Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.mft
File: BmVsWtlzg3LVTAN-OX81vpqpJNs.mft (raw, json)
Hash identifier: ltNQkne7jbE6K6VJ92DDDeBEmD1M6VNKSaOfzJPr5A0=
Subject key identifier: AE:DB:0E:5D:75:4A:2D:31:18:62:2A:95:1E:62:20:B6:2C:90:FA:DB
Authority key identifier: 06:65:6C:5A:D9:73:83:72:D5:4C:03:7E:39:7F:35:BE:9A:A9:24:DB
Certificate issuer: /CN=06656c5ad9738372d54c037e397f35be9aa924db
Certificate serial: 019F9391D223CF70E82CF6C78D1D449A338E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmVsWtlzg3LVTAN-OX81vpqpJNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.mft
Manifest number: 0596
Signing time: Fri 24 Jul 2026 10:00:35 +0000
Manifest this update: Fri 24 Jul 2026 10:00:35 +0000
Manifest next update: Sat 25 Jul 2026 10:00:35 +0000
Files and hashes: 1: BmVsWtlzg3LVTAN-OX81vpqpJNs.crl (hash: 5iXS0O57CNQZK/Zjc7+QImuAZqD3Ffo8imQIzEUsmbM=)
2: IuMZcspQ8K2Rh1GaYKyW2FT1kL4.roa (hash: 9/0A8YPeaznPXiLNVP4FFOJdTd1wwZVGFqXuoC2dxWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmVsWtlzg3LVTAN-OX81vpqpJNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:d2:23:cf:70:e8:2c:f6:c7:8d:1d:44:9a:33:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06656c5ad9738372d54c037e397f35be9aa924db
Validity
Not Before: Jul 24 10:00:35 2026 GMT
Not After : Jul 25 10:00:35 2026 GMT
Subject: CN=aedb0e5d754a2d3118622a951e6220b62c90fadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:98:d9:71:a6:52:86:67:0b:47:80:93:dd:20:
4e:a4:61:95:61:fb:fd:a0:18:d4:a8:10:92:17:fd:
83:aa:ee:5e:70:71:f6:1d:a1:c2:a0:b1:53:ad:ea:
59:b9:a4:1e:83:76:04:7a:f8:df:5a:ad:b0:2d:d6:
66:fc:cd:25:08:aa:92:80:9a:be:9f:43:d7:54:ae:
79:62:1d:99:41:90:68:ac:e9:ef:e6:3d:87:21:61:
38:f7:f5:de:1e:07:32:44:ff:ed:6a:da:bc:c0:fd:
19:45:29:0f:0c:e4:83:3d:f3:14:3e:b7:77:8a:f7:
b1:79:1c:7b:ed:46:f1:4a:f9:28:cd:d4:e2:a9:8d:
09:2b:2f:a9:46:d6:77:57:ac:5d:e1:92:c6:80:7f:
12:4f:ec:ea:99:6e:d7:b6:ef:a7:96:cc:57:b7:92:
b5:80:c1:02:66:34:2a:ff:95:f5:8d:2a:fd:e6:6a:
42:8d:08:aa:88:72:a8:77:dd:18:f2:d9:19:76:ee:
5d:fa:09:94:7e:45:04:b2:00:4e:24:c6:7b:1c:ff:
95:f8:17:f9:2a:37:89:d5:4c:d4:2c:65:14:d8:33:
cd:72:c9:46:e1:de:d9:36:af:a7:b5:bd:26:43:ee:
87:ce:a7:39:81:56:74:d6:18:64:fa:96:2e:9f:68:
15:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DB:0E:5D:75:4A:2D:31:18:62:2A:95:1E:62:20:B6:2C:90:FA:DB
X509v3 Authority Key Identifier:
keyid:06:65:6C:5A:D9:73:83:72:D5:4C:03:7E:39:7F:35:BE:9A:A9:24:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmVsWtlzg3LVTAN-OX81vpqpJNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e5:61:c8:4a:bf:86:dd:f0:e8:29:f0:ec:10:b5:45:e3:96:
99:9f:3c:89:c5:59:9e:7f:7a:d9:69:fd:86:cf:ed:3a:5b:04:
d9:a1:28:bc:08:0b:5f:8b:d3:44:b1:e6:c3:58:b6:ee:c6:2e:
5f:92:ed:9d:ca:9b:d1:0c:7b:61:86:f6:55:6e:38:ee:a9:64:
51:8a:7a:7b:2b:a4:ba:e3:f8:61:ea:7c:4e:90:b1:e2:aa:a8:
35:f1:64:93:a0:a1:63:a5:ff:ea:4a:be:9d:d9:c8:f2:07:06:
c4:00:b7:ea:7b:d9:ca:2f:ef:2a:3b:ee:3d:10:04:e6:27:f6:
e8:ff:b1:be:54:4d:20:1d:89:80:32:d8:e4:6a:f3:9b:10:d9:
37:18:1c:54:7c:23:c7:fc:c4:b0:ca:3a:73:b0:b2:8f:1f:7c:
5a:92:c3:83:ef:a4:2c:60:9f:9d:7f:76:e7:f6:8f:7f:b7:16:
d1:10:ee:5e:10:e4:08:cd:8c:c9:53:24:a3:1b:d2:e8:ee:ec:
4b:7c:32:bb:ab:37:d7:aa:e7:2c:fe:e4:b1:5d:5e:91:d4:ad:
23:5f:42:0c:ec:d5:9e:60:91:2d:fe:b9:6e:8a:98:4b:9c:9e:
2e:3e:cd:26:43:e6:cb:ab:73:87:fa:3e:e9:17:6b:f2:91:f4:
c1:b3:7c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:29:24 2026 by rpki-client