Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
File: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft (raw, json)
Hash identifier: N02m/c5kwQxSQcDL7C+dD1HGS1rJtwUHZBfklMdwFP8=
Subject key identifier: 04:DA:3B:67:18:F7:29:FB:7F:95:8E:68:09:09:77:72:D2:C4:7B:CA
Authority key identifier: 06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
Certificate issuer: /CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Certificate serial: 019F92ED87B9AF3F59FCC919036C1C55D058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
Manifest number: 1698
Signing time: Fri 24 Jul 2026 07:01:08 +0000
Manifest this update: Fri 24 Jul 2026 07:01:08 +0000
Manifest next update: Sat 25 Jul 2026 07:01:08 +0000
Files and hashes: 1: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl (hash: PEpfG6PB/o37x9QKMApd4VnUujMbB90vIulUwmf53Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:87:b9:af:3f:59:fc:c9:19:03:6c:1c:55:d0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Validity
Not Before: Jul 24 07:01:08 2026 GMT
Not After : Jul 25 07:01:08 2026 GMT
Subject: CN=04da3b6718f729fb7f958e6809097772d2c47bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:8a:94:1c:ef:b8:32:38:16:85:b2:3b:8d:
e1:89:cc:32:7d:7b:e8:96:8a:96:f9:49:ef:74:17:
40:bb:a6:38:49:86:62:39:dd:95:ae:9b:5c:f9:bf:
06:05:68:83:6e:c1:06:77:0c:7e:19:1e:86:3a:41:
fb:02:cd:57:07:06:e0:1e:08:06:97:43:51:3f:e4:
1d:d0:b1:45:73:99:88:8c:56:d3:cd:59:60:84:06:
80:14:20:3d:c4:4f:62:b9:62:0f:1c:0e:26:e0:2b:
ca:73:f6:80:b9:7a:ce:81:56:68:29:aa:de:c8:a6:
25:34:8d:f2:9c:31:d9:1c:28:58:7a:d2:87:b8:13:
f9:2b:e4:88:16:6b:5a:e2:2b:b5:3c:2f:c0:e2:b5:
60:9f:d2:c2:43:b2:0b:a3:df:f1:2f:38:3c:84:6d:
9a:29:d9:d9:be:e7:78:71:e5:13:30:df:98:8a:b7:
58:f2:b9:c7:3b:f4:24:fc:fd:b5:80:99:c4:16:78:
a4:8f:15:94:34:a4:a7:61:1f:be:67:61:ab:ee:20:
3e:a8:0c:71:e5:55:8f:0b:13:ab:bb:27:37:6b:94:
cc:30:7d:7c:95:95:3e:e7:60:27:d0:1d:82:46:d1:
d4:46:f1:a5:b1:7c:f7:a3:58:4c:ca:af:b4:be:f5:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DA:3B:67:18:F7:29:FB:7F:95:8E:68:09:09:77:72:D2:C4:7B:CA
X509v3 Authority Key Identifier:
keyid:06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fb:57:92:b1:43:9c:99:ba:3f:71:ad:16:8c:a5:f4:86:d1:
2c:c0:10:d3:2e:e1:f7:10:5c:32:4f:8c:05:f2:e3:83:db:1e:
a4:96:23:bc:0f:79:64:00:9f:9b:dd:b4:9e:66:ec:0a:1f:32:
3a:b4:5f:18:0a:ef:5d:e1:6e:44:88:17:66:7e:38:d2:11:3e:
b5:8f:f9:fa:68:e5:99:0e:45:c7:18:e6:8e:94:72:72:42:30:
f7:ce:95:32:02:1a:d6:4c:cb:99:76:3c:cd:0e:31:5f:94:0f:
09:54:73:be:ac:4b:0e:52:46:f4:d5:25:ab:4c:4f:c5:ea:b3:
22:4c:34:ce:a9:96:40:b1:be:bc:39:3c:ec:5e:8e:6b:81:4d:
22:4e:39:43:46:54:c5:11:d5:21:15:42:17:dd:42:1e:75:66:
ab:fc:1c:a5:f2:21:0d:2a:52:0f:e2:76:3b:87:15:3c:c5:e4:
7c:8d:97:b7:22:89:51:d5:4b:d9:72:18:2f:4c:36:42:96:80:
32:a4:67:91:49:3f:ef:43:91:ec:ae:35:26:8d:c5:70:2d:72:
0b:4a:41:e9:5f:49:dd:f5:8c:d6:6d:9a:90:c9:fa:5c:a3:a1:
86:e6:33:4e:bb:6e:54:80:7b:09:58:15:c0:05:20:f5:62:fc:
7f:45:7d:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7Ye5rz9Z/MkZA2wcVdBYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NmJhMjA5YzUwYzAyYTg1OGI1NDMwOGM4MmFlNWJmMzAy
ZWZhYTQwHhcNMjYwNzI0MDcwMTA4WhcNMjYwNzI1MDcwMTA4WjAzMTEwLwYDVQQD
EygwNGRhM2I2NzE4ZjcyOWZiN2Y5NThlNjgwOTA5Nzc3MmQyYzQ3YmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPSKlBzvuDI4FoWyO43hicwyfXvo
loqW+UnvdBdAu6Y4SYZiOd2Vrptc+b8GBWiDbsEGdwx+GR6GOkH7As1XBwbgHggG
l0NRP+Qd0LFFc5mIjFbTzVlghAaAFCA9xE9iuWIPHA4m4CvKc/aAuXrOgVZoKare
yKYlNI3ynDHZHChYetKHuBP5K+SIFmta4iu1PC/A4rVgn9LCQ7ILo9/xLzg8hG2a
KdnZvud4ceUTMN+YirdY8rnHO/Qk/P21gJnEFnikjxWUNKSnYR++Z2Gr7iA+qAxx
5VWPCxOruyc3a5TMMH18lZU+52An0B2CRtHURvGlsXz3o1hMyq+0vvX8swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATaO2cY9yn7f5WOaAkJd3LSxHvKMB8GA1UdIwQY
MBaAFAZrognFDAKoWLVDCMgq5b8wLvqkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm11aUNjVU1BcWhZdFVNSXlDcmx2ekF1LXFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zMTUxYjgtZDhmMS00MTAyLTkzNmYt
OTNmZmVjNWMzYzgxLzEvQm11aUNjVU1BcWhZdFVNSXlDcmx2ekF1LXFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8zMTUxYjgtZDhmMS00MTAyLTkzNmYtOTNmZmVjNWMzYzgx
LzEvQm11aUNjVU1BcWhZdFVNSXlDcmx2ekF1LXFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALftXkrFD
nJm6P3GtFoyl9IbRLMAQ0y7h9xBcMk+MBfLjg9sepJYjvA95ZACfm920nmbsCh8y
OrRfGArvXeFuRIgXZn440hE+tY/5+mjlmQ5FxxjmjpRyckIw986VMgIa1kzLmXY8
zQ4xX5QPCVRzvqxLDlJG9NUlq0xPxeqzIkw0zqmWQLG+vDk87F6Oa4FNIk45Q0ZU
xRHVIRVCF91CHnVmq/wcpfIhDSpSD+J2O4cVPMXkfI2XtyKJUdVL2XIYL0w2QpaA
MqRnkUk/70OR7K41Jo3FcC1yC0pB6V9J3fWM1m2akMn6XKOhhuYzTrtuVIB7CVgV
wAUg9WL8f0V9oQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:05:20 2026 by rpki-client