Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
File: BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json)
Hash identifier: H8zyEAaGTHVvNT06TyqpTxNsXD5CJSaVGDIX0ScU5ls=
Subject key identifier: A9:CF:56:47:26:0F:5D:DF:99:DD:36:9B:16:00:A9:F4:36:D3:D8:24
Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
Certificate issuer: /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Certificate serial: 01A17C28CF24C6074CEC28502B4E7730247B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
Manifest number: 0A49
Signing time: Tue 27 Oct 2026 07:00:11 +0000
Manifest this update: Tue 27 Oct 2026 07:00:11 +0000
Manifest next update: Wed 28 Oct 2026 07:00:11 +0000
Files and hashes: 1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: r3AhoYFaV9+s7+gnHzJ/7Ml88otLeV6DToOG+MP5NGo=)
2: sclym95paOJdvvvFhr-lWNlhbzg.roa (hash: +sl/bnIFSoKaaf5fH2CcAmUfZuUwLWKTgnEpXZ7dEQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:28:cf:24:c6:07:4c:ec:28:50:2b:4e:77:30:24:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Validity
Not Before: Oct 27 07:00:11 2026 GMT
Not After : Oct 28 07:00:11 2026 GMT
Subject: CN=a9cf5647260f5ddf99dd369b1600a9f436d3d824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:ad:61:a1:91:83:c0:1e:56:c0:f0:b0:b5:
86:a0:35:e2:a5:31:f5:35:a1:cc:3d:d0:e0:98:dd:
c5:91:91:8a:c3:a6:e4:cd:88:09:9f:be:01:56:8d:
4e:4c:e9:3a:ec:2a:0a:e1:06:f1:f9:94:68:9b:33:
98:8f:c7:e1:5f:2e:9d:a2:a0:33:39:50:3e:c7:24:
bf:5c:34:5c:74:3a:aa:a7:42:f2:7d:74:ee:23:32:
d3:5d:42:03:c1:1e:a5:02:ac:b0:aa:dc:a8:f1:99:
16:42:b4:c9:02:1d:2d:f8:e8:4c:b5:84:1a:e1:e4:
3c:8e:79:26:04:98:6d:8f:21:8e:9b:be:37:ad:a2:
7c:c1:dc:64:5e:13:8a:80:6d:1e:7e:f0:b8:d5:61:
3b:8c:fd:25:8a:50:97:c1:aa:10:f5:d1:31:a1:09:
7a:5f:f1:6c:d4:bb:7e:c7:d4:2b:ac:ff:c1:75:d1:
4e:d0:a9:32:a1:0d:29:59:fa:ff:41:64:ea:ff:ba:
57:24:47:27:a5:27:61:0d:7c:ab:21:81:72:4c:0b:
69:86:79:52:f6:45:7a:ce:5c:26:bd:3e:e5:c6:e0:
6d:4d:41:17:15:d0:1f:7e:cb:0a:53:f0:32:b3:7d:
02:48:ce:48:ee:a7:ed:60:21:e6:7a:f0:37:80:94:
4d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CF:56:47:26:0F:5D:DF:99:DD:36:9B:16:00:A9:F4:36:D3:D8:24
X509v3 Authority Key Identifier:
keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a1:8c:fa:26:b6:fa:e1:f0:c4:1b:ce:ea:1c:ef:09:5e:eb:
e1:60:d9:c1:9f:cc:89:99:8d:6e:df:32:de:22:68:05:94:19:
9e:34:00:ad:b8:c9:d3:26:36:f7:3b:e7:1c:89:7c:56:4f:26:
3a:04:76:e4:2b:ac:8a:a1:17:0f:70:b0:99:92:60:5d:95:b1:
9c:30:d8:c1:3e:89:3f:7f:ed:7b:c8:46:33:4c:be:e7:86:93:
f2:23:e9:fc:3a:a8:3c:ad:db:17:f3:18:df:25:61:13:f3:b3:
53:31:58:df:eb:93:4f:eb:c7:4e:63:b0:58:a2:9a:bb:04:ca:
76:d1:ab:5c:88:35:63:6b:79:98:9d:5f:d2:48:4b:ce:77:a2:
d5:67:93:17:12:89:95:1e:2a:ee:eb:d2:95:47:13:2f:68:c0:
51:07:38:ba:6a:8b:61:47:83:70:a3:ee:80:a5:6a:62:03:d0:
a8:06:46:71:83:bd:d3:b2:da:8e:73:96:4f:8c:36:bd:d4:ad:
9b:96:58:30:4c:41:ac:b7:dc:05:c7:75:ce:99:bc:22:0c:2a:
db:50:41:4a:88:75:bc:20:a4:e7:c9:8e:75:47:89:bb:29:4d:
b9:54:33:a7:c2:93:1e:a1:7c:0b:06:94:f0:33:27:38:a1:92:
07:b4:1b:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8KM8kxgdM7ChQK053MCR7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NjcxNGQxOTkwN2E3NGJlOTVjYmIxNzM3OWUwYzhhMWI1
YTgzY2EwHhcNMjYxMDI3MDcwMDExWhcNMjYxMDI4MDcwMDExWjAzMTEwLwYDVQQD
EyhhOWNmNTY0NzI2MGY1ZGRmOTlkZDM2OWIxNjAwYTlmNDM2ZDNkODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwimtYaGRg8AeVsDwsLWGoDXipTH1
NaHMPdDgmN3FkZGKw6bkzYgJn74BVo1OTOk67CoK4Qbx+ZRomzOYj8fhXy6doqAz
OVA+xyS/XDRcdDqqp0LyfXTuIzLTXUIDwR6lAqywqtyo8ZkWQrTJAh0t+OhMtYQa
4eQ8jnkmBJhtjyGOm743raJ8wdxkXhOKgG0efvC41WE7jP0lilCXwaoQ9dExoQl6
X/Fs1Lt+x9QrrP/BddFO0KkyoQ0pWfr/QWTq/7pXJEcnpSdhDXyrIYFyTAtphnlS
9kV6zlwmvT7lxuBtTUEXFdAffssKU/Ays30CSM5I7qftYCHmevA3gJRNfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnPVkcmD13fmd02mxYAqfQ209gkMB8GA1UdIwQY
MBaAFAZnFNGZB6dL6Vy7FzeeDIobWoPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83YmZmNWItMmU5NS00NjRiLWFiMDQt
ZmYwMTBlMjEyMzNhLzEvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS83YmZmNWItMmU5NS00NjRiLWFiMDQtZmYwMTBlMjEyMzNh
LzEvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6GM+ia2
+uHwxBvO6hzvCV7r4WDZwZ/MiZmNbt8y3iJoBZQZnjQArbjJ0yY29zvnHIl8Vk8m
OgR25CusiqEXD3CwmZJgXZWxnDDYwT6JP3/te8hGM0y+54aT8iPp/DqoPK3bF/MY
3yVhE/OzUzFY3+uTT+vHTmOwWKKauwTKdtGrXIg1Y2t5mJ1f0khLznei1WeTFxKJ
lR4q7uvSlUcTL2jAUQc4umqLYUeDcKPugKVqYgPQqAZGcYO907LajnOWT4w2vdSt
m5ZYMExBrLfcBcd1zpm8Igwq21BBSoh1vCCk58mOdUeJuylNuVQzp8KTHqF8CwaU
8DMnOKGSB7Qbuw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:49:07 2026 by rpki-client