Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
File: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft (raw, json)
Hash identifier: DZarnlZWS/SUYHa3V/8hDfort4x6ZQKgBvMqA1R4pPA=
Subject key identifier: 5A:1B:D2:23:97:C0:63:6D:CD:34:2D:61:81:67:57:AA:E5:DD:DA:04
Authority key identifier: 6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
Certificate issuer: /CN=6ccc7137704b26301917563f2a84671ef6758006
Certificate serial: 019F10E4FE1EB8E1391ABA01276C8A121089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
Manifest number: 086B
Signing time: Mon 29 Jun 2026 01:01:10 +0000
Manifest this update: Mon 29 Jun 2026 01:01:10 +0000
Manifest next update: Tue 30 Jun 2026 01:01:10 +0000
Files and hashes: 1: J6B1NmurBSlkEDodpO862ZEtVnU.asa (hash: vMggm0hPyL6Amd/bf3Z/Hi/LA8ZvGHj5OIPhqcU1OtI=)
2: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl (hash: jYKCl4/bZ2E0ZnAQisdAycelFi6OJt8091dJl9jTLnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e4:fe:1e:b8:e1:39:1a:ba:01:27:6c:8a:12:10:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccc7137704b26301917563f2a84671ef6758006
Validity
Not Before: Jun 29 01:01:10 2026 GMT
Not After : Jun 30 01:01:10 2026 GMT
Subject: CN=5a1bd22397c0636dcd342d61816757aae5ddda04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:1e:5f:6d:be:ca:12:a3:9f:a0:22:4f:a9:
8a:25:b0:91:87:5f:ec:40:95:a1:54:ca:0e:b6:08:
2c:b9:f8:69:c4:d3:07:d7:52:8f:67:a5:86:47:27:
94:87:39:35:e5:56:1b:12:3e:97:9d:d1:bf:1c:77:
55:43:91:db:01:91:8f:c7:9c:60:83:da:8b:9b:46:
eb:53:b1:4c:8c:b7:ae:78:6b:e5:f3:2b:0d:fe:54:
ae:2e:19:3f:54:f2:59:57:1c:1e:6c:76:6b:3a:47:
d2:5a:b6:b3:84:b4:40:a0:60:80:ac:9b:ec:66:a8:
0a:7a:2d:de:c8:af:e2:8e:4c:cc:55:62:05:ca:4e:
25:be:7f:68:e7:81:ea:d7:72:e9:28:8b:d0:8d:c5:
a9:f9:a9:2f:2b:13:0a:fa:79:02:09:22:a3:9b:85:
eb:cb:17:eb:1f:b4:fc:06:2b:fb:97:bf:2c:2e:f0:
01:4c:5c:66:2a:09:85:40:85:f6:84:23:18:5e:8e:
d4:58:cd:87:2c:47:ca:fb:53:27:62:b2:58:9c:e3:
5a:1f:14:39:8b:45:e3:28:ff:65:ff:a0:f9:70:bc:
c3:16:f7:15:07:4a:78:c3:d8:f1:49:5e:3e:d6:25:
dc:29:34:3c:b9:71:1b:d5:12:85:c1:eb:ad:69:d4:
89:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1B:D2:23:97:C0:63:6D:CD:34:2D:61:81:67:57:AA:E5:DD:DA:04
X509v3 Authority Key Identifier:
keyid:6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:77:96:2f:4b:98:71:ae:af:ca:83:cc:98:17:fb:ec:d7:08:
ae:39:2e:2c:5d:bf:83:7d:d4:73:c1:3a:2a:3e:6b:3a:24:59:
8a:89:a9:e1:ae:b7:db:0b:47:84:ed:47:d4:bf:f1:65:39:55:
a8:95:2d:29:af:cf:ab:ee:3d:b1:25:e1:a4:06:eb:7a:78:91:
9c:c8:54:54:83:75:82:e3:ed:4f:c2:fc:29:31:9a:92:04:cf:
de:21:af:47:31:de:73:ce:d7:d2:cd:a3:98:8c:17:16:35:cf:
2a:21:d9:70:00:40:32:60:00:5e:36:b1:ea:fb:c3:fa:3e:8f:
59:5e:48:dd:b3:9a:b5:f3:b4:a0:84:fa:01:1e:5b:31:34:d1:
7e:ec:95:0e:bd:21:88:17:0c:08:a5:98:21:09:ed:cf:f3:69:
2a:eb:1f:06:d6:01:d0:35:36:10:1f:9a:02:cd:ae:1d:93:09:
2c:8a:45:60:0b:76:8b:f1:7c:32:f4:65:4b:bd:8c:2f:6e:82:
b5:df:50:ca:8d:00:1c:39:d2:33:f4:c0:39:d6:17:e0:cb:ee:
d9:44:38:8d:a7:a5:3d:6f:f6:5d:f9:8d:42:00:a2:30:12:36:
c9:65:3c:84:d0:a9:3e:34:0e:4a:c4:4f:8b:18:bb:74:ab:ce:
be:8d:8d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:42:41 2026 by rpki-client