Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.mft
File: BmVsWtlzg3LVTAN-OX81vpqpJNs.mft (raw, json)
Hash identifier: DBARcO048y1XCgXpeyBiBGpn6xofz+XfwjUCBNfHcl8=
Subject key identifier: 51:65:CA:75:BC:3E:1C:94:8B:A4:DF:CF:21:7E:2C:4E:85:EB:0E:FB
Authority key identifier: 06:65:6C:5A:D9:73:83:72:D5:4C:03:7E:39:7F:35:BE:9A:A9:24:DB
Certificate issuer: /CN=06656c5ad9738372d54c037e397f35be9aa924db
Certificate serial: 01A183E2DCBA984296FE0201FDAF9CA725FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmVsWtlzg3LVTAN-OX81vpqpJNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.mft
Manifest number: 0697
Signing time: Wed 28 Oct 2026 19:00:45 +0000
Manifest this update: Wed 28 Oct 2026 19:00:45 +0000
Manifest next update: Thu 29 Oct 2026 19:00:45 +0000
Files and hashes: 1: BmVsWtlzg3LVTAN-OX81vpqpJNs.crl (hash: 8lwxafh8s/uomOjeQ4plBzBWJ7F0aqdo3sXewZPO0mY=)
2: IuMZcspQ8K2Rh1GaYKyW2FT1kL4.roa (hash: 9/0A8YPeaznPXiLNVP4FFOJdTd1wwZVGFqXuoC2dxWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmVsWtlzg3LVTAN-OX81vpqpJNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:e2:dc:ba:98:42:96:fe:02:01:fd:af:9c:a7:25:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06656c5ad9738372d54c037e397f35be9aa924db
Validity
Not Before: Oct 28 19:00:45 2026 GMT
Not After : Oct 29 19:00:45 2026 GMT
Subject: CN=5165ca75bc3e1c948ba4dfcf217e2c4e85eb0efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:43:8b:98:c3:7f:16:01:01:8b:1d:84:fb:
10:cb:d9:16:41:7d:e9:30:c7:59:07:4f:8a:e0:96:
4e:a3:d1:f0:80:d2:be:cb:f2:06:9c:33:57:51:73:
64:83:a2:53:8d:03:5c:74:7b:ff:7d:4f:42:06:c6:
60:87:6e:af:c3:4a:2d:1a:95:70:3b:39:cb:4a:64:
3d:86:2c:87:97:68:b3:54:30:b9:44:8b:b9:f5:4a:
97:34:6d:ad:64:a6:7e:9d:bb:06:57:be:8b:01:d3:
7f:8b:6c:a9:32:49:c2:19:4f:c6:c8:8e:5e:8a:8b:
16:6c:8f:22:b4:70:a3:80:45:32:49:33:b8:92:d8:
d7:aa:dd:17:c1:da:5b:13:f9:51:fa:be:5e:82:e2:
37:92:94:44:15:70:fa:80:88:8b:81:63:b5:9c:98:
1b:d1:90:13:65:0c:67:02:41:0b:a1:eb:15:47:4f:
4b:3e:94:6b:fc:37:1f:d1:3d:ad:0b:1c:57:56:8d:
0f:e3:e4:fb:ed:2f:50:fd:ae:5b:f9:8c:a7:2c:ef:
04:0c:62:fa:34:ce:c4:2b:8b:ab:c5:e3:12:4d:76:
6b:a7:51:a2:9a:6c:61:72:04:8d:97:5d:20:a5:b3:
34:ed:0d:70:11:40:e2:26:d2:23:82:45:ea:7e:67:
ec:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:65:CA:75:BC:3E:1C:94:8B:A4:DF:CF:21:7E:2C:4E:85:EB:0E:FB
X509v3 Authority Key Identifier:
keyid:06:65:6C:5A:D9:73:83:72:D5:4C:03:7E:39:7F:35:BE:9A:A9:24:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmVsWtlzg3LVTAN-OX81vpqpJNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4a:af:95:b7:a2:1e:a6:d5:22:cc:dd:5b:13:0d:4c:d2:37:
8a:de:fa:e0:35:0f:ea:9f:ab:2d:64:be:8f:67:49:b0:aa:19:
1e:85:c4:5a:42:a0:a3:4d:05:93:bf:08:dd:a3:be:e0:85:a1:
87:b8:28:c2:dd:dc:6b:d1:94:fa:66:26:d8:f5:43:fe:b2:12:
a5:d9:1e:a0:87:d9:7d:d3:61:ef:6d:10:27:00:44:cb:b1:00:
83:d3:04:ea:a8:4a:b2:75:38:ea:77:5e:3c:a6:6f:6a:ae:48:
89:75:80:80:59:27:70:d6:b9:00:b2:56:76:3c:48:f5:c3:60:
1c:92:f3:37:cc:c2:76:69:ad:4c:27:ef:a5:69:95:d8:46:30:
33:ce:28:5b:23:94:7a:8d:75:6a:8b:e4:64:67:3a:db:54:92:
2a:fb:44:9c:fb:0b:4b:b4:98:88:1f:c8:a1:50:d2:41:e2:88:
4a:0f:9e:cc:60:79:35:4d:57:2c:84:a0:d1:e6:b5:a1:79:d7:
4a:c9:4d:5c:a6:a3:2c:e2:1d:4c:58:c4:9b:cb:90:8d:c0:cc:
03:51:68:bf:a3:d6:5d:a6:52:aa:83:e5:39:eb:81:93:3d:e0:
64:2e:fd:e6:f6:75:ea:9b:1c:e9:31:fb:41:44:d3:1e:5c:ef:
ef:80:85:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 03:43:55 2026 by rpki-client