Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
File: BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json)
Hash identifier: F4iveJLNDGba8hAOA3KNENjtly9657bUHPf6UMgjjpQ=
Subject key identifier: 85:C5:F1:54:D6:C6:55:F3:47:F7:9B:34:77:85:65:0C:75:03:BE:02
Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
Certificate issuer: /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Certificate serial: 019F860D7FCF8BC8DA008AE06F90B9B2471E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
Manifest number: 0945
Signing time: Tue 21 Jul 2026 19:00:59 +0000
Manifest this update: Tue 21 Jul 2026 19:00:59 +0000
Manifest next update: Wed 22 Jul 2026 19:00:59 +0000
Files and hashes: 1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: wLYYPw7GJbXHxzwPY/uPRQ/kPhyngWMntJ8iwyNLNc8=)
2: sclym95paOJdvvvFhr-lWNlhbzg.roa (hash: +sl/bnIFSoKaaf5fH2CcAmUfZuUwLWKTgnEpXZ7dEQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:7f:cf:8b:c8:da:00:8a:e0:6f:90:b9:b2:47:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Validity
Not Before: Jul 21 19:00:59 2026 GMT
Not After : Jul 22 19:00:59 2026 GMT
Subject: CN=85c5f154d6c655f347f79b347785650c7503be02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:a1:a5:dd:92:1b:36:78:9a:f4:e2:06:42:
94:e4:91:c1:75:6b:57:7c:32:81:d1:f6:e2:4e:01:
0b:b7:c9:c8:21:22:10:ad:46:85:50:d4:b1:bd:1b:
8a:3b:8f:2b:b2:12:25:7c:fd:c2:5d:c6:d9:2c:37:
7b:68:ea:1d:db:69:d7:54:38:22:90:d4:77:56:12:
6b:76:2d:6b:35:9b:bc:c9:41:19:d9:5f:e2:3f:2d:
e4:c1:ff:ab:1a:b7:ce:c2:f6:d0:5b:b4:6b:07:39:
d0:d7:d1:9f:4f:b9:f8:3a:ca:93:ae:bf:f2:0b:9e:
f5:21:fe:c8:c6:f7:7a:02:e6:fd:50:4c:dd:cb:55:
de:0f:52:e7:df:55:c6:46:9f:0d:19:94:a2:b0:5a:
cb:e6:d5:b0:b5:9a:b4:4c:c6:30:0c:aa:71:2d:72:
00:24:4d:40:59:cc:77:95:43:ce:0e:c2:f8:a0:06:
82:22:47:39:61:d3:54:0c:63:51:17:77:ee:b6:5a:
26:06:36:6e:4d:eb:ed:ba:c7:64:fa:4a:10:2c:01:
96:37:7a:a1:ba:5b:96:48:54:a4:16:9b:c9:fb:7e:
a4:59:51:0a:89:d3:b0:64:0d:bb:8e:33:3e:01:14:
40:40:79:65:5c:bf:fa:86:92:c5:81:44:88:fd:1b:
b7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C5:F1:54:D6:C6:55:F3:47:F7:9B:34:77:85:65:0C:75:03:BE:02
X509v3 Authority Key Identifier:
keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e7:89:ce:dd:93:bb:a7:cb:58:12:74:da:24:19:5a:8a:69:
18:d3:c3:e4:2e:b0:8d:8a:13:4e:6b:a7:df:ab:92:45:27:ac:
37:04:46:bf:1a:87:49:fe:02:f3:c9:72:a6:4b:74:7c:65:13:
db:be:53:19:1c:ac:8d:96:8d:16:ed:80:d1:c8:e4:3b:bb:d7:
3d:39:e5:03:e0:5a:cc:eb:ef:d8:32:7b:ed:1d:dd:7e:76:fd:
5d:d5:27:39:f7:7c:a8:60:dd:5d:de:9d:46:6e:ea:b5:a6:d5:
0e:ac:d1:7d:50:b6:16:3c:d1:79:db:c1:21:32:16:3c:cd:f3:
47:69:81:95:ee:27:45:2c:3f:3c:f7:04:42:b0:13:9a:f5:5b:
2d:04:4b:5b:a3:08:75:1c:3d:30:bb:82:10:3e:58:45:d6:ac:
2e:35:67:b8:7a:50:9b:21:fc:4e:cb:56:a6:ce:6c:02:11:73:
37:bc:2f:d5:f7:16:ce:0f:2c:71:b1:c2:c9:b6:02:d0:3f:ff:
b0:11:42:83:85:37:7f:a7:84:74:8d:95:e4:cf:47:de:64:04:
2f:bb:17:8f:78:5a:07:c7:db:84:ad:cc:d2:c7:9a:a9:36:e5:
4c:c0:c7:bc:92:10:b7:cc:d1:a0:de:45:c7:28:81:71:1a:dd:
2b:e1:ac:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GDX/Pi8jaAIrgb5C5skceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NjcxNGQxOTkwN2E3NGJlOTVjYmIxNzM3OWUwYzhhMWI1
YTgzY2EwHhcNMjYwNzIxMTkwMDU5WhcNMjYwNzIyMTkwMDU5WjAzMTEwLwYDVQQD
Eyg4NWM1ZjE1NGQ2YzY1NWYzNDdmNzliMzQ3Nzg1NjUwYzc1MDNiZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsGhpd2SGzZ4mvTiBkKU5JHBdWtX
fDKB0fbiTgELt8nIISIQrUaFUNSxvRuKO48rshIlfP3CXcbZLDd7aOod22nXVDgi
kNR3VhJrdi1rNZu8yUEZ2V/iPy3kwf+rGrfOwvbQW7RrBznQ19GfT7n4OsqTrr/y
C571If7Ixvd6Aub9UEzdy1XeD1Ln31XGRp8NGZSisFrL5tWwtZq0TMYwDKpxLXIA
JE1AWcx3lUPODsL4oAaCIkc5YdNUDGNRF3futlomBjZuTevtusdk+koQLAGWN3qh
uluWSFSkFpvJ+36kWVEKidOwZA27jjM+ARRAQHllXL/6hpLFgUSI/Ru3jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXF8VTWxlXzR/ebNHeFZQx1A74CMB8GA1UdIwQY
MBaAFAZnFNGZB6dL6Vy7FzeeDIobWoPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83YmZmNWItMmU5NS00NjRiLWFiMDQt
ZmYwMTBlMjEyMzNhLzEvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS83YmZmNWItMmU5NS00NjRiLWFiMDQtZmYwMTBlMjEyMzNh
LzEvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgueJzt2T
u6fLWBJ02iQZWoppGNPD5C6wjYoTTmun36uSRSesNwRGvxqHSf4C88lypkt0fGUT
275TGRysjZaNFu2A0cjkO7vXPTnlA+BazOvv2DJ77R3dfnb9XdUnOfd8qGDdXd6d
Rm7qtabVDqzRfVC2FjzRedvBITIWPM3zR2mBle4nRSw/PPcEQrATmvVbLQRLW6MI
dRw9MLuCED5YRdasLjVnuHpQmyH8TstWps5sAhFzN7wv1fcWzg8scbHCybYC0D//
sBFCg4U3f6eEdI2V5M9H3mQEL7sXj3haB8fbhK3M0seaqTblTMDHvJIQt8zRoN5F
xyiBcRrdK+Gs1A==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:56:40 2026 by rpki-client