Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
File: bMs_hCGEjxE5UekHCz92OVkzE5k.mft (raw, json)
Hash identifier: 3YxQ2XcU04wnFvLH0PY2ctm69mq63ysaT1zM3wLiRmE=
Subject key identifier: BC:50:E7:CF:B2:B8:34:56:6D:C6:79:49:D7:19:E7:96:31:97:A4:76
Authority key identifier: 6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99
Certificate issuer: /CN=6ccb3f8421848f113951e9070b3f763959331399
Certificate serial: 019E28B88D5606075D38D2132B5B580E1421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
Manifest number: 01A0
Signing time: Thu 14 May 2026 23:00:43 +0000
Manifest this update: Thu 14 May 2026 23:00:43 +0000
Manifest next update: Fri 15 May 2026 23:00:43 +0000
Files and hashes: 1: bMs_hCGEjxE5UekHCz92OVkzE5k.crl (hash: rXanhNJsw7k1Ov9EZuW8I+Ah8ldMNGh8p27G8mPVp6w=)
2: bUiH3VbW9e4DGEI6aQ_GDMaBXuU.asa (hash: HiJMoQ+7Z+6mLU3L+V1v5bPyuxJiyPA9eVSUrGC2/Yk=)
3: vWTFnToMRwpADtfp8rKVJDhq4z0.roa (hash: 9KBYCbKq8EeH9dzn6Vsl+J3/PeNavFQcjtRw+/WBxiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b8:8d:56:06:07:5d:38:d2:13:2b:5b:58:0e:14:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccb3f8421848f113951e9070b3f763959331399
Validity
Not Before: May 14 23:00:43 2026 GMT
Not After : May 15 23:00:43 2026 GMT
Subject: CN=bc50e7cfb2b834566dc67949d719e7963197a476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d3:7e:89:96:b5:a9:d5:72:ef:0a:89:e6:4a:
18:45:f3:51:34:17:bc:c5:85:42:61:90:57:f5:f1:
2c:d8:18:14:1c:c0:e7:b8:37:d2:d2:33:c2:76:98:
18:ad:7b:b1:1a:1c:f0:7f:5b:5e:59:01:cf:bc:c4:
9a:ff:27:41:6e:93:09:0e:a1:19:dc:8b:cd:b1:28:
8b:3e:02:e4:32:ef:26:ff:f7:7c:e8:7a:48:88:4b:
ea:8a:06:de:97:89:53:39:42:68:aa:41:a0:c3:c1:
cb:ff:5f:e4:26:d3:68:62:53:1d:8f:7b:d6:8c:36:
3d:2f:f8:d0:e8:54:77:18:a1:0f:89:2d:f8:b3:6c:
85:99:a0:5f:df:f2:37:6b:d1:7d:e7:56:c4:58:c3:
51:be:6e:6d:48:3c:e2:e0:1b:4d:89:73:d5:5d:eb:
f8:43:d1:93:0c:b0:89:6c:01:09:11:01:7c:77:67:
d2:37:8f:1c:85:80:ef:bc:b5:75:ce:1a:05:b8:d3:
cb:d2:b3:18:7c:76:52:90:b9:66:2c:f0:ce:b5:2a:
34:71:2a:07:52:0f:41:02:8d:35:35:88:61:06:e6:
2a:6c:de:fb:13:64:3c:9c:0b:c0:8f:aa:1d:f6:01:
0d:bc:6b:f3:54:9c:09:e7:70:cf:9b:47:13:04:22:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:50:E7:CF:B2:B8:34:56:6D:C6:79:49:D7:19:E7:96:31:97:A4:76
X509v3 Authority Key Identifier:
keyid:6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6f:ed:9c:97:fa:07:8c:67:f8:69:28:c3:2f:dd:d8:4a:bc:
c2:43:bc:3d:a0:cc:07:12:b0:e6:08:16:34:82:fa:93:19:72:
f0:73:47:9f:8e:64:93:49:01:ab:d4:9a:73:3f:db:a8:ba:75:
3b:d5:3e:7f:84:67:ac:04:4c:4f:cf:0c:20:dd:96:a7:b1:7d:
1a:0a:8b:3b:d8:ef:c5:80:c3:49:6a:dd:f8:4f:7f:fb:b6:15:
bf:88:5a:b7:04:3f:6f:9a:91:af:f6:f2:70:ab:fa:fc:3a:14:
ba:72:e8:32:af:84:8d:e0:ed:14:c8:10:c9:58:cb:f3:3f:a2:
df:a6:cd:9b:eb:b1:6c:db:b2:76:7c:16:d7:c5:70:5c:fc:67:
e7:5b:4f:ea:94:3c:15:ef:c2:b7:a3:e7:b6:fd:e9:a9:f7:80:
b3:4b:57:a7:34:53:54:42:41:6d:43:31:5b:e2:d7:9d:04:ad:
13:ab:1d:d5:f6:ee:a9:27:74:03:f4:68:2d:1e:68:85:f8:c6:
ee:1d:76:b0:39:5b:1e:5f:4a:11:85:40:6c:c3:26:02:19:a6:
25:19:a8:d4:cf:02:21:8f:35:6c:c4:bc:47:26:8a:39:24:9d:
db:27:3e:42:8a:37:64:08:8e:05:69:44:67:c7:eb:f5:5e:3b:
8a:3e:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:59 2026 by rpki-client