Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
File: bMs_hCGEjxE5UekHCz92OVkzE5k.mft (raw, json)
Hash identifier: dByKoNCBVhmaIpJ+m7AcgVTHg3vbQKaxVRvxnQDyCZo=
Subject key identifier: 73:CB:86:FF:1A:A7:BF:AF:1F:8A:C4:31:21:CD:AD:36:56:D0:33:F4
Authority key identifier: 6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99
Certificate issuer: /CN=6ccb3f8421848f113951e9070b3f763959331399
Certificate serial: 019F8EA238A338FA7364ECB1FD401A56921E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
Manifest number: 025A
Signing time: Thu 23 Jul 2026 11:00:23 +0000
Manifest this update: Thu 23 Jul 2026 11:00:23 +0000
Manifest next update: Fri 24 Jul 2026 11:00:23 +0000
Files and hashes: 1: OniTZJeY2BSA0cvfxsuABJ4v_qE.asa (hash: pHhvpvRyyNpBX/WwUs+RwUflXy5wgKxcBerF2LNMSj8=)
2: bMs_hCGEjxE5UekHCz92OVkzE5k.crl (hash: m7pPIiCBpnGbXtn220fztHfF61j/bmiktCGB6PKoMm8=)
3: vWTFnToMRwpADtfp8rKVJDhq4z0.roa (hash: 9KBYCbKq8EeH9dzn6Vsl+J3/PeNavFQcjtRw+/WBxiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:38:a3:38:fa:73:64:ec:b1:fd:40:1a:56:92:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccb3f8421848f113951e9070b3f763959331399
Validity
Not Before: Jul 23 11:00:23 2026 GMT
Not After : Jul 24 11:00:23 2026 GMT
Subject: CN=73cb86ff1aa7bfaf1f8ac43121cdad3656d033f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e2:69:b5:87:0d:a1:ac:58:bc:01:45:65:9f:
f3:5f:0f:1b:78:94:82:da:29:55:b1:a0:00:63:10:
b4:59:e3:02:22:80:7f:4e:7b:0c:e6:63:8b:88:2f:
d7:5f:6c:27:96:8c:56:48:9c:bb:5f:bb:da:bb:0c:
29:87:b0:11:4f:b4:c6:84:84:a1:7f:a8:bc:3d:cc:
a8:16:f6:61:cf:fc:ba:a7:90:c8:84:8c:cd:6d:55:
64:4f:00:d8:d2:fc:d6:27:45:87:e2:6a:f5:25:7e:
11:29:e5:2b:39:d2:73:f9:40:dd:6a:fb:6f:78:6d:
86:6c:57:0f:88:db:0b:95:59:5e:0f:dd:6f:18:f5:
bd:82:f0:76:6c:78:14:d8:f1:b4:d6:a6:99:f8:ce:
fd:2f:d9:a7:f4:13:99:b2:85:7d:e1:af:c5:ac:90:
7d:e4:6c:a1:69:b1:71:89:4b:73:e7:24:43:7b:68:
40:d3:c3:a4:b5:c0:52:60:eb:24:5f:b2:7f:88:fb:
bb:53:d9:99:94:44:2e:33:5d:56:f9:c8:50:d8:84:
8f:36:f3:97:5c:c0:af:7b:b4:24:1e:ca:6b:b2:88:
69:9e:40:a2:e5:31:c1:c9:29:f4:98:81:55:d3:d3:
40:09:60:29:02:c2:77:03:5b:e9:1d:59:03:ce:f2:
39:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CB:86:FF:1A:A7:BF:AF:1F:8A:C4:31:21:CD:AD:36:56:D0:33:F4
X509v3 Authority Key Identifier:
keyid:6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:98:06:a1:33:6a:b6:92:5e:31:61:36:f3:85:83:65:84:6e:
60:bb:f3:7a:29:97:af:cb:86:64:87:3d:2a:cd:68:9a:44:c8:
d8:e7:19:c1:4c:76:26:89:13:8b:66:1a:31:7b:9b:9d:1b:72:
b5:28:d5:09:cf:e4:30:c8:cd:5e:0c:f9:cc:63:9d:e7:85:5b:
10:1b:f0:c5:e3:90:fb:eb:51:3f:a4:bf:39:d9:12:5f:f2:64:
2e:57:e3:a8:bb:43:21:01:6e:26:1c:49:85:5d:05:b9:63:d6:
94:09:01:15:42:24:2c:fd:30:52:ef:97:a9:80:ac:40:3a:d4:
5e:c6:57:56:e7:9a:39:b6:58:90:8f:77:42:da:29:90:14:cb:
69:57:d8:ed:b7:04:b5:3b:59:67:5b:56:9e:16:c2:f9:87:de:
c6:05:e5:b8:1a:08:97:ec:25:6f:f0:b9:54:01:9a:92:0b:b6:
ef:45:4a:07:3b:1e:22:e0:7b:d7:fe:ee:c9:95:e7:a2:89:f7:
d0:c5:14:ba:5f:a3:ad:db:f9:db:80:0a:3a:9a:cf:7d:8b:b4:
44:0e:b8:42:01:e2:79:b5:6c:e8:b9:ea:8e:8f:e4:a1:af:40:
6c:a1:b4:5e:1d:44:23:8a:98:62:66:4e:48:0f:a6:23:f1:e2:
33:7a:ac:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:28 2026 by rpki-client