Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: I1Y8X3CBaQkm+f0nDafScCv26Jkxva3AYl8MCPfpDNo=
Subject key identifier: 0E:90:56:90:50:24:DA:35:7B:09:79:3C:F1:75:E7:4E:27:A2:28:9D
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 01A13DB7F6096E627CCF5D5E4C74C009B248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 04:00:28 +0000
Manifest this update: Thu 15 Oct 2026 04:00:28 +0000
Manifest next update: Fri 16 Oct 2026 04:00:28 +0000
Files and hashes: 1: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: MggHp7T/haTdmoVWuf0Gm3cErOA56i1nArD7/uV8zHE=)
2: EFVOpOWZdKE35rgrU-jtXznNsuI.roa (hash: ZDYIfdybtLAlDhDDvMoU7cKEH+7IKf7xCd7YYsfpSC0=)
3: RnV5hShXIae0lSnUpt8VMyIMXCE.roa (hash: pVuZiXTymWxhDl4KCEyg8IDZADRSqa60wrD/ltLvlBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:f6:09:6e:62:7c:cf:5d:5e:4c:74:c0:09:b2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Oct 15 04:00:28 2026 GMT
Not After : Oct 16 04:00:28 2026 GMT
Subject: CN=0e9056905024da357b09793cf175e74e27a2289d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:dd:27:1f:e7:e1:52:04:52:d4:b3:64:a7:
db:b9:f4:a7:60:9a:07:ed:0b:e1:39:b1:4b:e9:51:
82:aa:56:8e:d8:59:9c:0d:7a:02:70:6c:65:06:1b:
19:2b:c3:dd:a7:eb:e3:94:ed:56:c4:b8:11:51:09:
c0:a8:dc:4f:cb:a3:a3:a5:c5:c3:f1:39:c2:eb:79:
a4:9f:1d:28:39:80:05:c5:ce:21:ad:9c:b3:e9:c1:
9c:14:aa:db:eb:64:a6:e4:3a:88:20:0f:84:a7:d8:
53:99:4b:1d:1a:57:15:04:fa:34:2d:c3:ad:f9:28:
63:2e:59:6c:5a:04:49:9d:86:ce:41:55:2a:e6:4c:
82:e5:a4:21:29:2d:0e:15:dd:a1:6a:e3:2d:69:68:
2d:f2:77:3b:53:46:4f:de:d4:ae:b8:f2:ec:b2:fc:
8e:90:78:de:59:d5:6c:9e:0a:9f:bf:d7:57:e5:e4:
ae:53:b6:41:2a:cd:35:c7:8c:24:6d:7f:65:14:f6:
2e:0f:2f:c9:75:c9:87:7a:93:70:20:76:fa:90:b7:
f5:d2:87:7c:8d:1e:3d:ee:ea:1c:4b:73:7b:26:13:
35:ca:f0:75:91:9f:ee:77:1c:b7:96:e1:61:8b:45:
82:eb:9a:de:d3:89:26:fa:43:bb:2b:f9:f6:c5:32:
53:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:90:56:90:50:24:DA:35:7B:09:79:3C:F1:75:E7:4E:27:A2:28:9D
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e3:74:86:c5:31:fc:0e:fb:fe:35:4b:11:9e:71:25:61:fc:
36:b1:dd:10:65:10:61:35:dd:47:12:22:fc:3b:d3:2a:26:16:
f4:fa:77:b7:50:0a:94:be:9b:9b:39:36:69:c6:9c:b0:d2:a8:
e0:4d:20:64:aa:36:cb:d0:b1:45:37:46:e9:92:57:f4:12:58:
00:fa:56:a5:0f:34:9f:da:59:57:7a:7f:00:95:24:cb:73:95:
bc:35:35:52:04:cd:c8:f8:f1:cb:d2:2e:b3:b6:4f:c0:76:dc:
4a:f2:de:6e:be:60:36:20:ed:98:fe:31:78:20:1f:9e:24:96:
07:7d:f2:c4:ff:af:0c:aa:84:cc:68:04:8c:d5:5f:be:1c:9b:
d6:bf:3a:c5:e4:3a:e4:da:01:5b:49:a0:b3:21:75:ec:4a:8b:
33:32:a2:55:84:50:b9:4f:2f:37:8a:04:57:f2:48:b3:dc:88:
14:57:34:b4:c6:64:b5:33:d6:69:80:31:77:d0:8a:ca:cd:7f:
03:25:74:60:a7:dc:a7:56:b9:7d:b3:72:38:93:f1:76:b1:ed:
f9:29:bd:dd:3a:d6:15:d2:6c:a8:18:64:01:96:c5:6b:e9:fe:
0c:b4:2e:a8:d9:06:93:c9:a9:ee:97:50:88:61:99:4c:5e:dc:
81:53:ae:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:40:06 2026 by rpki-client