Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
File: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft (raw, json)
Hash identifier: id0qoNE5aMN/2n9BntmAOmseFxWSAgjAeEyg5Ylo3lk=
Subject key identifier: 9D:B4:94:A3:E9:7D:29:70:2C:0E:56:AC:F8:F0:EF:E4:3C:37:F9:AD
Authority key identifier: 06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
Certificate issuer: /CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Certificate serial: 019E31856219240637532AC0ED02381907BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
Manifest number: 15E1
Signing time: Sat 16 May 2026 16:01:25 +0000
Manifest this update: Sat 16 May 2026 16:01:25 +0000
Manifest next update: Sun 17 May 2026 16:01:25 +0000
Files and hashes: 1: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl (hash: kYF7f0fBnCcuwslaHePIJ7cfOx0IKRPLWfeuNLRL9vQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:62:19:24:06:37:53:2a:c0:ed:02:38:19:07:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Validity
Not Before: May 16 16:01:25 2026 GMT
Not After : May 17 16:01:25 2026 GMT
Subject: CN=9db494a3e97d29702c0e56acf8f0efe43c37f9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:03:3c:b2:c2:7d:44:bc:4a:8e:b6:7a:5e:
ce:d0:15:d5:f3:50:90:4d:49:40:6a:36:11:22:1d:
2a:11:24:e8:09:fb:12:93:d1:e8:48:7c:6f:01:05:
bb:28:b5:c5:d6:3e:c8:0f:89:fc:a5:a6:ed:21:44:
11:16:86:ae:41:a2:c4:7b:10:cd:ba:93:2b:82:5e:
87:e0:60:19:8d:73:e9:a0:8a:39:43:04:ac:4e:f3:
a1:e8:83:1c:ac:ef:2f:55:35:1c:95:13:b2:ad:40:
b3:5f:02:c1:f0:23:0b:68:11:d3:fb:ab:6d:ea:5e:
41:37:28:e4:64:b9:21:9d:ce:14:a3:cc:cb:e0:f5:
ee:44:a9:39:33:26:c6:39:ad:03:5d:df:cf:1f:44:
ae:4b:05:1b:0c:34:8e:0a:0c:aa:2c:50:20:b8:25:
42:64:61:5e:af:73:d6:85:d9:e2:ef:19:1d:1c:59:
5c:b0:d9:86:e5:74:95:aa:32:c3:d3:61:32:c4:b5:
00:55:7a:cf:e4:22:59:52:4f:8b:e6:cb:d4:e4:47:
e7:8c:d6:a0:2c:fb:56:4d:55:ee:2f:fe:e7:d2:8b:
ca:56:ab:69:d3:b7:a2:f2:49:79:21:34:b1:dd:54:
fe:83:fd:5b:3e:50:cb:a9:e1:2c:a7:17:e0:7c:5b:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B4:94:A3:E9:7D:29:70:2C:0E:56:AC:F8:F0:EF:E4:3C:37:F9:AD
X509v3 Authority Key Identifier:
keyid:06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e7:08:f9:f9:51:70:82:be:23:7d:76:b5:cc:66:06:7f:6c:
39:b5:25:48:a4:57:47:13:9b:2d:b1:89:d4:db:23:e7:f7:d3:
bd:24:1e:fe:27:d7:69:71:57:c7:66:b3:d4:98:b5:3a:02:d8:
25:f0:81:5f:ce:39:38:40:a2:52:78:0d:15:a4:dc:17:00:40:
40:d0:ca:2d:1d:65:9f:92:4a:be:3d:8d:06:2e:cf:ba:28:2b:
68:95:c7:dd:08:c7:6d:c6:33:33:c2:64:3c:57:bc:40:7b:4b:
19:38:d5:03:d0:4a:3b:40:fe:8d:85:0f:36:04:09:b0:ce:33:
45:eb:11:57:f0:b6:47:be:63:cf:22:18:8f:ea:1c:48:b9:71:
61:39:b8:c3:5a:68:f2:f3:90:4c:0e:35:a7:ad:2b:d2:99:26:
a4:5f:89:f2:23:a0:61:03:8c:5c:9b:00:8e:60:83:4c:5f:a3:
59:ec:71:e2:88:bf:ad:e5:08:0c:bb:bd:ba:02:dc:6f:d3:15:
a1:db:80:e1:6a:be:a0:48:29:ed:43:59:a1:65:aa:30:ff:2c:
05:df:11:25:8d:99:32:b7:32:29:b2:c2:8b:c6:e1:b6:32:ef:
d6:19:d3:48:d1:98:3f:94:44:1a:4b:ec:df:9e:b5:25:84:24:
ca:4a:f1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:03 2026 by rpki-client