Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
File: bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft (raw, json)
Hash identifier: 3kLroXUfvkFr562GaUqDeftUmDQOGUdiIvvDnRIA1gA=
Subject key identifier: BD:22:B8:28:03:0A:8A:E9:6A:5C:E1:51:F5:4A:E1:9B:90:C5:27:3C
Authority key identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
Certificate issuer: /CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Certificate serial: 019D37892D6D46383965022C13F7F64806D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
Manifest number: 0DAD
Signing time: Sun 29 Mar 2026 03:00:30 +0000
Manifest this update: Sun 29 Mar 2026 03:00:30 +0000
Manifest next update: Mon 30 Mar 2026 03:00:30 +0000
Files and hashes: 1: IVxozb3aky8T2vxQz78ZpJ9En0g.roa (hash: qnnxuMzzgk+NwHcYP1qJgAC3Y4zOPpFa8GphL9ABcCI=)
2: bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl (hash: B0aJ3fmGM500r/mWObncidkhXVZZhTTIL6ZXpxJMwrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:2d:6d:46:38:39:65:02:2c:13:f7:f6:48:06:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Validity
Not Before: Mar 29 03:00:30 2026 GMT
Not After : Mar 30 03:00:30 2026 GMT
Subject: CN=bd22b828030a8ae96a5ce151f54ae19b90c5273c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3b:cb:ca:81:69:46:7d:27:d4:79:38:f8:a9:
68:92:70:dd:63:cc:20:ec:d5:b8:f2:b6:c3:63:34:
9e:00:06:f4:35:de:e9:59:6f:df:95:36:08:fc:9b:
a9:79:a9:ee:fd:37:e4:6b:44:7a:53:8b:12:7a:98:
b6:ac:55:11:dc:12:e7:c4:04:ac:f9:6a:52:3e:0e:
3c:ca:a0:04:45:e4:70:4d:e3:a8:1e:51:38:a4:79:
f7:ac:02:84:90:70:85:4f:25:a7:fb:f3:e4:b4:2b:
91:68:db:38:2b:46:24:2f:91:98:41:50:e5:b6:2e:
bd:3e:39:c1:f3:ef:4d:74:99:cd:f9:63:67:0e:1a:
2a:d9:2d:e2:80:24:09:92:3a:70:09:46:b1:94:6e:
3f:3a:7f:9e:2a:61:27:72:d7:de:1d:53:90:d3:61:
f6:41:67:1e:a7:82:6f:a5:73:11:1f:66:04:c8:ea:
f2:8b:e6:8b:61:06:fb:de:c8:35:3c:0e:98:43:69:
ae:ea:9a:38:38:5d:a6:64:a8:4f:8c:4e:b3:ba:bc:
76:0c:20:36:c8:f8:06:bf:f3:68:e8:a9:99:55:da:
a3:a6:3f:37:0a:7a:dd:cc:01:5a:9a:5e:32:95:fc:
5b:ff:c0:c8:8c:5e:11:1a:74:83:38:a7:dc:81:0f:
ae:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:22:B8:28:03:0A:8A:E9:6A:5C:E1:51:F5:4A:E1:9B:90:C5:27:3C
X509v3 Authority Key Identifier:
keyid:6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:5f:85:a8:f3:18:f1:74:9d:86:f7:35:a0:e7:79:d5:f9:e0:
20:8b:2a:54:ac:d7:76:94:04:97:b5:e3:d2:8e:f6:7e:c8:ad:
c4:e1:eb:2f:09:e5:c9:6b:2f:4a:e4:84:4e:8a:66:61:4e:15:
34:2d:e2:10:38:68:56:eb:8e:a2:45:a6:cf:d2:e1:8f:63:d6:
fc:96:70:87:f0:54:68:71:90:e6:8e:63:8b:f8:13:9a:34:e4:
36:0e:e3:49:b1:d8:f2:54:20:6e:46:67:90:12:21:51:8a:d9:
2c:0e:28:1d:96:1c:7b:2b:50:18:61:4d:5a:b3:be:2b:85:8f:
09:82:9a:32:17:69:dc:e0:68:65:58:9e:03:ad:f3:71:dc:c9:
ed:48:74:73:24:7e:61:28:bf:08:fb:95:b2:0f:24:b7:d5:0e:
fa:a1:2f:f9:89:0c:20:41:a5:17:13:7b:87:47:32:67:77:6d:
f6:3e:86:89:ca:e4:d5:fc:ea:0e:46:e8:65:41:14:98:4b:05:
c8:50:78:c5:0f:1a:10:05:a5:96:f5:28:fc:fa:9a:eb:3e:f7:
3b:5a:1c:0b:a7:df:a0:15:c6:61:bd:30:27:5f:b5:a1:1e:3b:
41:f7:21:f1:ff:b1:eb:dc:f4:09:95:39:7c:4c:6f:ad:d6:a8:
d2:ec:71:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:52 2026 by rpki-client