Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
File: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft (raw, json)
Hash identifier: q3CHFXtM4CuyAP46mQpbMj1H1lh9e189v+CgoK7Bt/k=
Subject key identifier: 85:27:5E:DE:10:4B:19:A1:D5:81:21:7D:A8:EA:6E:A8:C8:D6:0C:34
Authority key identifier: 06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
Certificate issuer: /CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Certificate serial: 019D28F22509B35E779FF3E1D103601A9DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
Manifest number: 1558
Signing time: Thu 26 Mar 2026 07:00:50 +0000
Manifest this update: Thu 26 Mar 2026 07:00:50 +0000
Manifest next update: Fri 27 Mar 2026 07:00:50 +0000
Files and hashes: 1: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl (hash: HaUEO8e5m32vvO5B551gsoA9gegem7xm+6X3sL24HMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:25:09:b3:5e:77:9f:f3:e1:d1:03:60:1a:9d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Validity
Not Before: Mar 26 07:00:50 2026 GMT
Not After : Mar 27 07:00:50 2026 GMT
Subject: CN=85275ede104b19a1d581217da8ea6ea8c8d60c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:44:3c:35:d1:38:8a:dd:bf:4a:b2:01:ab:
2f:26:8b:c9:eb:0d:e5:48:87:bc:71:8a:2e:1a:48:
df:c4:99:36:45:55:5c:47:3a:03:06:96:2d:77:69:
d8:42:0d:08:ff:bf:1e:8e:48:3a:47:f3:6f:e1:5f:
9e:0b:c3:ff:ba:9c:47:9b:d2:30:8a:b0:19:3e:40:
dc:1e:c4:72:08:e9:f7:40:8e:f7:d1:1d:f3:a7:66:
ff:23:2d:45:3b:93:36:0d:c0:b8:9e:03:2f:0e:61:
02:a1:75:22:05:14:a4:97:7b:4b:b0:1e:c1:e2:1d:
2e:c3:1f:de:00:8c:dd:c3:d4:39:60:f7:2b:8a:5d:
c0:92:f3:37:0b:eb:71:72:21:73:2b:77:dc:ee:08:
29:7f:3c:2c:83:d5:fc:4e:d9:67:30:75:fb:a2:9e:
66:34:c6:57:73:eb:ef:11:3a:db:f9:b4:4a:36:9c:
13:d3:4f:88:59:72:34:96:9f:8b:d8:d6:77:75:2c:
7a:88:20:02:4e:2e:8b:6f:05:1c:5a:a7:f6:cf:e1:
71:5e:3a:58:5b:39:9d:a2:5d:9b:4f:bd:df:96:78:
48:ac:4e:a5:07:c5:4f:e8:99:19:1b:fd:82:a2:6a:
2a:47:7b:6b:3d:b3:c2:bc:19:2a:ec:8c:12:98:84:
6e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:27:5E:DE:10:4B:19:A1:D5:81:21:7D:A8:EA:6E:A8:C8:D6:0C:34
X509v3 Authority Key Identifier:
keyid:06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bc:1f:6a:c1:09:37:3f:96:8a:dd:29:12:ea:8b:76:43:b3:
ac:85:d2:b7:f9:21:fa:21:97:8c:e6:c2:6c:0b:a4:80:28:09:
95:64:89:0c:73:97:fc:2a:ef:c4:de:6c:11:bd:cc:43:61:8b:
4e:7d:fb:fd:d8:22:63:7e:a5:9b:dd:e3:64:f0:66:87:d2:df:
7b:08:81:3d:0b:2d:99:38:06:12:4e:63:17:75:16:ad:58:68:
8b:a7:a8:ad:79:82:60:34:38:56:4d:ae:c9:39:35:6f:f2:e0:
d6:25:15:d1:e9:e0:ae:45:07:b9:65:d4:c3:72:1d:7e:f6:f8:
98:2b:d7:8f:8b:4f:e6:29:11:0c:7f:26:7c:b3:af:19:c6:ac:
54:51:d7:9e:10:46:4c:6f:4a:d6:a0:75:9c:2a:2d:10:4f:97:
3f:c6:9f:2f:33:01:2f:df:c5:4b:0c:ae:c6:0e:59:44:c8:59:
99:77:39:c7:d6:1b:2b:d6:e4:4e:e8:6f:61:2e:ae:ca:d5:e8:
35:b3:da:d5:d2:c8:ab:4d:a6:46:dc:f0:9f:92:fd:92:37:e1:
be:d4:8c:52:5b:6d:7d:83:00:4a:83:3b:2e:ff:dc:c8:21:ec:
a1:e5:43:7f:10:f5:46:93:72:1c:cd:7e:11:e1:8c:16:80:be:
7c:3f:c8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:39:14 2026 by rpki-client