Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft
File: bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft (raw, json)
Hash identifier: jYrXFYxWKT5zJ/teiVqq5CsyLIat8ipkzpy9g4LJ7bQ=
Subject key identifier: 23:8C:82:C4:AA:B7:9A:74:CA:FA:FC:1B:A9:E5:8D:2A:BC:AC:81:6E
Authority key identifier: 6C:C1:85:02:45:D2:BF:0B:58:3A:33:9F:2E:B4:F7:C0:90:59:64:0C
Certificate issuer: /CN=6cc1850245d2bf0b583a339f2eb4f7c09059640c
Certificate serial: 019D296139FBF83EA1E76670308DCED8527E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMGFAkXSvwtYOjOfLrT3wJBZZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft
Manifest number: 021F
Signing time: Thu 26 Mar 2026 09:02:10 +0000
Manifest this update: Thu 26 Mar 2026 09:02:10 +0000
Manifest next update: Fri 27 Mar 2026 09:02:10 +0000
Files and hashes: 1: bMGFAkXSvwtYOjOfLrT3wJBZZAw.crl (hash: tOKuL5wHMG8fbbw8LY6zH93nkO0PsaaGWtVDCUINwkA=)
2: sR4VSsh46NucLoZBNFoOCKjAw_w.roa (hash: iz6mxFRpjWhqFGbB1en1IQ8K5ksG0skqK0JvXZzfdr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMGFAkXSvwtYOjOfLrT3wJBZZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:39:fb:f8:3e:a1:e7:66:70:30:8d:ce:d8:52:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc1850245d2bf0b583a339f2eb4f7c09059640c
Validity
Not Before: Mar 26 09:02:10 2026 GMT
Not After : Mar 27 09:02:10 2026 GMT
Subject: CN=238c82c4aab79a74cafafc1ba9e58d2abcac816e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:f5:e6:2a:bb:51:c5:91:0f:21:84:99:ef:
a7:c8:b6:48:60:81:d7:0e:53:80:60:75:7a:14:17:
ad:13:ed:0b:20:87:2d:e7:05:33:80:11:f2:58:27:
44:3f:96:5e:f5:07:99:c2:61:aa:ba:ce:ff:3d:94:
d4:63:89:eb:6c:ff:c8:de:64:51:4a:87:4a:1a:95:
f0:fb:3b:68:19:95:5d:a3:cb:c6:d4:cc:a3:7d:3f:
72:01:03:05:49:f6:99:6d:1f:ef:3d:b0:7e:c8:8c:
b3:79:e1:a8:31:02:12:f1:be:97:48:38:ec:3a:7d:
9f:53:c5:5a:0f:bd:a2:c4:f6:f2:17:1e:eb:9d:36:
c7:6e:4c:c7:8e:b3:a4:9d:0d:ee:52:12:fa:8c:6b:
31:5e:a3:61:dd:22:35:e5:2a:8d:4f:70:ca:78:95:
3b:b0:54:c2:df:42:eb:35:29:e8:26:29:de:44:6a:
16:3d:ae:4b:88:97:6f:87:07:da:c9:23:b5:2a:55:
68:b6:7d:f9:00:61:f3:48:54:5b:b2:51:83:a9:45:
e0:c1:31:e2:a8:a8:31:db:91:9d:db:be:4d:67:5f:
0e:71:e9:27:68:64:4c:b3:ca:aa:47:7d:96:dc:f3:
e6:f9:a3:12:fe:a8:43:ea:5b:9d:cb:81:55:90:3c:
d3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8C:82:C4:AA:B7:9A:74:CA:FA:FC:1B:A9:E5:8D:2A:BC:AC:81:6E
X509v3 Authority Key Identifier:
keyid:6C:C1:85:02:45:D2:BF:0B:58:3A:33:9F:2E:B4:F7:C0:90:59:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMGFAkXSvwtYOjOfLrT3wJBZZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:37:ea:0a:93:3a:8f:02:74:c5:09:71:b0:18:49:43:29:24:
bc:aa:23:ce:29:3e:12:bb:31:0f:f3:b0:9e:80:83:3a:c4:79:
bf:11:e0:e4:38:48:d3:32:40:f9:cd:5b:1f:15:69:ca:c4:8c:
17:09:6e:1c:9a:46:ee:1d:d2:ff:ac:04:b4:56:59:a9:21:79:
ae:62:a2:89:d5:40:61:c7:0f:49:7e:5a:84:ab:2e:09:1c:f5:
e0:e7:61:c7:f5:91:b5:08:6b:e9:20:b7:f7:24:01:cd:4c:85:
2a:5c:60:d9:49:98:36:56:8f:19:fa:6f:91:b3:d5:01:b5:cd:
05:2e:3f:22:a5:d3:8a:78:cc:a8:cc:d3:58:d1:cb:ee:81:7f:
45:19:80:46:79:e3:c2:14:10:15:65:da:7e:e9:ef:c9:3f:76:
01:ce:fe:a6:47:f0:0d:f0:98:f8:78:bb:c8:4a:88:59:eb:ae:
06:19:39:e6:a9:e5:1d:17:d3:33:f4:ec:ed:19:82:1d:f8:2a:
ab:12:0f:39:e9:9f:ed:b3:73:48:03:c9:58:14:c1:6d:1e:e9:
3c:08:e8:14:6a:b6:6b:74:af:29:a4:8b:24:e0:2f:51:96:48:
5c:62:0d:30:6a:90:88:f4:fb:98:e8:f9:d6:b3:30:f0:ba:48:
38:5b:fa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:23 2026 by rpki-client