Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
File: BmNp4nBctDPbBlirZm0ItnsVUdw.mft (raw, json)
Hash identifier: KP6j4yjcD/iPWHk/CSCkwRWQyKGp9E6+HO5mdvprM/0=
Subject key identifier: 21:05:5B:E9:39:B1:D7:53:9D:7D:80:E5:13:40:94:74:E0:4E:67:C9
Authority key identifier: 06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
Certificate issuer: /CN=066369e2705cb433db0658ab666d08b67b1551dc
Certificate serial: 019E30E0D90743B6025DC6B0BDDA2A0F4FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
Manifest number: 1835
Signing time: Sat 16 May 2026 13:01:42 +0000
Manifest this update: Sat 16 May 2026 13:01:42 +0000
Manifest next update: Sun 17 May 2026 13:01:42 +0000
Files and hashes: 1: BmNp4nBctDPbBlirZm0ItnsVUdw.crl (hash: sXItfu8X+MQ/kxQznemOWAKCj/a6x2z07UISZWdCqks=)
2: M2182yhCWIp3Dr1q8N4Z80xWV3w.roa (hash: IY36SUnI5dTjS3K8jOcIn+WsAvHQBxCsJZS9oy5ygLI=)
3: jYy2uYNL4nb69qr5FWiz-y5I14g.roa (hash: uK2ZzVfws+izj4DF8qyLOr4woZd1HOHCjMW0FZXm+bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:d9:07:43:b6:02:5d:c6:b0:bd:da:2a:0f:4f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066369e2705cb433db0658ab666d08b67b1551dc
Validity
Not Before: May 16 13:01:42 2026 GMT
Not After : May 17 13:01:42 2026 GMT
Subject: CN=21055be939b1d7539d7d80e513409474e04e67c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:09:5d:cf:b3:b5:19:ee:44:fd:65:9b:4a:
d9:f9:28:9b:7f:ce:4a:77:a1:1b:7a:82:3e:50:ce:
34:af:3e:fb:83:b9:c9:65:49:e2:a5:03:77:df:51:
94:de:56:61:fe:7d:40:ad:d6:9e:2e:3e:57:8c:54:
78:d5:04:a3:92:f7:72:89:1a:18:f1:9b:36:b8:0e:
38:9e:39:66:b3:96:bd:6d:3f:3c:b0:bd:37:0c:4f:
0b:ab:26:37:bd:03:07:11:70:23:fd:af:c7:bd:ad:
20:a2:f9:f4:ab:be:fd:99:75:7c:10:d2:b6:73:ad:
5b:8e:7e:9d:79:92:c5:0d:11:a2:44:d1:85:7d:b1:
95:d2:e3:e2:47:91:86:7f:11:be:61:a5:08:57:a2:
49:ce:03:79:16:1a:5a:5e:35:d0:eb:f5:74:2b:d3:
0b:cf:3a:e1:02:43:c8:85:71:95:d0:c4:25:75:ff:
e3:94:5a:27:bf:24:15:c8:9a:d6:df:73:b3:b0:84:
bc:77:9e:6a:b4:47:a9:d8:98:84:de:eb:d1:87:65:
63:27:1d:dd:d6:12:f7:0b:cf:5f:ea:d6:16:09:47:
97:26:2f:4b:e5:c1:bd:d6:51:f8:31:fa:6a:12:1b:
90:ce:23:70:97:d2:59:f6:1a:c3:4f:c4:0a:dd:63:
8d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:05:5B:E9:39:B1:D7:53:9D:7D:80:E5:13:40:94:74:E0:4E:67:C9
X509v3 Authority Key Identifier:
keyid:06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e5:83:f0:4f:cc:4e:fb:f3:6b:60:16:72:2d:36:85:40:a0:
3f:03:d3:0b:7d:a3:7d:f7:78:28:0f:50:61:00:34:6e:cf:79:
a9:5a:c4:a8:c1:de:ac:9b:3a:c5:25:d8:db:6c:31:66:5a:1e:
0e:0a:c3:5c:eb:5f:50:69:75:91:50:c4:52:55:c9:a9:76:b4:
04:34:13:ab:ce:77:fa:ca:2d:5d:dc:ea:74:f8:6a:ea:68:84:
28:b9:8b:13:a9:c3:ec:05:14:b0:4b:28:df:5a:bf:d8:7d:a2:
ec:e3:76:43:39:9c:ac:87:d2:e6:6b:d7:2b:95:aa:ce:79:e4:
7d:85:49:21:43:18:a3:c4:8e:72:fc:a7:a0:aa:73:43:d1:42:
40:e9:ed:3b:4e:02:b9:8a:2f:9a:46:cd:19:82:e5:47:13:36:
64:9e:46:5d:6f:66:cc:25:e2:9a:46:06:e9:81:ba:85:c5:fc:
5c:2f:50:e3:f4:9e:45:86:a6:ea:dc:42:ec:69:43:00:09:a3:
a6:80:95:fa:a5:87:21:1b:32:05:8a:f1:e1:4f:0c:48:5e:8e:
09:28:6b:97:a2:7e:9e:52:d3:20:f6:1e:39:8e:7c:2b:8c:32:
f5:22:5d:05:6a:9c:25:95:5a:30:7f:cc:f8:1c:da:c0:30:16:
41:ce:22:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:38:45 2026 by rpki-client