Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: WFcpi5JWeppA/4hdcpquztaXW/3arMjhQPF+yBxPleY=
Subject key identifier: 3B:F7:32:8D:C4:3C:38:9D:62:7D:2E:52:5E:C6:7C:87:0D:E8:47:08
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 019F19442ED80E2A9DCA49C21A29995E1536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 198B
Signing time: Tue 30 Jun 2026 16:02:06 +0000
Manifest this update: Tue 30 Jun 2026 16:02:06 +0000
Manifest next update: Wed 01 Jul 2026 16:02:06 +0000
Files and hashes: 1: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: 5dtx5Jt+Ygi/EWhMb6M51kwNpgOVchEKFp2qBx08XDc=)
2: EFVOpOWZdKE35rgrU-jtXznNsuI.roa (hash: ZDYIfdybtLAlDhDDvMoU7cKEH+7IKf7xCd7YYsfpSC0=)
3: RnV5hShXIae0lSnUpt8VMyIMXCE.roa (hash: pVuZiXTymWxhDl4KCEyg8IDZADRSqa60wrD/ltLvlBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:44:2e:d8:0e:2a:9d:ca:49:c2:1a:29:99:5e:15:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Jun 30 16:02:06 2026 GMT
Not After : Jul 1 16:02:06 2026 GMT
Subject: CN=3bf7328dc43c389d627d2e525ec67c870de84708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ff:70:03:fd:46:69:b4:09:54:8f:7b:79:d7:
86:12:3d:2a:e3:10:03:cd:30:4b:fa:76:a1:57:ee:
81:78:4d:ab:b2:3a:82:2f:69:ee:a9:91:b1:04:31:
c7:73:6f:46:26:4f:d4:54:2e:75:ba:da:0b:05:13:
9f:ab:c4:55:e8:4c:ad:09:fd:2e:14:52:21:af:ee:
de:30:1d:7e:11:0d:b2:17:aa:79:b7:d4:58:1f:11:
e4:70:85:60:a6:dc:9a:b2:b3:32:77:42:9f:c6:70:
3c:a6:ab:87:2c:a4:10:b3:c2:ae:ea:4c:76:cb:5d:
07:8e:28:90:9f:d1:b3:5a:82:9c:eb:5e:56:f7:6d:
03:98:bf:8a:87:ce:cf:0a:c9:e3:42:5a:89:eb:bd:
23:80:28:42:98:55:7d:8a:db:9c:48:1c:b9:13:b4:
5a:d6:25:2d:60:ba:ed:59:c4:ad:23:1f:c8:92:3c:
08:bc:34:0d:7b:9c:76:17:d6:49:10:1b:da:7d:25:
e3:0f:a4:63:0a:7e:e0:91:f3:5b:97:28:e9:73:77:
93:9a:ca:44:ae:1e:b2:2d:30:ad:64:ea:df:99:87:
ec:fc:2f:cc:33:a6:17:7f:4e:cf:c9:20:b3:94:8b:
a1:68:2e:ce:41:78:66:14:27:49:64:71:2d:46:ee:
74:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F7:32:8D:C4:3C:38:9D:62:7D:2E:52:5E:C6:7C:87:0D:E8:47:08
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e5:a7:b5:26:12:c0:fe:7e:34:22:a4:02:d4:42:d0:c7:5f:
22:d9:52:2a:e8:fe:71:84:a9:2c:bc:2f:1d:50:87:3c:47:98:
98:80:4c:d9:7c:3a:9b:7a:92:3d:f8:71:17:b2:68:a1:9a:b2:
d6:89:49:03:bc:e0:a6:f1:b5:c3:4e:99:23:80:18:e8:33:1b:
ce:e2:d4:f8:d6:da:4f:da:cf:02:5f:b1:c0:31:fb:fe:21:98:
c4:a9:4d:0a:1e:8a:67:46:91:30:26:03:9f:ec:60:d8:f4:65:
ed:b2:e6:fc:12:82:24:c6:b5:d6:d6:6b:c1:1a:51:5b:cc:df:
21:d3:22:a6:1d:1e:54:e4:c9:1b:1c:a4:5b:6e:3d:6d:18:47:
cc:40:76:e0:9b:42:84:a7:0c:8d:f5:8b:19:5c:d4:aa:26:30:
f7:4a:38:d4:12:ac:2c:f8:43:e6:68:63:e5:3a:52:92:ba:f2:
87:68:d9:38:e2:7b:80:33:41:94:15:21:ba:d3:4c:d4:c1:ee:
83:76:82:d7:d8:e3:b2:ac:00:19:e1:4a:03:84:a7:5c:7f:c9:
83:eb:95:4f:8b:ab:b4:35:10:85:10:cd:32:7e:03:dc:3f:d0:
f3:56:67:3e:7e:4d:f4:cb:e8:47:25:be:bc:ed:be:9f:5e:c3:
b3:d4:39:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:44 2026 by rpki-client