Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
File: bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft (raw, json)
Hash identifier: 2VWFc7FWoMnt/vshNcqakMy0iYcIfam6yZXgHqb20E8=
Subject key identifier: 63:FE:FF:30:04:E9:1C:95:38:A1:F2:E7:03:75:44:10:70:49:0F:63
Authority key identifier: 6E:63:D6:D3:12:D6:5E:E4:EA:28:DA:F4:3A:FC:C8:6E:CE:D4:08:0F
Certificate issuer: /CN=6e63d6d312d65ee4ea28daf43afcc86eced4080f
Certificate serial: 019D39776777FF27FD82665A76516F9873FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
Manifest number: 0791
Signing time: Sun 29 Mar 2026 12:00:19 +0000
Manifest this update: Sun 29 Mar 2026 12:00:19 +0000
Manifest next update: Mon 30 Mar 2026 12:00:19 +0000
Files and hashes: 1: bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl (hash: wqt2wNWlXfer9zWEz+ARU7zCB95FkRZ6e3XiXzkQ1fU=)
2: zqPQFXRJf74G4JhmRgtWhS_jMk4.roa (hash: ikDZT7vRt5mAD1vPpg5L69iXwnQy7gbLVQl9JYyhzUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:67:77:ff:27:fd:82:66:5a:76:51:6f:98:73:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e63d6d312d65ee4ea28daf43afcc86eced4080f
Validity
Not Before: Mar 29 12:00:19 2026 GMT
Not After : Mar 30 12:00:19 2026 GMT
Subject: CN=63feff3004e91c9538a1f2e70375441070490f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:82:8a:bc:cb:8e:ca:12:9c:e3:93:c9:e0:1a:
ed:16:d9:8c:d4:3e:b1:43:81:62:52:29:6c:46:b8:
f7:be:c1:e7:ce:40:fd:0b:f7:40:bf:41:04:15:86:
6c:ed:bd:9f:1a:55:c0:93:9a:47:9a:ca:aa:b1:c7:
ef:b8:6f:35:cc:12:03:3c:54:ac:2e:03:c7:d0:d0:
36:87:6d:75:c1:5b:13:32:7d:25:eb:db:fb:93:7f:
0b:e9:da:10:72:b0:f0:aa:20:c2:34:4c:42:5b:ea:
a0:ca:fc:64:85:aa:0b:b2:ac:b5:2b:a2:d6:b4:3e:
6b:1e:87:ea:37:7b:f3:71:67:68:12:4a:7c:a9:79:
fd:4e:da:c4:9b:8c:6e:6d:dd:8c:9e:a6:6a:02:9f:
ff:9b:e5:42:60:dd:94:87:0c:3b:30:ec:7b:68:b8:
88:2d:8e:76:60:da:5c:bf:0c:1d:3a:73:aa:80:9e:
f3:d8:ed:54:83:df:37:6b:e0:26:76:c2:c8:20:ce:
69:3c:82:18:83:cb:7e:f8:ae:c2:b0:f6:30:ce:47:
74:df:5f:83:6b:0e:fe:e1:3a:50:d0:fc:8b:7b:ef:
d2:e7:48:5f:e7:42:52:e7:cc:d6:03:26:c5:f7:5d:
81:2a:45:60:27:11:50:50:5c:f6:61:79:1b:31:ea:
ff:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FE:FF:30:04:E9:1C:95:38:A1:F2:E7:03:75:44:10:70:49:0F:63
X509v3 Authority Key Identifier:
keyid:6E:63:D6:D3:12:D6:5E:E4:EA:28:DA:F4:3A:FC:C8:6E:CE:D4:08:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:78:52:c3:da:d2:9b:c6:2e:7f:d2:60:df:4e:c1:7d:4f:b9:
81:d3:82:3e:ea:ac:02:8a:6d:29:4f:a4:72:41:dd:d0:0b:21:
d2:47:74:69:3f:60:61:fa:65:d0:de:21:14:6a:df:b8:2f:42:
07:6d:9e:bd:be:25:c2:3a:b6:44:c9:37:e3:0a:82:1a:f9:6c:
20:ae:31:39:b0:ea:dc:b1:9d:fd:c8:a1:c7:7b:59:0d:5d:94:
c8:42:94:e6:bd:08:b3:03:87:84:83:b6:89:4d:48:52:f8:16:
a3:b2:91:44:95:b3:a6:2f:ec:8b:90:62:f4:90:9c:b0:5c:c7:
96:d3:69:b5:66:68:42:e1:93:89:7e:4b:29:54:6e:a5:84:2c:
cd:49:37:ed:0c:87:11:de:70:b5:aa:2a:a5:35:45:f1:c3:db:
61:76:af:0d:32:10:de:ba:9d:82:86:33:55:06:bc:88:db:70:
24:d8:5b:f5:58:7f:ad:33:75:26:5f:b2:44:11:fa:e2:e3:45:
7b:15:93:a3:07:80:77:58:ab:32:95:ed:ea:eb:7c:e8:d2:81:
3e:51:98:69:c7:75:0c:78:64:2c:ec:77:a6:56:a5:81:59:4c:
d7:dd:02:bc:14:37:f5:2f:83:57:43:5d:4e:c3:d2:4e:da:02:
83:e6:16:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:45 2026 by rpki-client