Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
File: bMfzcUDRMXn5pckglknIDDfGpxM.mft (raw, json)
Hash identifier: WoqpEwRft04DxmxlYGORttBVLhvtSOjfiHc3veDs7Q4=
Subject key identifier: E7:0C:11:93:E7:4D:94:93:E5:0C:E5:8C:28:99:A9:FF:06:BB:BB:9B
Authority key identifier: 6C:C7:F3:71:40:D1:31:79:F9:A5:C9:20:96:49:C8:0C:37:C6:A7:13
Certificate issuer: /CN=6cc7f37140d13179f9a5c9209649c80c37c6a713
Certificate serial: 019D27723EEB5DA64F196F15CB8ADB3147BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
Manifest number: 149E
Signing time: Thu 26 Mar 2026 00:01:31 +0000
Manifest this update: Thu 26 Mar 2026 00:01:31 +0000
Manifest next update: Fri 27 Mar 2026 00:01:31 +0000
Files and hashes: 1: bMfzcUDRMXn5pckglknIDDfGpxM.crl (hash: LJ3fZ+7v9ANHAtZsiteiltL1dCHLQ8+/hhx7lTHnNDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:3e:eb:5d:a6:4f:19:6f:15:cb:8a:db:31:47:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc7f37140d13179f9a5c9209649c80c37c6a713
Validity
Not Before: Mar 26 00:01:31 2026 GMT
Not After : Mar 27 00:01:31 2026 GMT
Subject: CN=e70c1193e74d9493e50ce58c2899a9ff06bbbb9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:9c:37:b8:4a:1a:79:c1:f0:ea:f1:20:6f:
66:11:1a:dd:9e:e4:d0:65:d2:8c:a3:80:52:f3:de:
4f:7c:e8:42:28:cd:64:ec:7c:7c:b3:ed:db:3f:0a:
31:0a:25:36:9c:89:0a:87:31:ff:99:3c:54:29:ff:
9d:44:c8:f7:17:80:a2:96:85:3a:e0:bb:0c:1a:07:
51:7f:8c:40:d3:fb:e6:32:38:2d:34:c2:96:b6:b1:
da:f6:3a:78:b8:80:1f:97:77:30:ab:7a:1d:2a:62:
b6:1b:74:15:b4:f2:6e:bf:f8:d2:61:04:83:08:b3:
14:cc:55:76:95:fd:89:ab:18:45:9b:3a:fd:3a:36:
a1:7e:bf:44:22:77:1c:fa:d7:fe:30:05:bd:56:b2:
63:c3:1e:ee:01:87:fa:5c:29:fb:68:bc:46:af:bd:
06:35:c6:11:85:d0:04:74:71:09:48:ca:c7:36:f7:
06:da:a4:de:6b:01:5f:59:01:c8:2b:9f:c0:85:2c:
da:f0:e3:d3:a9:7d:84:13:36:2f:b5:bc:c0:05:4d:
bf:fe:93:0c:1b:1f:11:96:07:32:3f:71:d4:e0:8d:
ab:6a:e3:e1:7c:2c:fe:54:e8:fd:f1:d8:ef:87:43:
2e:b5:dd:ff:50:e2:31:cf:c4:29:36:36:68:3f:eb:
91:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0C:11:93:E7:4D:94:93:E5:0C:E5:8C:28:99:A9:FF:06:BB:BB:9B
X509v3 Authority Key Identifier:
keyid:6C:C7:F3:71:40:D1:31:79:F9:A5:C9:20:96:49:C8:0C:37:C6:A7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ba:e0:d3:e3:eb:3e:27:ae:42:c5:ac:8b:69:4a:77:47:e4:
52:6b:4b:db:5c:62:75:f2:9f:76:43:0a:9e:a4:2e:69:0b:0e:
4b:d4:60:95:11:87:bb:9f:90:92:ce:88:d9:35:5b:8f:56:fe:
14:d4:0c:36:0f:6d:e2:f5:60:3a:94:ab:4b:b3:d9:53:e0:ed:
73:3a:19:c9:d3:ff:87:1a:88:35:f2:2a:4e:46:85:0e:fc:56:
2c:b7:60:9a:86:11:8f:f2:95:9f:cb:a6:9b:b5:8e:c2:f3:3a:
82:67:fc:af:2c:7c:1a:ba:c7:51:44:1e:7f:16:50:e9:c9:c0:
72:04:33:15:54:00:83:7a:b5:33:a7:b4:f7:d7:3e:7f:8b:16:
57:fa:1f:7b:f3:a6:38:53:3c:1d:09:33:17:2f:30:ae:7a:8b:
84:c5:2b:32:a6:fc:8c:bc:cd:da:11:58:b5:7a:10:34:d3:ae:
0f:27:99:ab:34:af:9e:64:a7:24:cc:bd:05:8c:25:8e:e6:da:
82:6e:97:21:3c:3d:b3:29:2b:b3:98:64:68:50:ab:a6:c0:b9:
a9:a9:03:c9:a2:07:53:fd:4e:37:5d:0d:23:c4:6d:52:e5:0b:
f0:6b:6a:e6:4e:54:2d:84:19:66:cc:c2:ac:29:89:3c:90:c3:
53:3c:06:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:07 2026 by rpki-client