Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: MnqH1Lh1VlzMb519A38tLBG5+BCYjVXfPYgWgRcKPPs=
Subject key identifier: AA:C8:61:2D:71:BC:13:3B:32:4E:32:21:0B:4A:02:57:A0:15:1A:D9
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 019D06303541FDA2818E0CE6DE5C58E8DD5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 1878
Signing time: Thu 19 Mar 2026 13:01:55 +0000
Manifest this update: Thu 19 Mar 2026 13:01:55 +0000
Manifest next update: Fri 20 Mar 2026 13:01:55 +0000
Files and hashes: 1: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: O9pepuZgNkrqmmAsEYR0dxf5IMZ6Cfegk03WvM0wRL0=)
2: EFVOpOWZdKE35rgrU-jtXznNsuI.roa (hash: ZDYIfdybtLAlDhDDvMoU7cKEH+7IKf7xCd7YYsfpSC0=)
3: RnV5hShXIae0lSnUpt8VMyIMXCE.roa (hash: pVuZiXTymWxhDl4KCEyg8IDZADRSqa60wrD/ltLvlBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:30:35:41:fd:a2:81:8e:0c:e6:de:5c:58:e8:dd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Mar 19 13:01:55 2026 GMT
Not After : Mar 20 13:01:55 2026 GMT
Subject: CN=aac8612d71bc133b324e32210b4a0257a0151ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e8:02:96:e1:b5:66:6b:a3:58:8a:51:a7:98:
69:91:6a:95:54:04:12:32:28:74:d6:4e:18:87:b3:
4a:62:45:ae:48:bf:d7:12:64:d9:b9:99:a1:9a:49:
c3:1a:2f:b9:61:d0:a4:c0:9d:75:31:c6:d8:96:98:
0c:d2:35:db:2e:8a:20:1a:b4:c5:1a:65:a1:86:e4:
d5:b7:f9:22:d5:d7:d4:5e:7c:f4:05:a2:6f:23:a6:
4d:08:52:e2:e3:96:fb:9f:65:b8:3f:e1:fd:07:eb:
00:e8:f2:b9:c3:55:e4:3d:32:3c:9a:1a:49:99:84:
6c:58:89:42:b8:a5:14:8e:88:b3:1a:4a:b5:83:51:
b8:d3:87:6c:d0:20:18:e7:52:83:2b:a0:17:d7:29:
ef:8b:56:68:36:14:e5:53:64:e9:a3:0c:ef:7f:20:
a5:86:6d:91:11:ec:78:e5:b1:f2:5f:58:c3:6d:d5:
b1:96:2d:1d:fe:17:75:31:01:69:af:46:2d:52:5b:
bc:0a:a4:26:f0:a9:4c:bc:ef:d2:0f:f9:70:5a:6c:
c9:a5:f4:7e:a6:c2:ae:52:f5:93:ca:76:3c:70:8e:
a7:61:43:f7:1f:85:df:a0:18:e9:22:ec:b8:07:28:
b6:9a:22:22:02:f7:19:5c:55:c1:3b:e9:18:89:0d:
c9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C8:61:2D:71:BC:13:3B:32:4E:32:21:0B:4A:02:57:A0:15:1A:D9
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b2:d3:e0:35:7d:e0:d8:f1:09:5c:7b:8b:c4:e0:cc:71:e6:
0c:28:54:cd:c1:6e:1b:ae:b2:5f:f4:9f:ba:73:c5:4d:7b:1f:
e0:16:23:26:90:ec:b4:bc:61:ad:ca:fc:14:18:75:a8:18:d2:
f4:dd:b4:44:45:94:f6:93:55:70:4b:72:df:8e:5d:02:33:b6:
87:8a:fd:25:74:f7:cf:07:88:12:93:6e:a6:bc:fc:67:a8:88:
69:24:6b:cb:05:64:20:bc:ba:67:8d:72:f9:aa:8d:07:d3:b6:
16:12:ac:ec:de:2e:2f:dc:28:4e:c5:d2:f9:83:be:b1:8e:ab:
f9:9a:e8:05:a2:79:c3:bf:ab:1a:41:d5:1a:1c:d2:1b:30:fb:
c5:da:6e:62:52:9e:74:fd:21:3f:b7:28:7a:9b:cb:a4:4b:c9:
d3:31:f0:a3:ad:5d:02:80:21:e9:c6:a9:f6:94:7a:cf:20:e1:
81:65:ef:5b:ad:78:15:78:76:8a:c5:0c:eb:48:a5:56:6a:7f:
54:e7:a1:f1:02:08:99:54:bb:5b:b9:3e:0c:6c:fb:e6:9a:06:
b6:63:ff:9d:ec:55:01:47:71:f9:e2:92:d2:35:4d:ed:d7:43:
01:ba:29:97:52:d2:51:eb:9e:97:61:28:cd:86:f8:73:b9:69:
f1:c0:09:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 21:39:44 2026 by rpki-client