Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
File: BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json)
Hash identifier: ER4emao/Os1QP8lIs0rn8WGCX+pCiTaPb3J7jzegmJk=
Subject key identifier: 09:E5:08:18:EA:63:F7:1F:F3:D4:89:38:6B:F1:CA:2D:06:31:3F:5F
Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
Certificate issuer: /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Certificate serial: 01A06FB9D85389562307DE41BF2A1608949A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
Manifest number: 09BE
Signing time: Sat 05 Sep 2026 04:00:45 +0000
Manifest this update: Sat 05 Sep 2026 04:00:45 +0000
Manifest next update: Sun 06 Sep 2026 04:00:45 +0000
Files and hashes: 1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: y44hDfNPmE/zr/FDwd7fxvObbjTUzLxom7WB0zeiFc4=)
2: sclym95paOJdvvvFhr-lWNlhbzg.roa (hash: +sl/bnIFSoKaaf5fH2CcAmUfZuUwLWKTgnEpXZ7dEQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:b9:d8:53:89:56:23:07:de:41:bf:2a:16:08:94:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Validity
Not Before: Sep 5 04:00:45 2026 GMT
Not After : Sep 6 04:00:45 2026 GMT
Subject: CN=09e50818ea63f71ff3d489386bf1ca2d06313f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:b7:74:af:f3:f6:14:cd:c8:3c:23:4f:4d:
3f:10:9a:37:3f:41:7e:0a:9a:0c:1b:ea:f9:17:f7:
f1:80:bd:fc:07:03:8f:50:01:ef:62:81:26:53:20:
7d:86:0f:48:8c:0a:9e:a4:f1:55:ad:9e:2b:58:c5:
cf:37:fe:3d:93:74:2f:94:41:fa:2a:4b:77:80:49:
3e:37:b9:1a:8c:e6:5e:d0:ff:2d:a5:1a:ac:97:ed:
c2:69:b8:60:42:dd:f2:69:35:31:78:86:a5:89:fb:
b6:9c:7e:89:99:c3:1c:ed:27:6e:fb:45:92:ff:dd:
0c:30:08:f4:88:c6:5b:42:ad:79:13:23:1d:be:65:
4a:8b:5c:7c:a8:52:e4:ff:fb:86:a5:58:0f:9f:0e:
15:e1:91:1c:83:66:d9:94:2b:d2:90:eb:0a:2e:15:
53:2d:b3:30:66:dc:b5:14:cc:79:9e:d2:1b:37:8a:
f2:6e:ce:01:1c:68:f9:4b:53:c7:89:bd:22:dd:2c:
f5:59:9b:1d:14:e5:34:af:b4:98:7d:94:93:51:a1:
51:68:5a:6e:c5:93:bc:f1:f1:1d:e6:3f:36:0f:d6:
93:f1:80:30:8d:5a:1b:a0:15:6f:b9:20:0e:b6:fb:
ea:0d:0e:2c:26:aa:da:ee:07:70:6d:88:98:f1:c9:
96:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E5:08:18:EA:63:F7:1F:F3:D4:89:38:6B:F1:CA:2D:06:31:3F:5F
X509v3 Authority Key Identifier:
keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d9:69:6a:fa:ea:26:eb:d4:28:ee:53:02:d1:b6:5d:04:08:
7f:40:1e:c5:2e:81:bb:63:79:0b:64:f3:b2:26:6e:7e:f1:82:
14:f8:38:80:94:32:de:44:27:dd:6d:51:a9:5e:f2:29:ec:79:
32:7e:b4:c1:a3:06:37:2c:bb:74:24:26:08:67:93:71:30:d5:
0e:2a:54:2b:2a:87:8d:66:00:2b:2d:04:56:5b:3c:45:9c:cb:
d3:94:bb:0f:c9:a2:8f:d9:8e:1a:60:22:e9:c9:12:f2:63:e6:
74:a3:98:55:65:61:a1:d6:b4:18:0d:80:ce:2e:11:10:b7:ae:
f9:f7:12:3a:01:ba:7a:8c:d6:ec:32:13:2e:17:c9:04:ea:2c:
f1:6c:c2:fe:6b:3a:48:9e:ed:ff:9c:68:65:bc:96:99:28:2a:
90:56:13:ce:1e:76:5c:8f:32:e2:6e:e3:29:ee:ce:4e:81:d5:
72:bf:d3:c3:26:b1:79:31:0a:12:3e:cd:f4:3d:91:95:89:3d:
28:8b:09:52:79:28:d9:74:cd:6f:2d:ed:b7:f2:54:8b:39:98:
c2:2a:ba:98:08:d0:44:e2:e4:9e:3a:03:02:f4:7f:ef:39:d5:
bb:7c:b3:58:75:02:be:86:97:73:1e:a4:f5:17:3c:f1:54:c1:
ed:28:d1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:40:08 2026 by rpki-client