:15:cb:01:dd:f5:45:22:1d:4e:3d:3b:70:bc:6b:f9:
6b:5c:3f:2f:e4:53:53:03:4d:ec:89:a8:4d:d0:2e:bc:25:89:
e8:49:af:96:8c:a0:0e:ff:09:5f:89:3a:c7:77:b0:93:37:c1:
66:ac:45:2c:2e:ad:af:49:52:3f:cb:84:fc:e3:25:f6:db:1d:
ce:59:92:65:c1:ca:c6:95:41:23:a0:0e:aa:e1:04:fe:04:6f:
32:05:75:87:24:a6:3f:53:87:20:ad:d1:6a:38:70:09:f3:93:
10:36:8c:81:00:b3:66:f9:9a:ef:aa:12:f8:2c:d8:ef:47:6b:
78:b6:19:93:0f:72:b2:bd:0c:f9:6a:a8:fc:68:eb:9b:34:d7:
74:e3:94:df:57:be:68:da:1f:62:88:89:3d:c7:80:36:06:cd:
d1:7c:bc:5d:cf:c0:c7:89:5f:e3:82:42:74:12:c5:1e:5a:9a:
2c:0a:0d:8e:16:14:7a:f9:f6:1a:88:8a:91:25:72:9a:d7:ac:
24:ae:39:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 11:35:10 2026 by rpki-client