Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
File: bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft (raw, json)
Hash identifier: BhtwUQ8S3zsASThrYpQf7sfN39juyCde8l96t9Wnv9c=
Subject key identifier: F8:F1:2D:0D:BC:28:FB:1A:BC:98:D5:75:D4:48:1A:8A:E0:A8:72:85
Authority key identifier: 6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
Certificate issuer: /CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
Certificate serial: 019CE6369FD88BF70557FDCAB4A965781A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
Manifest number: 0520
Signing time: Fri 13 Mar 2026 08:01:05 +0000
Manifest this update: Fri 13 Mar 2026 08:01:05 +0000
Manifest next update: Sat 14 Mar 2026 08:01:05 +0000
Files and hashes: 1: YDy6wLds96Yf3zX0RUfnfXQDw5Q.roa (hash: 86RzS+pw/jn2zDtIOdA8fDYlhM/9zcSkfL4mjAAa2B4=)
2: bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl (hash: PmNumd3vDobw7mNBz39G7159RjVrlvEmc1gnSH0ezm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:9f:d8:8b:f7:05:57:fd:ca:b4:a9:65:78:1a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
Validity
Not Before: Mar 13 08:01:05 2026 GMT
Not After : Mar 14 08:01:05 2026 GMT
Subject: CN=f8f12d0dbc28fb1abc98d575d4481a8ae0a87285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:a7:6f:4b:f4:64:15:cc:a8:f4:b1:6a:36:
e1:20:76:3f:e5:3e:de:9a:12:73:e2:2b:f2:42:ec:
87:e7:44:37:2e:01:c1:d9:13:d8:e3:67:97:e8:76:
e7:c4:10:d3:4f:d7:01:60:31:5f:8c:f6:61:42:4c:
a1:d0:e5:c6:bb:ed:e0:6b:cb:45:94:7f:5d:90:93:
33:fc:51:99:66:ae:9c:9f:e2:ee:f1:9c:ed:c3:1a:
e0:8d:2f:f8:24:c3:e5:3a:b4:87:6e:8b:8d:eb:48:
7f:9f:6a:11:b0:73:5e:df:03:ee:fd:1c:24:e1:2c:
11:0d:d5:70:f3:0c:8c:ea:c5:f5:0e:62:7c:e9:57:
cb:21:55:62:aa:8e:08:92:05:80:3e:3d:3f:dc:42:
68:f0:12:99:8a:8d:36:a4:b8:40:4d:b1:de:d4:1b:
17:ce:0d:39:02:90:a3:0f:76:89:ef:21:c0:00:ca:
55:4d:48:64:d1:72:c5:7c:2c:77:e6:e2:06:78:66:
11:d8:1c:20:ae:f7:80:84:d2:41:12:b4:e5:b6:4c:
67:fe:56:9b:2b:6d:05:9f:5e:69:28:3d:2b:dd:35:
f3:b9:b0:af:76:f5:51:6e:79:a1:14:7f:08:cd:5a:
62:47:e6:e6:67:14:bd:0b:80:d4:f4:95:e8:b5:8b:
e2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F1:2D:0D:BC:28:FB:1A:BC:98:D5:75:D4:48:1A:8A:E0:A8:72:85
X509v3 Authority Key Identifier:
keyid:6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f9:36:0b:c7:05:52:68:86:42:c1:22:88:65:e1:24:f1:09:
c5:5c:67:b5:63:be:10:23:1b:8e:37:21:9d:41:4c:e4:da:f2:
5a:a7:4a:71:b9:13:af:a4:21:0e:4f:36:10:73:67:c0:dc:43:
b0:47:8a:63:86:4f:2c:74:e5:33:1f:34:86:8d:3f:6e:c5:48:
56:a0:18:fb:f7:af:56:75:03:ca:6c:a9:eb:f3:01:90:6c:03:
18:f8:c1:19:0a:e7:00:89:71:c9:f9:fa:8e:e0:19:00:2f:57:
37:1b:d0:cd:e2:e6:38:6f:10:29:e6:29:a9:41:14:c4:5e:b4:
52:2a:fb:56:9a:82:f1:1f:e8:b5:3f:df:8a:9c:c8:86:2c:94:
53:07:8b:dc:3b:94:d1:92:56:ab:b1:9c:1f:3e:cb:ef:c0:11:
84:12:4e:9e:49:39:a9:54:17:b5:0d:f6:6b:ea:0e:e7:22:9f:
65:fa:02:16:8d:39:c3:89:9c:6f:cf:f4:3e:a1:e7:7d:40:00:
55:11:ec:7b:97:86:3d:31:28:73:42:6b:11:5e:a6:d6:af:e4:
ae:e6:5f:58:28:ed:51:84:d1:11:d0:79:97:4e:e3:06:04:94:
d0:ad:aa:d4:c4:03:74:79:27:73:8f:ea:bf:0b:26:8d:31:e0:
45:06:77:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 18:15:38 2026 by rpki-client