Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
File: bmgcJW1nKYHLOc4lynjPIVz06qY.mft (raw, json)
Hash identifier: FzpzUT5RNCMGGFzu7KMC3mAurrKrV7wRYqdMBGw/GR8=
Subject key identifier: FD:43:4B:28:3C:C8:9D:92:2D:18:37:6E:07:DE:CF:A2:4A:6D:37:D1
Authority key identifier: 6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
Certificate issuer: /CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Certificate serial: 019D29CEB8FEE248DD2C17C4D86DD3E448F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 11:01:46 +0000
Manifest this update: Thu 26 Mar 2026 11:01:46 +0000
Manifest next update: Fri 27 Mar 2026 11:01:46 +0000
Files and hashes: 1: YZsSqZ83PZHqITH4YFpFHp-CbNM.roa (hash: QbeDQPWAdsSWd1GvVVV8Ck8/JfIxsYeUNlUaYQgvu98=)
2: bmgcJW1nKYHLOc4lynjPIVz06qY.crl (hash: bqQYVFs2j9T5l0AJqkgI4STkZauKUTDXCuefl7S9PeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:b8:fe:e2:48:dd:2c:17:c4:d8:6d:d3:e4:48:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Validity
Not Before: Mar 26 11:01:46 2026 GMT
Not After : Mar 27 11:01:46 2026 GMT
Subject: CN=fd434b283cc89d922d18376e07decfa24a6d37d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:bb:32:67:ce:66:03:f8:2f:eb:1b:78:35:
02:1c:57:5a:d4:0c:3d:c9:67:23:a8:0b:c0:09:0d:
02:c4:ed:38:2b:83:37:ad:e7:b2:b3:0c:90:0b:f1:
0e:fb:99:53:13:91:85:43:45:29:4e:86:9b:af:6c:
5c:5e:9e:e5:8d:0d:ad:e6:91:c6:a8:c9:6a:49:27:
fd:69:9b:8c:e0:9f:65:38:eb:c3:8f:83:5b:e9:e6:
97:0d:49:f5:08:d8:9d:a3:18:23:86:5f:f3:80:0f:
84:a2:9d:3f:e4:ab:52:a4:b7:e8:60:13:e5:8b:07:
19:49:a6:d5:6b:bd:03:63:46:aa:4b:e2:57:3a:a7:
b2:a2:fa:6f:74:cb:ca:78:f7:76:99:fe:83:a5:6f:
00:ad:30:c4:ea:04:98:43:80:e9:06:1a:65:22:ad:
15:65:ec:71:43:b9:b7:7b:76:d6:bb:50:2e:da:0d:
f1:c0:3b:17:6b:c6:16:c5:3e:9e:5f:38:4e:58:11:
e8:09:b4:9f:24:2f:1a:52:cf:91:fb:1a:6f:3c:28:
ab:9e:06:56:47:90:5b:cb:a0:39:da:a5:b4:a0:1a:
79:6b:97:61:93:ee:4c:8b:cb:57:0b:26:b6:ba:15:
1c:50:60:03:0c:19:58:7f:77:0d:0c:6f:e8:ca:6f:
9e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:43:4B:28:3C:C8:9D:92:2D:18:37:6E:07:DE:CF:A2:4A:6D:37:D1
X509v3 Authority Key Identifier:
keyid:6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f8:61:8c:1d:ba:ee:77:e1:5b:0b:38:7a:3f:13:4f:c4:bb:
da:8d:05:f4:61:c4:ad:d1:09:4d:7d:cd:29:0a:af:45:15:62:
50:d9:e4:cd:b6:19:9d:d1:ac:02:2e:a3:ab:3d:b1:7c:a7:1d:
0f:1f:7a:a2:18:ca:20:49:34:0a:ee:07:34:d5:a4:2f:18:f9:
11:cd:32:a0:a2:da:98:77:c4:25:d7:fa:01:bc:5a:db:71:6d:
d9:b3:4d:32:75:d1:b9:8f:54:16:4f:89:df:27:72:c6:84:2c:
c2:60:c5:9a:c5:b4:7c:78:16:1a:e1:37:67:62:d8:ad:11:9b:
b0:c4:e5:34:a8:bc:e7:10:fd:e2:d9:31:25:5c:5f:75:c3:66:
6b:7b:66:8e:5d:bb:3e:c9:bb:80:58:e4:00:61:11:3a:ed:7e:
b7:c4:1d:7c:51:20:6d:b5:2c:b8:26:30:e5:32:37:0d:2e:59:
cc:89:08:37:29:db:b1:49:53:79:9a:28:c0:b4:db:91:52:94:
2e:b9:33:c8:ae:48:e8:2e:51:cf:af:ee:3d:12:65:5c:1d:18:
28:79:bd:9e:23:4b:ed:ef:cf:7b:1c:f2:85:63:d1:08:75:81:
d2:25:e5:44:a6:87:8e:0c:1c:fd:c2:8c:5f:3c:d1:4f:b1:f7:
29:78:2a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:28 2026 by rpki-client