
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File: bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier: nEY8dWF/dyEQbyvSVl7+Db1OUhjBfCD9UAfdB07tSGM=
Subject key identifier: 20:F9:BF:5F:C7:93:00:AB:B0:C5:9E:E3:F2:47:1B:C7:46:25:A4:53
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer: /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial: 01A1280C9E036C3EB6F32D149B87854B88D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number: 1A9C
Signing time: Sat 10 Oct 2026 23:01:17 +0000
Manifest this update: Sat 10 Oct 2026 23:01:17 +0000
Manifest next update: Sun 11 Oct 2026 23:01:17 +0000
Files and hashes: 1: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: UEJRohb4Mr7VIrNodgUKq6b5g6nF6KgxMO6BgYqi/Kw=)
2: oetUUkO4cZ8XU4zZUrbGoYOdszE.roa (hash: wn2OyJ+kz4z5ywBpw9YbEq0aRUfcFISzvLJUM7TfkuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:0c:9e:03:6c:3e:b6:f3:2d:14:9b:87:85:4b:88:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
Validity
Not Before: Oct 10 23:01:17 2026 GMT
Not After : Oct 11 23:01:17 2026 GMT
Subject: CN=20f9bf5fc79300abb0c59ee3f2471bc74625a453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:aa:07:56:ac:a0:b7:b4:56:af:54:ab:3f:
f7:79:a6:54:87:81:ea:01:6a:de:62:be:23:28:96:
98:be:93:4a:83:1a:51:32:06:f7:88:5a:27:5b:0a:
e8:89:a1:cb:ee:a0:c3:f7:f4:0a:1c:27:e4:85:ac:
6b:49:50:38:64:06:a0:ce:93:7e:43:15:57:ab:4a:
27:d4:24:e2:23:0f:53:9e:47:05:10:dc:e2:9f:f8:
7a:a0:d2:d6:de:1e:6f:1d:6f:2a:ec:ef:e6:fc:58:
bd:87:ce:99:83:23:99:f0:39:fb:74:13:51:94:b7:
84:90:1f:25:60:c8:da:a4:6a:03:22:34:02:32:c0:
98:ac:9f:58:62:7e:46:a8:8b:ef:19:ab:0b:58:ed:
68:39:99:05:b3:ab:5d:e0:c0:33:34:4a:27:fd:40:
c6:51:25:c6:4a:e0:40:e7:4f:80:f2:56:40:97:89:
aa:73:fa:8f:09:3f:d7:3e:e5:60:26:e5:92:36:0e:
72:5f:ba:9a:2e:f7:f5:43:c3:b8:66:e0:2c:4a:3e:
a3:48:ab:3f:84:82:46:41:e5:09:24:f9:9a:a0:ab:
fd:f7:27:2c:d7:e9:52:6f:d3:ec:bb:6f:cc:c3:71:
79:56:41:9a:7c:46:98:f1:9b:24:f2:c3:1d:08:85:
80:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F9:BF:5F:C7:93:00:AB:B0:C5:9E:E3:F2:47:1B:C7:46:25:A4:53
X509v3 Authority Key Identifier:
keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e7:e8:4c:2e:02:7a:37:68:39:cf:9b:43:98:f2:96:f6:55:
60:41:a1:2f:bd:ac:10:e8:7b:e9:48:dc:26:b1:35:d8:16:a8:
a7:59:1e:25:62:85:13:84:27:12:4e:f8:06:84:f7:3c:af:3d:
14:df:8c:f5:a5:54:c0:5b:16:81:f7:f5:91:fa:8d:38:b5:51:
05:ee:86:e1:8b:66:95:ae:8d:9e:d3:e5:88:11:80:dd:5f:cd:
2e:54:a0:e9:f2:57:63:14:31:da:43:c9:02:b1:42:06:c4:ba:
d0:58:50:8a:28:08:7e:51:45:bf:37:63:16:81:62:68:be:d9:
ee:fa:fe:47:2a:d7:c5:1a:44:74:9f:15:83:56:27:45:6b:51:
61:6a:51:a0:10:ff:dc:cd:2a:85:b5:ec:12:7f:8b:37:a6:a6:
7c:dd:ec:76:f4:a6:5f:ad:0e:3a:01:9f:98:38:51:82:b5:66:
40:e2:75:85:93:21:c8:58:8c:78:7f:92:54:ec:94:17:d3:c3:
20:32:4b:ff:12:30:8c:f1:4f:43:c4:82:92:02:5f:c9:bf:2d:
46:97:c8:5e:f5:a7:49:a8:9c:e7:65:01:d2:6e:9b:50:06:27:
67:7e:88:02:24:94:49:25:ba:eb:7c:cb:ec:1c:0d:ae:05:c1:
6f:27:5e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:51:51 2026 by rpki-client