Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
File: BmNp4nBctDPbBlirZm0ItnsVUdw.mft (raw, json)
Hash identifier: pVt/7wwDaWV0Qp61A5rhxJd4lUN6ME9530iKT3z04mU=
Subject key identifier: C6:C1:2B:AC:E0:63:E5:56:5F:7E:28:88:7F:15:A5:F8:86:65:8A:42
Authority key identifier: 06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
Certificate issuer: /CN=066369e2705cb433db0658ab666d08b67b1551dc
Certificate serial: 019D39AE8056DB43D1E330CFF053CD114AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
Manifest number: 17B5
Signing time: Sun 29 Mar 2026 13:00:30 +0000
Manifest this update: Sun 29 Mar 2026 13:00:30 +0000
Manifest next update: Mon 30 Mar 2026 13:00:30 +0000
Files and hashes: 1: BmNp4nBctDPbBlirZm0ItnsVUdw.crl (hash: OazsMUaKaKLmTY+deWHY/uiCPyh8l4vzFVND58FMigM=)
2: M2182yhCWIp3Dr1q8N4Z80xWV3w.roa (hash: IY36SUnI5dTjS3K8jOcIn+WsAvHQBxCsJZS9oy5ygLI=)
3: jYy2uYNL4nb69qr5FWiz-y5I14g.roa (hash: uK2ZzVfws+izj4DF8qyLOr4woZd1HOHCjMW0FZXm+bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:80:56:db:43:d1:e3:30:cf:f0:53:cd:11:4a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066369e2705cb433db0658ab666d08b67b1551dc
Validity
Not Before: Mar 29 13:00:30 2026 GMT
Not After : Mar 30 13:00:30 2026 GMT
Subject: CN=c6c12bace063e5565f7e28887f15a5f886658a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ef:cb:32:d9:90:5b:51:f0:63:2d:4c:78:94:
bb:ed:6e:41:66:1f:c5:87:73:89:53:24:6a:8c:e6:
b6:62:96:8f:e4:a4:3e:da:12:40:8f:ed:7a:e6:e9:
60:56:ae:6d:5e:7c:fa:0b:5e:1e:a8:3e:69:dd:d0:
a5:11:09:6d:7c:7c:f5:24:00:1e:d5:54:ff:e5:a3:
2a:cb:47:94:e9:00:1b:4d:2c:f3:bc:85:52:a5:d3:
66:1b:a9:90:69:fd:8b:ab:46:e5:5a:db:6a:46:1b:
7b:88:76:db:dc:6d:d2:56:cc:14:be:53:d1:7e:36:
92:bd:4d:56:60:56:12:7f:af:fb:a1:5b:af:73:d7:
f1:58:d7:9e:02:db:08:1c:03:3b:9d:73:07:26:74:
a2:83:1e:0d:9f:ba:11:1e:a6:e9:3e:4f:51:d3:bb:
98:43:a5:0d:57:0b:c6:68:e4:aa:97:fc:6e:51:dc:
2f:11:30:98:7c:da:3e:0a:96:01:0e:3d:9e:c5:46:
02:6a:ce:84:b7:1d:80:27:96:60:68:6a:00:2e:32:
98:47:96:9c:bd:a9:3d:70:c2:f7:9a:a5:f8:79:e7:
f7:7a:53:d6:e6:98:64:36:2b:da:48:41:de:92:90:
79:27:9f:a6:c1:a0:ee:6b:92:8d:90:f4:51:60:b9:
fb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C1:2B:AC:E0:63:E5:56:5F:7E:28:88:7F:15:A5:F8:86:65:8A:42
X509v3 Authority Key Identifier:
keyid:06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:00:32:77:20:10:1d:63:84:d4:44:14:ef:6f:2a:79:02:f8:
ed:18:34:6c:12:fa:f3:0f:96:8a:3f:5a:4b:66:86:37:cf:a2:
ce:fd:8b:55:c0:56:a3:c8:be:26:ae:35:a0:56:cf:72:95:db:
75:fb:41:23:6a:41:82:7a:60:cd:d7:ed:15:d6:a6:47:d6:2e:
38:6f:74:16:34:d8:36:6c:6e:8d:3d:2a:74:24:3c:98:e9:6d:
0e:7a:38:20:7e:bc:b0:6f:1e:4d:1d:66:ec:c5:ce:3f:f7:69:
c0:ed:29:7b:52:0f:27:0b:fc:76:7f:e7:09:d3:09:dc:24:ad:
7d:cf:f3:58:43:55:33:c5:8e:b7:0b:0a:65:d0:ec:e5:f3:ea:
72:bb:7a:f3:83:0f:36:4f:3c:1c:3d:b7:e6:6a:5a:65:b8:75:
a6:7d:42:6b:4b:74:94:f7:d6:fb:50:64:df:4d:8c:46:11:ea:
1c:79:65:5c:02:75:a4:a5:bd:93:bb:27:19:9a:29:d2:01:78:
f0:e2:b0:31:a9:58:5f:ea:4d:3d:ae:96:e3:39:63:2a:d2:47:
52:df:51:2a:a0:bd:9a:c7:ec:9f:2f:d9:90:84:17:40:05:05:
eb:95:de:56:ce:f1:f8:af:1c:a4:da:7c:5c:0c:26:19:8c:44:
5e:a5:30:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:24:48 2026 by rpki-client