Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft
File: bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft (raw, json)
Hash identifier: oUs6rs9N679F9sDDonryPtt58O33LlVAOUbEfbCQw1E=
Subject key identifier: 5C:64:46:79:03:CC:34:55:7A:97:00:57:FE:84:C4:D8:4C:A0:30:80
Authority key identifier: 6C:C1:85:02:45:D2:BF:0B:58:3A:33:9F:2E:B4:F7:C0:90:59:64:0C
Certificate issuer: /CN=6cc1850245d2bf0b583a339f2eb4f7c09059640c
Certificate serial: 019D38D33BDFC562CAFD13F5E64E2AEF04FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMGFAkXSvwtYOjOfLrT3wJBZZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft
Manifest number: 0227
Signing time: Sun 29 Mar 2026 09:01:00 +0000
Manifest this update: Sun 29 Mar 2026 09:01:00 +0000
Manifest next update: Mon 30 Mar 2026 09:01:00 +0000
Files and hashes: 1: bMGFAkXSvwtYOjOfLrT3wJBZZAw.crl (hash: ZOH96WwViui2ttykS5/3r2MwbeYb433w6jIK9e9EEyQ=)
2: sR4VSsh46NucLoZBNFoOCKjAw_w.roa (hash: iz6mxFRpjWhqFGbB1en1IQ8K5ksG0skqK0JvXZzfdr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMGFAkXSvwtYOjOfLrT3wJBZZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3b:df:c5:62:ca:fd:13:f5:e6:4e:2a:ef:04:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc1850245d2bf0b583a339f2eb4f7c09059640c
Validity
Not Before: Mar 29 09:01:00 2026 GMT
Not After : Mar 30 09:01:00 2026 GMT
Subject: CN=5c64467903cc34557a970057fe84c4d84ca03080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:24:92:32:6b:ff:b2:6e:98:a0:36:4a:fa:
df:e6:fc:bc:0f:5c:4b:27:58:ea:58:d2:27:7f:88:
36:72:73:00:4e:e3:c9:a5:6d:3d:a7:75:46:46:47:
5a:64:11:13:53:9f:db:e3:bc:2a:5b:96:c7:4a:0a:
67:69:f8:6a:78:e5:3b:39:06:35:47:26:5d:a2:04:
a3:af:de:b2:d3:d0:5b:b9:d0:25:f6:af:c3:64:1c:
16:22:b4:b3:6c:db:52:3d:b0:5b:dc:36:53:b3:61:
74:4c:97:da:e6:85:13:be:90:a1:41:c4:05:05:2d:
ce:0c:c4:21:86:7f:dd:6a:04:71:cb:bd:c7:07:0e:
37:f5:e0:8b:50:8b:cc:95:86:ac:17:d3:65:ec:bd:
56:2c:22:8f:16:42:90:79:93:95:26:7b:6c:c2:c7:
ae:24:19:02:ec:18:05:b8:fd:a3:65:26:7e:a7:16:
b1:2a:c7:91:83:74:41:e8:0a:02:47:6f:0e:4e:2b:
c2:ca:dc:90:b3:cd:11:87:95:3d:89:f5:da:4b:65:
4e:a3:f6:0a:76:e9:f2:8b:e8:6e:73:67:03:d3:b6:
80:e4:0c:7c:3b:78:b9:6c:d3:3b:11:06:a6:f7:bf:
3b:6e:c6:f7:47:7a:74:6c:0e:81:85:0d:1e:0d:3e:
8a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:64:46:79:03:CC:34:55:7A:97:00:57:FE:84:C4:D8:4C:A0:30:80
X509v3 Authority Key Identifier:
keyid:6C:C1:85:02:45:D2:BF:0B:58:3A:33:9F:2E:B4:F7:C0:90:59:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMGFAkXSvwtYOjOfLrT3wJBZZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f3:02:ed:10:8f:91:c5:24:28:b1:3a:75:45:29:a3:b9:f5:
11:9a:7f:55:21:56:88:49:7e:23:05:89:b8:ce:43:a0:6b:8f:
d7:8e:d8:95:1e:2d:b6:fd:15:40:41:96:e4:d4:66:9b:41:fe:
35:81:b4:1a:52:be:f2:57:30:07:f9:d4:a7:28:6c:27:58:ec:
ad:c4:dd:ab:69:54:47:ed:d4:91:15:1a:b9:e8:0d:b3:53:1b:
be:9a:06:a3:35:00:da:85:36:34:52:28:57:f5:09:80:a6:11:
66:4f:7c:82:70:a0:cb:c0:5c:85:77:38:81:87:68:98:86:7c:
4c:8b:bb:27:f7:d8:7f:4b:4d:80:c7:63:26:4f:fa:af:ac:57:
7f:7b:2e:d6:40:48:ca:8c:4c:9d:e3:a8:d0:54:78:2d:e8:16:
39:57:f5:c1:bd:af:ae:21:cd:7c:85:f4:8f:07:ea:b8:95:2a:
71:a5:88:15:9f:11:8a:a7:01:b8:54:ca:b0:26:af:fa:a3:0d:
d6:98:ce:a9:be:41:d6:99:47:9d:d0:3b:d9:74:5d:51:ee:11:
27:75:08:e2:d9:51:a3:d3:61:4d:11:e1:9d:99:93:17:ff:8c:
e2:22:fb:ba:13:26:73:09:e5:9a:61:2c:0b:48:3d:65:6a:0e:
2d:58:af:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:45 2026 by rpki-client