Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
File: bMs_hCGEjxE5UekHCz92OVkzE5k.mft (raw, json)
Hash identifier: mIebK6NVgrM8TboeAdSlOnhfdgI1c2KIbwwGi3Q6atI=
Subject key identifier: 1D:75:E6:D3:73:EE:7A:36:21:1D:04:1B:AB:F5:31:6D:9E:AE:D3:ED
Authority key identifier: 6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99
Certificate issuer: /CN=6ccb3f8421848f113951e9070b3f763959331399
Certificate serial: 01A03E5FA32F57E5029BDEB2D68240110F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
Manifest number: 02B5
Signing time: Wed 26 Aug 2026 14:00:50 +0000
Manifest this update: Wed 26 Aug 2026 14:00:50 +0000
Manifest next update: Thu 27 Aug 2026 14:00:50 +0000
Files and hashes: 1: OniTZJeY2BSA0cvfxsuABJ4v_qE.asa (hash: pHhvpvRyyNpBX/WwUs+RwUflXy5wgKxcBerF2LNMSj8=)
2: bMs_hCGEjxE5UekHCz92OVkzE5k.crl (hash: +3e5ZB8tB0Jfe/SOF62jVyfJoVHVWEmdM8Xo+60k3q0=)
3: vWTFnToMRwpADtfp8rKVJDhq4z0.roa (hash: 9KBYCbKq8EeH9dzn6Vsl+J3/PeNavFQcjtRw+/WBxiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:5f:a3:2f:57:e5:02:9b:de:b2:d6:82:40:11:0f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccb3f8421848f113951e9070b3f763959331399
Validity
Not Before: Aug 26 14:00:50 2026 GMT
Not After : Aug 27 14:00:50 2026 GMT
Subject: CN=1d75e6d373ee7a36211d041babf5316d9eaed3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:fd:f6:a7:72:f1:e0:bb:69:65:55:b9:58:
a0:66:78:bf:b0:0b:2b:60:ea:bb:fe:b9:23:4b:b6:
b6:53:1a:55:6c:5a:be:a3:11:b8:3f:78:05:f7:d1:
3c:41:a7:5b:ac:64:04:03:90:8b:03:e7:80:e2:9c:
9a:ca:fe:d0:cb:32:d0:08:3f:0c:e8:26:8a:dc:c4:
d2:cc:bd:9a:9d:98:c8:c8:09:45:64:83:63:ef:e4:
9a:d4:17:6c:24:37:53:a6:20:a3:d5:f1:6c:8f:57:
b5:4f:c1:1e:7e:71:41:0b:2f:37:f4:e2:58:67:89:
d5:e1:fc:5f:f0:86:40:ea:7e:d2:59:60:81:23:f2:
13:af:3e:ee:80:5d:54:8a:4b:d6:df:a1:b4:c8:74:
1b:21:6e:39:b1:57:00:cd:b3:c7:4f:92:00:17:68:
7a:83:af:1e:c0:ef:df:f0:7c:49:20:be:0f:ac:4e:
ab:35:d2:2a:0f:89:cf:91:fc:23:29:8d:4d:65:7a:
e2:5b:be:cb:d0:ab:c7:c0:71:85:e1:ae:67:6b:08:
40:ab:31:b1:e7:c1:5c:c1:fb:4c:68:61:ef:c3:63:
d5:e2:8a:99:1f:41:25:51:5b:c5:17:86:46:04:0d:
ac:b4:d5:e8:a5:e7:7c:14:5f:06:08:a0:8c:d5:c9:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:75:E6:D3:73:EE:7A:36:21:1D:04:1B:AB:F5:31:6D:9E:AE:D3:ED
X509v3 Authority Key Identifier:
keyid:6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3e:2f:8f:e8:6c:0f:6e:36:c8:fc:2f:01:5f:a4:86:66:6c:
22:8f:60:85:9e:c0:f5:4f:66:ea:c6:20:02:83:a0:18:7c:0b:
f8:8a:21:fa:40:f8:01:bd:69:18:fe:15:1f:9f:e4:00:19:99:
97:a1:f2:00:aa:10:ee:0c:cc:01:9a:5c:2f:f8:78:49:3e:c3:
e7:d6:f8:21:ff:75:a0:db:e4:3c:1f:0c:ac:08:32:a5:95:01:
60:70:05:d1:50:a1:fb:d0:21:60:6f:63:19:fd:28:cc:4a:83:
54:53:29:29:cd:39:9b:d4:1d:34:4b:3d:e5:f1:1e:05:fe:f0:
a2:50:cf:22:17:b4:a6:74:e9:23:8f:00:30:bb:1d:2a:94:b5:
b5:55:36:5d:23:98:2c:fa:61:00:85:7d:ae:67:8a:8b:94:68:
bd:4d:04:f3:7e:91:d7:e2:e7:9d:1f:e5:79:c3:e0:b2:ea:63:
9c:cc:51:f1:bc:6c:6e:4f:22:7e:71:a4:a1:43:58:06:9f:f6:
ad:76:e1:1c:fb:a4:3c:9c:c6:04:16:88:17:7c:d9:9f:2d:4b:
3e:44:4e:21:a4:87:c2:1f:a2:ea:74:e3:f5:94:60:15:8c:f0:
b6:7a:66:3d:d2:d1:b5:ff:13:f1:c7:73:65:22:2f:b1:a9:b4:
e0:d5:71:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:29:40 2026 by rpki-client