
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
File: bMacPXAwzsGfj7ZuVDveZVlXCKI.mft (raw, json)
Hash identifier: a5GZasAfljgPShd7usdcVpsRkMkGZRj0IRGR8sasf60=
Subject key identifier: F5:3A:8C:80:73:A5:28:C6:68:97:53:D8:8C:C4:E5:7B:4F:BE:90:66
Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Certificate serial: 019E1D222E2600EACC4B82DB9B2A5E326BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
Manifest number: 0A06
Signing time: Tue 12 May 2026 17:00:39 +0000
Manifest this update: Tue 12 May 2026 17:00:39 +0000
Manifest next update: Wed 13 May 2026 17:00:39 +0000
Files and hashes: 1: 1-rh5cQILjFfbLEs23MyIQmyJVyQ.roa (hash: cy/25YJD+0xNPHLeegsn8NowYywyoOpwQdx6/S7h4V0=)
2: EKOknUpftnx0Q7axH9neRzx4NSA.roa (hash: n+4PMTNbAHk9TtNsZ242IVt0Y1GiuJ2mxezao/gIwZc=)
3: _A6QNXxL5haXYGnIWjTWFpFJgfw.roa (hash: wBYoGVK+AJbrNsBKUYrwucKaBV6UAGbmCu6gl1XSKOY=)
4: bMacPXAwzsGfj7ZuVDveZVlXCKI.crl (hash: tJcFLk/9wJYtuJWB2qnHNhTScXvbFEL+D6MNUnxWkSo=)
5: kS6P0-FBRVMuVdEEV02vD8TDiUc.asa (hash: Xqodnxc0/+vizlkl7MttnkM6knf6ZdTRjpzArx0o9nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:2e:26:00:ea:cc:4b:82:db:9b:2a:5e:32:6b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Validity
Not Before: May 12 17:00:39 2026 GMT
Not After : May 13 17:00:39 2026 GMT
Subject: CN=f53a8c8073a528c6689753d88cc4e57b4fbe9066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1c:5f:3c:5c:3e:76:5b:dc:9f:87:41:bc:cf:
bf:24:a2:0c:06:27:7a:88:59:f8:ab:06:46:a8:01:
e0:71:3a:c9:ca:8c:7d:74:33:f3:e8:b0:b9:b1:d9:
4c:8b:d9:e1:0b:9a:bd:fd:0f:d5:4f:10:c5:41:b0:
c4:d8:24:7a:0a:c6:62:41:73:f3:da:b9:a9:33:ec:
9c:24:4e:92:5d:3d:d1:b4:a7:a9:3b:94:99:11:0c:
3c:fc:d4:96:65:b6:d8:bf:86:7c:58:df:2a:68:f7:
2d:e5:15:67:a8:e8:4a:d7:17:98:d0:3d:32:d4:f7:
f4:32:2b:80:95:4c:cb:a5:8b:28:76:f2:72:4c:92:
49:54:e2:a9:ff:15:13:79:3e:35:13:01:fe:8b:00:
ef:9b:ec:18:87:f6:0c:27:cd:16:2f:f9:0c:54:b9:
8a:68:8c:01:a6:24:29:40:3f:bf:c6:a0:15:c7:2a:
56:9d:c6:5f:20:7c:26:29:db:3b:98:e8:3c:08:5c:
21:f9:d0:62:ae:6f:fb:a5:29:c3:b2:75:46:06:f2:
29:01:5e:ca:48:8e:ef:46:01:d2:b2:87:e5:1d:03:
ef:a6:6d:04:31:95:a4:df:15:c4:cb:ab:7d:64:b6:
63:c4:d9:d3:59:01:f7:7b:1f:f4:65:b7:7d:29:62:
b1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3A:8C:80:73:A5:28:C6:68:97:53:D8:8C:C4:E5:7B:4F:BE:90:66
X509v3 Authority Key Identifier:
keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ef:b8:dc:05:db:5c:fd:01:34:37:3f:f3:79:22:af:2e:4d:
f3:f0:6f:95:72:b5:bf:30:76:57:f0:22:58:82:92:aa:c1:26:
ba:09:8c:d4:e3:2e:70:cd:17:52:a2:d4:fc:56:85:d2:81:bc:
6a:b9:17:5b:84:17:15:d5:a5:01:72:b1:1a:16:20:15:09:ee:
f3:d8:a1:87:01:e8:b0:bc:86:10:ee:ad:7a:6c:1c:76:0a:b6:
ac:30:33:4b:96:28:17:cf:6d:ff:9d:01:b6:e6:c9:c3:c3:0e:
1c:67:a9:de:bc:2f:66:b2:6d:25:84:56:0a:8c:3a:62:0a:47:
9a:ab:5e:de:69:14:72:76:e4:41:f3:4c:17:0c:a1:5f:8a:6b:
91:79:75:1e:6f:03:21:0f:ad:88:8b:4b:af:18:2a:4e:2e:8c:
61:22:05:36:a7:ef:28:71:4b:d3:1b:b6:29:5d:65:07:e5:4e:
cf:50:8d:50:c4:12:d5:98:aa:5e:a2:14:6b:f8:8c:58:83:e0:
c9:0e:0c:35:47:80:3b:43:67:e5:e8:8a:84:76:5e:d3:cd:9a:
a3:3a:6c:d3:d9:c2:07:5e:5e:fd:8c:34:86:53:ea:fe:fb:d7:
39:65:27:70:5b:49:15:ab:fe:23:22:20:87:cf:9d:9d:8f:d7:
a4:23:65:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:00:55 2026 by rpki-client