Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
File: bmgcJW1nKYHLOc4lynjPIVz06qY.mft (raw, json)
Hash identifier: th0gjl4+05elUr/9gr5OI3ODIxq7KhMFaSXsB81caoA=
Subject key identifier: 2E:17:32:A4:B4:9D:FD:DC:12:B0:F8:BD:0A:9E:CE:C0:2C:42:02:64
Authority key identifier: 6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
Certificate issuer: /CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Certificate serial: 01A1803D7503DEDC289D6B234EB5452A684C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
Manifest number: 1AC3
Signing time: Wed 28 Oct 2026 02:01:13 +0000
Manifest this update: Wed 28 Oct 2026 02:01:13 +0000
Manifest next update: Thu 29 Oct 2026 02:01:13 +0000
Files and hashes: 1: YZsSqZ83PZHqITH4YFpFHp-CbNM.roa (hash: QbeDQPWAdsSWd1GvVVV8Ck8/JfIxsYeUNlUaYQgvu98=)
2: bmgcJW1nKYHLOc4lynjPIVz06qY.crl (hash: dMXpiKxGtzpCpCPh9SZerSEl+fG6wezo8UHSH7WjsL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:75:03:de:dc:28:9d:6b:23:4e:b5:45:2a:68:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Validity
Not Before: Oct 28 02:01:13 2026 GMT
Not After : Oct 29 02:01:13 2026 GMT
Subject: CN=2e1732a4b49dfddc12b0f8bd0a9ecec02c420264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:ea:88:0f:65:f5:03:9f:0f:eb:05:b7:42:
06:e1:30:a8:99:23:cc:e0:12:a1:65:57:12:23:72:
c2:08:89:7e:d8:6b:5e:f5:d9:20:8f:76:97:f7:c6:
96:9f:3a:80:00:b8:bd:ca:b8:02:fd:d7:31:af:ef:
06:2e:43:c1:d1:e2:18:14:b0:fa:6d:d0:c0:bc:42:
73:b0:e7:22:ab:bc:2a:14:db:f1:6e:1a:60:39:e1:
7b:a1:6e:83:be:d3:84:09:ef:97:7d:2b:9f:37:06:
b8:fd:04:cb:72:45:34:5a:6f:2c:c0:a1:b5:2d:f3:
36:31:d9:10:46:79:3a:c8:45:a3:51:c0:2d:9c:ae:
48:15:69:83:f2:55:a4:c6:73:28:85:08:24:3d:4f:
46:6e:9a:0b:01:38:a6:a0:c9:7c:bb:2b:ec:1f:8d:
4b:f7:55:73:01:91:8c:08:97:64:68:2a:ab:c6:4e:
c5:2e:9f:66:cf:10:b6:53:0b:df:8f:4c:e4:c4:e0:
34:ec:79:81:6b:5d:37:50:28:96:17:25:5e:8b:e2:
8c:a3:6b:02:b4:50:c0:b1:d4:4f:e4:3a:7a:57:76:
1c:6c:b7:e2:06:fb:b7:69:9a:16:a5:2e:12:c9:83:
e4:f9:08:b1:37:95:e0:72:02:90:9d:4a:3d:8d:f7:
48:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:17:32:A4:B4:9D:FD:DC:12:B0:F8:BD:0A:9E:CE:C0:2C:42:02:64
X509v3 Authority Key Identifier:
keyid:6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:57:d1:1e:ed:85:57:28:6e:63:6e:b3:8b:b6:aa:05:20:68:
25:e1:4d:68:b7:f9:27:7f:15:69:22:0f:fa:fb:bd:c2:e7:fe:
db:9e:31:df:5a:f6:6f:d9:1c:e4:23:25:06:11:ae:07:d8:ab:
2f:c2:ad:0d:82:e2:0b:5a:2d:c5:d6:0d:e8:c5:a6:e4:ab:7c:
e2:5c:61:61:c2:06:1f:6e:d1:85:c6:de:ce:25:9b:e6:ab:f4:
7a:ee:01:64:50:44:49:26:3c:b2:c1:91:5f:c4:85:2b:29:01:
40:13:98:17:0b:9c:99:ac:b6:cf:50:cd:56:7f:b3:64:39:78:
c9:40:2f:14:f9:8e:b7:90:d2:ff:0a:76:2c:64:c4:45:d6:6e:
46:b5:b4:9d:f0:24:9b:b5:80:15:db:ad:ff:f4:11:c5:11:0b:
44:7f:21:96:60:eb:8e:77:8c:1b:96:11:4e:68:07:9a:09:28:
3e:38:bf:ed:02:b7:cd:bd:9d:e6:cb:d4:e1:fc:86:bd:b0:b0:
7f:a2:df:80:d9:89:2d:0e:e0:b5:e5:5a:4c:41:07:22:aa:14:
53:c9:bf:30:0d:ce:ee:f6:8f:9c:6b:3e:61:ea:3f:7e:11:01:
3d:8f:57:82:a9:54:34:63:4d:68:cc:61:d3:f9:79:6d:97:ac:
b9:40:17:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:23:18 2026 by rpki-client