Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
File: bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft (raw, json)
Hash identifier: j3UZBrlvQ3leG6hl24kY4zHSrsDVrwUN7o0tyF1FUKA=
Subject key identifier: 45:A7:0E:66:C1:F0:1A:D0:37:DF:22:26:F4:C3:1F:4E:3E:0A:25:FF
Authority key identifier: 6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
Certificate issuer: /CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
Certificate serial: 019E7BC3172005AE47AA64EF8F68874570B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
Manifest number: 05F2
Signing time: Sun 31 May 2026 02:00:43 +0000
Manifest this update: Sun 31 May 2026 02:00:43 +0000
Manifest next update: Mon 01 Jun 2026 02:00:43 +0000
Files and hashes: 1: YDy6wLds96Yf3zX0RUfnfXQDw5Q.roa (hash: 86RzS+pw/jn2zDtIOdA8fDYlhM/9zcSkfL4mjAAa2B4=)
2: bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl (hash: IeMSJB8Dm4z6psYY18Z+U7V8wGu0DmdvvPIp7huHNpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7b:c3:17:20:05:ae:47:aa:64:ef:8f:68:87:45:70:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
Validity
Not Before: May 31 02:00:43 2026 GMT
Not After : Jun 1 02:00:43 2026 GMT
Subject: CN=45a70e66c1f01ad037df2226f4c31f4e3e0a25ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a7:9f:2e:6e:f0:d4:f2:4e:7f:d3:03:fc:c5:
17:8a:ad:a7:da:1a:ef:18:b0:23:d4:dd:ac:1c:7b:
82:33:58:ca:da:3e:e5:dd:5e:41:36:37:82:cf:63:
6e:16:60:ec:fb:76:23:0d:83:3f:78:2d:6b:f4:3e:
86:f3:97:1f:d7:d1:63:54:81:14:8d:80:b4:95:f0:
c1:2e:d0:ea:a0:bb:df:69:d6:d5:fe:0d:8d:2c:19:
aa:51:35:a0:ee:49:1a:d5:75:17:9f:61:9a:61:fc:
d9:87:0b:43:fd:30:d8:56:c7:ad:34:60:71:0a:63:
6b:53:36:00:61:48:a2:9b:79:5d:e2:5b:0a:10:96:
c5:ef:12:50:b4:7f:02:f4:5b:06:ad:55:af:ca:c5:
62:ee:85:7f:db:9f:0e:15:8f:5c:69:b5:30:ec:76:
64:46:fa:ff:29:6a:8a:5f:32:05:d4:ea:5c:07:27:
ac:6c:9f:15:72:f4:41:93:71:c2:eb:39:dc:23:22:
78:55:e9:35:c8:22:53:eb:56:b5:b8:a4:b6:48:89:
24:fe:29:06:9a:48:48:0b:37:fe:4d:6a:27:05:e5:
c3:35:c7:a0:38:76:af:80:5c:dd:6f:c9:34:d5:7e:
58:22:6c:f1:74:46:f3:c2:1f:9d:91:87:d9:9c:94:
0a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A7:0E:66:C1:F0:1A:D0:37:DF:22:26:F4:C3:1F:4E:3E:0A:25:FF
X509v3 Authority Key Identifier:
keyid:6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ff:bf:1b:4a:8e:b6:74:9e:d4:69:5b:bb:7e:ad:5e:a5:ef:
1f:c5:f0:c8:5a:f3:24:c7:34:4a:9a:cc:ed:03:15:d7:6e:fe:
99:bd:37:71:0d:93:ae:57:93:5b:5e:55:60:53:66:41:67:a1:
e7:9c:e9:fe:25:4c:27:5b:fb:85:dd:44:dc:25:96:2f:c0:49:
0f:2e:2f:8b:1e:34:26:00:45:35:34:6c:f2:be:f1:d3:69:60:
09:3f:74:4d:9c:ba:82:fa:6e:6d:1a:61:ad:dc:eb:62:eb:e1:
41:69:e5:34:1f:7c:20:fe:4a:08:05:8a:79:ef:1c:50:31:32:
dd:a8:c3:f7:28:6b:6e:73:8b:fa:83:1f:ce:13:15:d4:3e:48:
c2:13:37:04:7a:43:16:57:70:c6:76:63:c0:05:be:36:1f:01:
91:c1:47:31:2c:f6:8d:5e:02:46:19:2d:49:86:86:b1:b1:e1:
56:95:3d:60:aa:90:07:1c:f0:d3:db:df:ee:a1:aa:74:74:1d:
a6:a2:56:5d:95:9b:96:68:c0:de:d4:a5:de:fa:f9:91:84:ab:
90:1a:47:1f:44:6c:eb:9b:71:42:b4:db:6a:0d:35:6c:fd:89:
ef:9d:e8:63:dd:69:07:24:f4:47:81:76:f8:84:7e:a2:83:21:
dc:e9:f5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:47:54 2026 by rpki-client