Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
File: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft (raw, json)
Hash identifier: bD3q6iQIwBsjZbkXfAAbr+TagRKYZjt+lZ8XHlv3px8=
Subject key identifier: 69:1A:04:79:9E:C1:A4:10:82:53:C7:93:A3:FE:7B:3A:19:10:39:59
Authority key identifier: 06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
Certificate issuer: /CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Certificate serial: 01A00101AD7FC91294E7078E1434039F96E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
Manifest number: 16D1
Signing time: Fri 14 Aug 2026 16:01:22 +0000
Manifest this update: Fri 14 Aug 2026 16:01:22 +0000
Manifest next update: Sat 15 Aug 2026 16:01:22 +0000
Files and hashes: 1: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl (hash: 7JkSmKH9oZNfwqFE7SLqdLzpnaPX/U3LbT6rTMPXeus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:ad:7f:c9:12:94:e7:07:8e:14:34:03:9f:96:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Validity
Not Before: Aug 14 16:01:22 2026 GMT
Not After : Aug 15 16:01:22 2026 GMT
Subject: CN=691a04799ec1a4108253c793a3fe7b3a19103959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:42:c7:6b:17:83:1a:26:45:cf:0b:92:0d:57:
0e:f7:4b:56:7d:3f:bb:f3:09:c9:05:a5:d5:fb:9b:
76:fb:b8:b9:70:be:d4:fe:db:40:5c:f4:f7:e6:01:
97:59:a3:25:67:90:a7:f1:5f:78:6c:fa:3d:a0:e5:
7d:82:26:78:20:db:78:8a:cf:88:b0:8a:17:89:9a:
15:0b:99:4c:c0:95:34:e5:0f:a3:1d:23:57:48:ea:
75:5b:a2:a9:98:7e:68:1a:be:24:6c:db:9d:97:a3:
9a:51:c5:1c:73:20:a9:6c:64:d1:5f:41:fe:5e:07:
5e:e8:7e:9e:be:5f:dd:c8:13:e1:44:00:ec:27:dd:
04:7f:55:e0:1a:6f:52:cf:c7:27:a6:be:fa:0a:57:
4a:8c:43:aa:2a:d7:c3:6c:63:20:04:41:50:37:62:
3b:36:be:0a:77:ad:61:3a:a4:c8:56:32:bb:30:f1:
d6:de:e5:8c:2e:9e:c5:41:15:27:9a:70:a6:6d:42:
72:f6:c9:f1:0f:d0:7f:28:d3:02:03:d2:6a:e0:c9:
9f:cc:ee:50:68:59:10:69:91:31:bd:39:32:4c:2b:
10:ac:63:a6:4a:df:1b:7c:67:4f:f2:3a:7f:f1:22:
37:49:33:74:07:e7:a6:43:9f:28:c7:bb:16:e2:40:
bd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1A:04:79:9E:C1:A4:10:82:53:C7:93:A3:FE:7B:3A:19:10:39:59
X509v3 Authority Key Identifier:
keyid:06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:65:84:e6:63:da:87:35:28:d3:6f:55:71:0d:db:f1:e6:21:
09:76:c3:3f:37:8e:23:63:01:6e:49:95:fd:3b:fb:c3:41:31:
da:ff:82:57:8c:15:60:32:dc:fd:e8:d4:6e:de:14:1d:d3:90:
6a:76:b0:14:29:d1:0e:e4:07:cf:7d:7e:38:c5:db:b6:13:bb:
a3:18:b4:20:5c:fc:f7:b5:1c:a0:5a:86:56:5e:b5:30:d1:cd:
d8:e6:ae:36:92:65:7e:8b:4f:6c:75:97:45:a9:45:10:0e:ea:
cb:06:ff:73:79:0b:3f:0a:00:1c:5f:ae:7f:ad:a6:c2:8a:de:
48:ab:89:04:9b:78:b4:9e:d3:50:fc:3c:58:e3:98:7b:dc:72:
49:27:c5:44:c8:64:ae:0e:4e:c6:67:be:2a:d8:25:7d:c4:f6:
1e:a2:f9:08:c1:f5:79:7f:b8:50:d1:8e:5f:cb:5d:bb:de:25:
7d:31:97:bf:ce:90:02:2f:e6:0a:9a:4a:8f:20:8a:7b:3b:8b:
8f:e4:2b:a6:d2:8c:c4:75:fa:c0:d1:16:fb:c7:05:ad:c2:e9:
9c:cb:68:94:08:2a:b7:99:ba:31:95:d8:0e:75:f8:bc:65:85:
ba:23:4f:c3:fd:71:ec:1e:67:79:6f:95:b6:69:e9:a3:0b:fa:
f1:46:b1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:59 2026 by rpki-client