Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
File: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft (raw, json)
Hash identifier: mBxbrgrnDGI12030SfKZ89nCZx3K0kB/5JX6MLYoDGw=
Subject key identifier: 39:34:A2:BD:0A:EF:DB:B5:F9:A3:53:B0:4F:C5:82:A3:33:CC:07:9D
Authority key identifier: 6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
Certificate issuer: /CN=6ccc7137704b26301917563f2a84671ef6758006
Certificate serial: 019D39AEEA0993AAEBC99FFBB91F8FACFBDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
Manifest number: 0777
Signing time: Sun 29 Mar 2026 13:00:57 +0000
Manifest this update: Sun 29 Mar 2026 13:00:57 +0000
Manifest next update: Mon 30 Mar 2026 13:00:57 +0000
Files and hashes: 1: J6B1NmurBSlkEDodpO862ZEtVnU.asa (hash: vMggm0hPyL6Amd/bf3Z/Hi/LA8ZvGHj5OIPhqcU1OtI=)
2: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl (hash: KYX2/QTfoV+/2Wi7uKnIl3mP09oLSLtn3haED33/HJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:ea:09:93:aa:eb:c9:9f:fb:b9:1f:8f:ac:fb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccc7137704b26301917563f2a84671ef6758006
Validity
Not Before: Mar 29 13:00:57 2026 GMT
Not After : Mar 30 13:00:57 2026 GMT
Subject: CN=3934a2bd0aefdbb5f9a353b04fc582a333cc079d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:5e:04:a9:a1:0c:c5:1f:fc:a7:0b:72:1b:
2d:30:d2:df:bf:d9:b8:f7:bb:2c:9b:4a:61:f0:15:
a5:b3:49:4c:72:f9:4d:5e:03:45:6f:2c:f5:e8:24:
7e:2a:ca:a3:bb:da:6d:cf:ad:68:66:da:0b:70:f2:
2f:6f:77:4b:25:c3:53:66:ef:49:fa:47:06:7f:90:
a6:dc:ac:72:ae:ab:65:91:cb:28:77:0b:6e:d6:55:
47:28:4c:49:cb:b2:17:9c:7e:57:b5:4b:5d:13:3b:
b3:3d:fe:58:9a:60:4d:11:a6:fd:06:b8:9d:2e:9b:
c2:4e:57:50:15:70:34:0f:10:6e:4a:af:c7:d4:ef:
df:5f:1d:ad:c1:7d:c2:48:6e:23:3b:d8:e3:b8:35:
79:b1:d8:a6:03:41:15:60:cb:9e:22:a3:38:a8:d6:
4f:04:21:14:2f:29:1c:53:d6:21:7b:a4:b7:c2:e5:
6f:57:d7:de:45:3e:fa:4c:38:67:eb:b6:b1:a5:da:
f2:9e:b0:7a:d5:9f:21:71:52:a4:2e:fa:49:8e:87:
64:8e:b7:a9:28:72:75:3c:bd:c9:8f:ab:29:d7:ff:
3e:83:62:82:b0:68:15:20:e6:b5:fd:f1:d1:ca:ac:
e2:59:2e:b7:c8:49:e5:7d:24:d6:83:68:54:5b:c9:
53:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:34:A2:BD:0A:EF:DB:B5:F9:A3:53:B0:4F:C5:82:A3:33:CC:07:9D
X509v3 Authority Key Identifier:
keyid:6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8e:c0:43:9f:ea:49:f8:cf:41:00:23:c7:82:f5:22:ae:6c:
27:45:7a:23:98:12:61:d0:21:c8:9d:e7:f0:7f:78:d1:6b:06:
d6:1a:89:6b:15:ec:03:21:82:b7:92:74:0b:1c:a2:71:5a:3e:
12:2c:23:ea:5e:fe:79:55:0f:c6:08:13:75:9d:94:b2:51:b5:
ff:ca:3d:f9:24:08:32:bb:f5:4a:32:04:9d:4a:30:66:34:57:
32:66:88:7e:0e:13:8a:04:27:d9:07:61:d3:ef:bf:3d:2e:5a:
4c:b4:ec:6d:0b:52:f8:34:a3:80:f9:3c:e3:be:41:b7:fe:4d:
d5:e6:07:e4:0c:10:30:b4:07:ad:e6:c2:f4:97:a7:7a:d9:2a:
12:70:81:6a:5e:02:51:38:25:47:ee:09:3f:94:65:8b:f7:d1:
7c:f8:98:83:15:f6:f7:f1:b6:ce:6b:1d:48:dd:30:73:c2:b7:
e9:22:1d:b0:92:c8:04:c2:29:3e:6b:de:36:eb:f1:b9:33:33:
83:f4:eb:eb:87:93:77:5b:23:8e:62:7a:1a:f8:2d:cc:a0:35:
ec:43:eb:f5:4b:81:15:fb:11:f7:34:d9:6d:5e:c9:f7:05:53:
a2:05:6f:ed:22:a1:c2:23:05:fc:01:11:9d:e0:7d:40:cc:b6:
bf:1f:56:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05ruoJk6rryZ/7uR+PrPvbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjY2M3MTM3NzA0YjI2MzAxOTE3NTYzZjJhODQ2NzFlZjY3
NTgwMDYwHhcNMjYwMzI5MTMwMDU3WhcNMjYwMzMwMTMwMDU3WjAzMTEwLwYDVQQD
EygzOTM0YTJiZDBhZWZkYmI1ZjlhMzUzYjA0ZmM1ODJhMzMzY2MwNzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC9eBKmhDMUf/KcLchstMNLfv9m4
97ssm0ph8BWls0lMcvlNXgNFbyz16CR+Ksqju9ptz61oZtoLcPIvb3dLJcNTZu9J
+kcGf5Cm3Kxyrqtlkcsodwtu1lVHKExJy7IXnH5XtUtdEzuzPf5YmmBNEab9Brid
LpvCTldQFXA0DxBuSq/H1O/fXx2twX3CSG4jO9jjuDV5sdimA0EVYMueIqM4qNZP
BCEULykcU9Yhe6S3wuVvV9feRT76TDhn67axpdrynrB61Z8hcVKkLvpJjodkjrep
KHJ1PL3Jj6sp1/8+g2KCsGgVIOa1/fHRyqziWS63yEnlfSTWg2hUW8lTIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDk0or0K79u1+aNTsE/FgqMzzAedMB8GA1UdIwQY
MBaAFGzMcTdwSyYwGRdWPyqEZx72dYAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk14eE4zQkxKakFaRjFZX0tvUm5IdloxZ0FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lOTcxMjAtNDIwOC00YWNjLWE1NGIt
OTJmNTIwZTQ2ZTg4LzEvYk14eE4zQkxKakFaRjFZX0tvUm5IdloxZ0FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9lOTcxMjAtNDIwOC00YWNjLWE1NGItOTJmNTIwZTQ2ZTg4
LzEvYk14eE4zQkxKakFaRjFZX0tvUm5IdloxZ0FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEY7AQ5/q
SfjPQQAjx4L1Iq5sJ0V6I5gSYdAhyJ3n8H940WsG1hqJaxXsAyGCt5J0CxyicVo+
Eiwj6l7+eVUPxggTdZ2UslG1/8o9+SQIMrv1SjIEnUowZjRXMmaIfg4TigQn2Qdh
0++/PS5aTLTsbQtS+DSjgPk8475Bt/5N1eYH5AwQMLQHrebC9JenetkqEnCBal4C
UTglR+4JP5Rli/fRfPiYgxX29/G2zmsdSN0wc8K36SIdsJLIBMIpPmveNuvxuTMz
g/Tr64eTd1sjjmJ6GvgtzKA17EPr9UuBFfsR9zTZbV7J9wVTogVv7SKhwiMF/AER
neB9QMy2vx9WHg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:31:46 2026 by rpki-client