Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
File: bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft (raw, json)
Hash identifier: r2fGGGcZ9o9aENEzR+ROFQbTH4ia1zifkazfCNVB0HI=
Subject key identifier: 2B:52:B4:D0:B1:E2:EF:9C:55:3A:B7:91:8F:6F:6E:07:54:3A:2E:44
Authority key identifier: 6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
Certificate issuer: /CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
Certificate serial: 019D389BAB86BA0C15B3A92E566E67A7DA92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
Manifest number: 07DB
Signing time: Sun 29 Mar 2026 08:00:19 +0000
Manifest this update: Sun 29 Mar 2026 08:00:19 +0000
Manifest next update: Mon 30 Mar 2026 08:00:19 +0000
Files and hashes: 1: bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl (hash: VeSOnbOqAVosvL5FjWEhvI6Zh4vu5c+0+0jwRD5Wi74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ab:86:ba:0c:15:b3:a9:2e:56:6e:67:a7:da:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
Validity
Not Before: Mar 29 08:00:19 2026 GMT
Not After : Mar 30 08:00:19 2026 GMT
Subject: CN=2b52b4d0b1e2ef9c553ab7918f6f6e07543a2e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:25:6e:77:60:74:bd:94:2d:5d:9b:ef:31:
d4:24:e4:e8:70:4b:64:79:04:fb:90:25:c2:22:60:
68:36:51:6f:92:43:4a:32:e5:8d:9d:60:a3:e3:a6:
1e:2d:2c:b5:61:b2:bb:4a:c1:68:82:6f:52:52:97:
58:55:f7:e7:97:23:dd:88:4c:09:c0:80:66:8a:74:
ad:ee:2a:a2:54:75:c5:b2:c5:04:b4:46:b4:00:66:
3a:e5:48:1b:e8:26:ca:99:6b:46:89:64:59:63:fd:
0e:e9:50:8f:c6:15:9b:f2:c2:cf:14:fa:15:c7:d6:
28:a6:2c:cf:4b:78:fc:f7:60:c3:e8:12:58:a7:89:
19:57:bf:46:b1:7c:c1:ef:3e:da:16:20:46:16:79:
61:19:82:a2:b8:d1:21:25:32:30:68:b9:18:80:d3:
f9:24:18:5c:2f:d1:87:15:43:71:f7:5b:98:36:de:
58:b0:42:0d:ee:93:5a:8c:43:c7:78:a4:bf:e5:a2:
2f:8c:ee:85:d1:08:0d:c2:ad:db:a9:5c:c8:4b:14:
30:92:55:82:8f:1d:bb:96:67:90:72:14:ee:fd:ec:
20:46:7b:80:23:43:b1:6e:63:5c:65:67:89:03:35:
17:2b:67:e1:22:5a:51:fe:f3:13:41:7e:d4:f5:a3:
e9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:52:B4:D0:B1:E2:EF:9C:55:3A:B7:91:8F:6F:6E:07:54:3A:2E:44
X509v3 Authority Key Identifier:
keyid:6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0a:d4:f5:78:c0:09:ef:0b:01:a6:04:ce:62:a6:fb:ad:c0:
b2:a5:fb:75:80:14:cb:08:04:a7:3e:95:56:9b:de:fc:3c:7f:
5b:ce:ea:70:d8:75:51:99:7f:0d:65:fb:3a:7b:94:99:2b:d2:
d7:26:3c:36:07:e3:d2:40:b2:16:0e:32:97:e7:7c:a3:89:ef:
12:00:d8:b3:c9:a6:bc:64:b2:38:a3:db:87:03:3d:91:40:63:
87:c1:43:10:fa:95:e3:db:05:f3:e4:24:fe:8b:26:e4:46:1c:
2d:4b:81:40:9b:39:87:35:5e:db:0c:ce:40:73:ff:5d:47:e3:
9c:02:f9:68:06:09:22:12:da:1c:7f:e9:ce:d2:39:1e:00:f6:
74:7b:22:52:c5:9f:69:04:78:b6:91:ef:2d:f9:a6:73:f9:15:
b6:ed:27:23:a4:c2:a0:7f:10:1c:1d:7f:f4:55:8a:f9:3d:01:
05:ab:df:d1:57:b0:ef:ec:a8:67:f4:d6:75:55:2e:4b:bc:f6:
58:e2:bc:6b:e7:99:04:8e:e3:c6:25:6a:15:6e:90:14:50:19:
2d:11:da:d6:07:71:2a:b8:59:9b:af:3a:59:f8:3a:73:50:79:
41:e7:37:da:f6:4b:d9:00:84:8f:b8:9b:4b:03:af:16:75:b6:
4c:13:91:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:44 2026 by rpki-client