Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
File: bmgcJW1nKYHLOc4lynjPIVz06qY.mft (raw, json)
Hash identifier: cOaydxUSlwQzMTcUL72UxNMjVudxmhoG0UqO/Dp3CCQ=
Subject key identifier: 33:71:80:3E:D7:F9:92:62:10:AB:A5:30:7A:28:7A:C9:A6:05:A2:EB
Authority key identifier: 6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
Certificate issuer: /CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Certificate serial: 019D39418494379AE76508C5BE517C7C6496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 11:01:28 +0000
Manifest this update: Sun 29 Mar 2026 11:01:28 +0000
Manifest next update: Mon 30 Mar 2026 11:01:28 +0000
Files and hashes: 1: YZsSqZ83PZHqITH4YFpFHp-CbNM.roa (hash: QbeDQPWAdsSWd1GvVVV8Ck8/JfIxsYeUNlUaYQgvu98=)
2: bmgcJW1nKYHLOc4lynjPIVz06qY.crl (hash: tGhRNTCy4g6uwYt2gmW1ft47+Ww5i2cU/WLXejMPUqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:84:94:37:9a:e7:65:08:c5:be:51:7c:7c:64:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Validity
Not Before: Mar 29 11:01:28 2026 GMT
Not After : Mar 30 11:01:28 2026 GMT
Subject: CN=3371803ed7f9926210aba5307a287ac9a605a2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cc:0e:d6:fc:5d:61:35:8b:71:18:cc:eb:3a:
47:b9:46:9b:32:51:e1:4c:9f:be:16:72:f8:3d:b7:
35:df:ec:de:25:ae:26:84:c4:a1:63:92:ef:c5:5a:
af:51:44:d2:a3:4a:8e:1a:93:5a:9e:6e:c4:26:3c:
1b:bd:44:7b:ac:bb:14:97:fb:a8:55:95:95:a2:31:
3c:c0:f9:66:fd:84:3b:34:55:94:b7:a5:66:8f:08:
b7:2d:ca:0e:09:ef:8a:46:27:05:7d:8f:64:3f:d7:
2a:00:b1:6d:6d:4f:41:ca:26:b1:fe:1f:21:3c:6c:
da:28:de:5d:f0:89:c8:22:f0:4a:e8:31:40:09:ee:
0f:8d:b9:04:54:9c:a2:fb:6a:7b:0a:2e:66:d6:50:
84:cf:ec:71:de:ab:42:bf:14:bf:a8:9d:00:f6:11:
bb:57:fd:9f:33:47:c2:5b:93:ec:6d:12:fe:9a:c4:
7f:3b:06:33:23:5c:8b:41:b3:43:a5:7f:c6:31:9b:
48:fc:a3:cf:f0:ac:84:21:c8:62:4b:c7:bd:48:76:
4e:2a:ec:28:2b:81:ef:d5:19:7b:80:b0:00:8c:50:
1b:0d:d7:13:95:e1:4b:a8:c4:8e:48:1a:e3:71:c4:
7e:e3:65:24:94:c2:01:31:49:90:c4:54:01:cd:7a:
22:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:71:80:3E:D7:F9:92:62:10:AB:A5:30:7A:28:7A:C9:A6:05:A2:EB
X509v3 Authority Key Identifier:
keyid:6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e3:83:4c:74:37:eb:73:3c:a1:08:6c:b6:cc:fc:f9:32:1a:
4e:61:b4:cd:11:10:9f:18:9f:e3:50:d3:d3:c0:87:38:35:19:
6d:e0:0c:97:f4:bb:74:f4:e2:cd:6c:5a:05:f5:35:f3:a4:c3:
2f:dd:b8:2b:56:dc:75:63:e6:cc:5d:44:89:26:44:80:cd:10:
86:c0:a7:7f:fb:9a:55:e1:0b:9d:8b:c5:36:99:99:ba:34:19:
a7:ab:b3:b3:0b:cc:35:30:86:da:1f:c0:76:7c:8e:72:57:65:
fe:e1:1c:da:ba:f4:23:68:e8:eb:c5:c4:9d:94:0c:aa:72:b5:
2d:f7:10:9f:ad:21:08:55:ac:29:61:dd:0e:5c:14:34:bb:e8:
22:4c:c7:6c:2e:cf:fa:1f:df:10:1e:3f:9a:01:63:39:d9:90:
87:79:0f:f8:73:93:13:f0:72:cb:3c:19:51:d4:f4:6a:c8:09:
43:51:58:ac:bf:39:96:4a:59:b3:4c:3b:b7:6b:18:a3:fd:0f:
df:b0:53:bb:b9:36:4c:24:c1:8f:59:37:22:87:e5:cd:2b:59:
31:03:90:23:57:f6:d8:df:6b:74:0a:30:ff:3b:1d:fa:d9:d3:
82:8c:a1:f0:3d:1d:4f:f4:3f:e1:9b:82:c9:34:29:30:36:8a:
cb:a2:2a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:13 2026 by rpki-client