Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: KtncC4h3Svs6JQN8Vd/CF4YJeBfRGHN/6wvomjsK9/M=
Subject key identifier: 88:B4:FF:E3:C5:15:70:B5:DD:92:2C:51:59:64:32:06:2F:81:64:48
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 01A0010160E6F7CBD26C0A205D7DC287A01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 16:01:02 +0000
Manifest this update: Fri 14 Aug 2026 16:01:02 +0000
Manifest next update: Sat 15 Aug 2026 16:01:02 +0000
Files and hashes: 1: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: aVelPjwNATbAQagMCs7ttarJL0Cdjdu0EzOlWtzqYa0=)
2: EFVOpOWZdKE35rgrU-jtXznNsuI.roa (hash: ZDYIfdybtLAlDhDDvMoU7cKEH+7IKf7xCd7YYsfpSC0=)
3: RnV5hShXIae0lSnUpt8VMyIMXCE.roa (hash: pVuZiXTymWxhDl4KCEyg8IDZADRSqa60wrD/ltLvlBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:60:e6:f7:cb:d2:6c:0a:20:5d:7d:c2:87:a0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Aug 14 16:01:02 2026 GMT
Not After : Aug 15 16:01:02 2026 GMT
Subject: CN=88b4ffe3c51570b5dd922c51596432062f816448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:34:7d:2f:cf:70:0d:7f:b3:15:f8:8f:52:fe:
04:9e:6f:7a:f6:a8:93:b6:4c:14:08:9d:f4:a9:45:
5c:f1:df:a8:ce:0d:24:c9:1b:45:a2:b6:d0:cc:c0:
1f:16:ef:37:83:ca:b8:bd:c9:3f:64:36:eb:b9:66:
1a:fb:20:00:f7:3f:59:77:02:c6:7c:38:e7:99:6e:
9c:2e:48:30:03:e1:ee:7f:cf:f5:3f:5a:91:d5:20:
f3:a2:f0:e7:64:b2:aa:81:d6:2f:01:5d:d2:5a:91:
99:04:61:2f:eb:05:8d:81:86:85:18:1b:4f:77:6f:
e9:a6:2c:21:d8:5b:97:c8:76:2d:74:5c:6b:a9:b0:
ea:2d:07:c3:9a:a8:94:a7:ea:78:b4:fc:26:6e:ac:
6d:ca:21:5f:85:76:c6:74:e2:34:92:38:56:91:80:
fd:47:05:b7:67:02:86:0e:64:ef:3d:c2:05:26:f7:
3c:7f:23:84:85:4d:ab:d3:61:bd:e5:7a:33:b7:9e:
0d:16:06:ce:99:05:07:6e:6c:7c:4e:fa:66:da:8f:
3e:59:ce:e3:9f:85:a1:7d:c8:ce:4c:5b:24:00:4a:
7d:d9:64:56:4e:50:ae:50:37:ae:27:00:e6:2e:ef:
5d:27:99:96:ae:69:58:30:74:1d:71:f2:db:c9:4c:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B4:FF:E3:C5:15:70:B5:DD:92:2C:51:59:64:32:06:2F:81:64:48
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:cb:dc:30:21:88:a0:80:46:2b:f3:c2:2b:32:fa:65:a6:21:
5e:3c:b3:c5:88:91:e0:69:f3:85:f6:4b:ab:c3:97:2f:8d:da:
29:8d:5e:f9:8d:54:a7:bc:fb:d4:e9:87:71:ed:fd:3d:64:75:
d7:8a:a8:84:dc:f1:94:14:f4:53:ce:d7:db:14:6c:e7:68:ea:
66:07:2d:a0:b4:8b:64:24:9a:43:5c:bb:79:17:8e:9c:89:c1:
59:f0:1d:69:51:71:eb:33:c7:3a:c7:63:34:c0:da:13:8a:7c:
7c:a2:8d:e3:15:dd:27:be:d3:65:7c:a5:41:ee:f4:37:62:29:
ef:8f:11:56:c6:3e:77:5b:14:5d:b9:d9:f2:e1:ea:c2:1e:97:
8d:e8:4a:fc:93:4d:bb:f9:35:ac:59:42:c9:47:c6:a4:e9:0d:
8f:29:b1:77:3c:3c:3e:15:45:27:75:0f:e2:6a:17:21:56:f3:
14:19:a8:43:01:9c:5e:39:a3:c9:1e:d5:0c:f5:10:23:9d:67:
a3:ad:54:5d:5c:76:20:cb:6c:7b:ca:c9:c1:59:e2:46:cd:2f:
44:fb:73:31:fd:ed:74:a5:e6:18:9f:fa:5c:9f:83:0e:10:1f:
fb:3f:77:48:e2:e4:33:c2:5a:84:1f:e0:55:38:96:f9:77:d2:
d1:11:59:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:08 2026 by rpki-client