Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.mft
File: BmVsWtlzg3LVTAN-OX81vpqpJNs.mft (raw, json)
Hash identifier: D+Ws9eXJnB21JXuFPX6cVNMxebMe3k1YL4G9p1ovW1o=
Subject key identifier: 0C:8E:40:28:C6:00:FF:50:D1:AB:A6:FF:93:DB:4F:C7:1F:7D:D4:3E
Authority key identifier: 06:65:6C:5A:D9:73:83:72:D5:4C:03:7E:39:7F:35:BE:9A:A9:24:DB
Certificate issuer: /CN=06656c5ad9738372d54c037e397f35be9aa924db
Certificate serial: 019FA304DA8AFEEBF7D864F75A07CA42CB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmVsWtlzg3LVTAN-OX81vpqpJNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.mft
Manifest number: 059E
Signing time: Mon 27 Jul 2026 10:00:31 +0000
Manifest this update: Mon 27 Jul 2026 10:00:31 +0000
Manifest next update: Tue 28 Jul 2026 10:00:31 +0000
Files and hashes: 1: BmVsWtlzg3LVTAN-OX81vpqpJNs.crl (hash: pFu093FhfWY3EOvVYGADL0Ke4GGaAbScWW+ZsDxI3Co=)
2: IuMZcspQ8K2Rh1GaYKyW2FT1kL4.roa (hash: 9/0A8YPeaznPXiLNVP4FFOJdTd1wwZVGFqXuoC2dxWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmVsWtlzg3LVTAN-OX81vpqpJNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:da:8a:fe:eb:f7:d8:64:f7:5a:07:ca:42:cb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06656c5ad9738372d54c037e397f35be9aa924db
Validity
Not Before: Jul 27 10:00:31 2026 GMT
Not After : Jul 28 10:00:31 2026 GMT
Subject: CN=0c8e4028c600ff50d1aba6ff93db4fc71f7dd43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:da:cf:f0:bd:18:a2:77:17:85:db:5d:43:b5:
cc:59:b3:71:3d:43:05:a9:da:74:69:06:1a:f3:cd:
ad:ed:4c:95:fe:af:6e:71:c5:ec:82:46:2a:19:14:
03:ad:5f:7c:d2:71:57:97:42:33:da:97:bb:fc:3a:
a9:e5:ba:cd:84:1b:6b:34:58:05:1b:d1:ba:49:53:
8d:96:82:e8:8c:7d:6c:45:75:e5:ab:2f:10:d8:d7:
57:a8:59:55:ec:42:6e:72:8b:fe:69:19:cf:5f:34:
bb:04:49:b2:79:a4:a2:a7:7a:d2:75:7a:e5:1a:df:
db:dc:c9:68:7d:c1:bf:84:68:ac:ff:36:0d:c1:a7:
7c:92:ca:78:f9:77:68:db:17:24:31:75:69:eb:bf:
51:8e:b0:19:1c:65:23:4d:8f:b7:5c:55:d5:d5:df:
7a:75:35:c1:5b:9f:79:bc:d3:19:c9:04:a3:1d:2a:
d5:14:dc:1e:54:c5:58:aa:0a:34:65:6d:6a:38:c1:
76:87:7d:7e:79:19:0b:8f:90:cf:9a:06:51:5b:58:
cb:0a:21:cb:b3:d4:db:c5:34:ab:ee:99:c1:24:2b:
1c:7f:2d:8c:41:5d:7f:da:ab:cd:1f:48:22:76:5b:
e8:6d:9c:ce:ec:eb:0a:c6:17:f4:2b:a9:ff:22:29:
61:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8E:40:28:C6:00:FF:50:D1:AB:A6:FF:93:DB:4F:C7:1F:7D:D4:3E
X509v3 Authority Key Identifier:
keyid:06:65:6C:5A:D9:73:83:72:D5:4C:03:7E:39:7F:35:BE:9A:A9:24:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmVsWtlzg3LVTAN-OX81vpqpJNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2c:cf:52:6c:95:f0:bd:62:ec:82:f8:cf:2f:47:c7:52:9f:
7c:01:8f:c0:34:0b:b3:fd:43:06:a1:dc:d7:92:2b:c5:78:92:
30:05:03:f3:45:bf:be:83:8c:e8:2b:3e:a9:c2:13:a6:8f:86:
6d:fb:b6:be:81:91:f9:f7:ba:44:f9:30:af:1a:cf:4e:c4:67:
00:7d:dc:4d:39:61:5e:92:9e:c1:ac:6d:55:a0:f1:55:1f:88:
cd:b6:cb:22:23:cc:67:19:2e:82:cf:7c:d6:5c:33:a2:6d:41:
35:60:ac:68:35:df:46:e0:5b:23:c8:1d:21:1a:74:c0:c1:9d:
e8:6f:0d:05:a9:6c:f6:08:01:57:95:a3:08:b6:e5:74:de:d7:
e3:0d:f8:65:01:9a:a3:ed:ea:35:1a:02:02:28:52:7f:89:f5:
a0:e1:f4:90:af:db:e2:cc:fa:25:52:61:fc:c7:79:30:b0:34:
75:36:bc:51:0c:01:5c:b9:70:04:00:d4:1b:60:0b:b2:23:6a:
33:3d:16:41:33:82:7b:da:9b:20:14:ab:7f:da:f7:f1:ee:18:
8a:a7:60:89:f1:a2:2a:a6:d2:a3:9a:c9:a0:9f:eb:38:a0:d5:
c1:ad:95:a9:44:a7:9f:30:43:92:c0:8e:4a:a3:06:93:52:0a:
72:3e:65:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:55:58 2026 by rpki-client