Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
File: bMdYWreoPsgLVauVe_N7eR52UBY.mft (raw, json)
Hash identifier: R62D3GEXX/yaoiVk8PDsRoyZ+QSN3LQY67qfnilGi0A=
Subject key identifier: 16:C2:BF:3F:9F:00:38:69:CE:6E:50:C1:03:12:ED:D4:A0:33:A6:5D
Authority key identifier: 6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
Certificate issuer: /CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Certificate serial: 019D27DFEF25BC998F3EB8933ECF9889FDAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
Manifest number: 15F2
Signing time: Thu 26 Mar 2026 02:01:20 +0000
Manifest this update: Thu 26 Mar 2026 02:01:20 +0000
Manifest next update: Fri 27 Mar 2026 02:01:20 +0000
Files and hashes: 1: bMdYWreoPsgLVauVe_N7eR52UBY.crl (hash: kATDbYs5WpQnptovK4bCs0DnGGLSjRPu9wLVoVFOYjg=)
2: e51r6d8MY0z0wgESUl_beU3OIIY.roa (hash: NKb+xyyt/CtCVFv1JVTrUrEnFhYCHL7jXn1hVp8rZ4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ef:25:bc:99:8f:3e:b8:93:3e:cf:98:89:fd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Validity
Not Before: Mar 26 02:01:20 2026 GMT
Not After : Mar 27 02:01:20 2026 GMT
Subject: CN=16c2bf3f9f003869ce6e50c10312edd4a033a65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:77:3f:93:81:c6:f0:51:e8:af:88:c6:5f:
f4:62:96:c3:2f:2f:ff:a3:9f:72:08:ca:1a:bc:8b:
a4:7a:a7:71:47:bc:76:95:eb:47:87:d8:7a:0d:24:
ce:e6:ca:58:8e:a8:75:02:22:3e:e5:bb:a0:4b:03:
e4:6e:c7:31:a8:7f:7d:a7:74:b5:1b:ce:53:f5:c9:
7f:37:e8:24:85:be:5d:68:c3:42:88:dc:28:25:d9:
a3:d9:50:44:2d:cd:40:f3:4f:01:91:5c:e1:85:37:
ae:72:c4:36:3f:8f:e4:44:97:2c:c4:de:49:63:5a:
4e:7d:b5:dd:a4:c4:d4:1e:65:ba:f0:81:11:54:b4:
38:1b:3c:25:09:bd:32:c7:17:cc:18:2e:3c:2c:4a:
0d:43:5e:44:77:b3:b2:29:6a:c9:ad:92:b5:2a:8f:
df:c0:93:83:61:1d:bf:d4:b8:d8:96:3c:9f:42:c9:
d2:28:5d:66:9b:ed:24:3f:d4:c7:f8:28:83:61:ea:
01:61:ea:ba:68:66:1c:e5:d8:7d:0c:62:32:f6:fa:
05:6a:fb:f3:d9:02:dc:53:22:23:bb:f5:e7:d9:76:
44:09:4e:3d:b1:73:04:27:be:a5:4b:f9:93:6a:84:
f2:77:3f:59:21:c9:36:8c:af:c8:41:2c:a0:86:d6:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C2:BF:3F:9F:00:38:69:CE:6E:50:C1:03:12:ED:D4:A0:33:A6:5D
X509v3 Authority Key Identifier:
keyid:6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:93:19:53:ef:e6:34:53:9c:06:4c:bc:d8:d1:c3:a0:77:e2:
b1:c4:82:fa:97:e7:46:ba:70:e8:b1:e1:d5:33:33:d4:59:82:
cc:28:d8:71:cd:d6:c9:1e:0f:2b:0d:5c:bb:51:0b:27:66:44:
ca:1c:64:da:22:11:49:65:85:da:eb:0e:7f:51:d7:a4:4c:dd:
2b:f0:1c:9f:54:2c:d5:78:73:6d:75:c6:d0:6f:8c:3c:06:1c:
3a:12:22:c6:49:6a:11:79:15:8b:9f:dd:d0:02:45:cd:29:4b:
dc:ae:10:62:6b:60:b0:6a:13:a5:c7:f3:2e:91:62:27:5f:65:
52:8c:e1:d4:56:21:70:5b:cc:76:c6:b2:b3:fb:f4:f3:74:e1:
d3:89:53:c9:ef:c3:e8:3b:a1:18:6d:ca:83:6c:ed:77:24:e0:
c9:b2:0f:5b:91:45:fa:55:0e:7e:51:a5:ab:12:3c:d4:56:59:
4c:a8:24:60:64:10:bc:8b:c7:6e:90:11:c1:a1:bd:db:a1:7f:
0c:bf:e7:c3:a4:e7:6d:14:7b:05:52:52:83:ee:c7:bf:0d:86:
f3:f4:bd:55:0b:ad:17:0c:e5:5e:8c:73:08:e2:75:7c:f8:80:
98:fc:45:39:fe:52:05:7f:6c:54:e5:50:62:d2:bf:7d:de:dc:
c7:fa:15:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:22 2026 by rpki-client