Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
File: bMs_hCGEjxE5UekHCz92OVkzE5k.mft (raw, json)
Hash identifier: 0Ami4L/g3OYGqyA0mLEgqAfo1HMMvStpz4wJc0PSYxI=
Subject key identifier: 0C:B4:E5:53:9A:5F:05:D7:6A:1D:5F:87:52:ED:FB:65:6E:FB:28:DF
Authority key identifier: 6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99
Certificate issuer: /CN=6ccb3f8421848f113951e9070b3f763959331399
Certificate serial: 019E1D2281AA79EB0E26F092AD1457310D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
Manifest number: 019A
Signing time: Tue 12 May 2026 17:01:01 +0000
Manifest this update: Tue 12 May 2026 17:01:01 +0000
Manifest next update: Wed 13 May 2026 17:01:01 +0000
Files and hashes: 1: bMs_hCGEjxE5UekHCz92OVkzE5k.crl (hash: 3CLBsj1dvl6u2N092pzJFHGNaQQcn47V53IgXPJptUA=)
2: bUiH3VbW9e4DGEI6aQ_GDMaBXuU.asa (hash: HiJMoQ+7Z+6mLU3L+V1v5bPyuxJiyPA9eVSUrGC2/Yk=)
3: vWTFnToMRwpADtfp8rKVJDhq4z0.roa (hash: 9KBYCbKq8EeH9dzn6Vsl+J3/PeNavFQcjtRw+/WBxiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:81:aa:79:eb:0e:26:f0:92:ad:14:57:31:0d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccb3f8421848f113951e9070b3f763959331399
Validity
Not Before: May 12 17:01:01 2026 GMT
Not After : May 13 17:01:01 2026 GMT
Subject: CN=0cb4e5539a5f05d76a1d5f8752edfb656efb28df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:19:4c:2c:1f:b7:87:30:62:a3:f0:08:e1:67:
5a:13:eb:d7:98:f3:6e:04:c6:5a:7d:0c:92:fd:dd:
0b:03:2f:e3:9e:e1:e4:5d:c6:89:ed:87:4f:d0:79:
1f:7c:ab:69:f7:42:77:f5:fd:e8:74:b7:fb:40:92:
e7:9a:62:7d:55:30:8b:1b:66:3d:df:34:08:4e:1f:
72:2a:4d:7a:18:81:b1:1d:02:fc:dc:cf:d2:3b:78:
14:79:0a:ff:84:c2:af:b7:5e:b6:31:12:0b:8c:04:
54:59:9c:7e:41:92:80:84:46:cb:2e:96:49:6a:d4:
87:e5:94:7d:c6:a5:1b:0a:f3:34:2d:fb:d6:55:a3:
73:26:d9:52:d3:5c:d5:72:bd:10:74:4f:96:3a:d7:
8f:c0:49:eb:94:a2:55:1e:d5:14:3b:e1:1b:19:6e:
42:3f:f0:78:da:e3:f1:56:64:f2:01:da:cb:3b:6c:
d7:3e:b5:78:10:4d:1a:d8:0c:56:0d:e1:0d:a5:f7:
a1:62:32:f8:a2:34:c5:6e:e9:58:52:64:4e:a5:fc:
7e:79:a1:8c:28:26:fe:4e:90:df:ae:2e:11:96:e0:
bf:98:20:df:34:90:46:c2:29:a9:84:a1:e7:4b:dd:
e4:62:29:f7:2e:b5:11:0c:ba:9e:51:2b:79:72:d3:
71:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B4:E5:53:9A:5F:05:D7:6A:1D:5F:87:52:ED:FB:65:6E:FB:28:DF
X509v3 Authority Key Identifier:
keyid:6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b6:8b:4b:1e:ac:a2:3a:44:9e:e2:29:43:d3:f2:54:75:b2:
63:a1:bc:1c:bc:92:ce:03:9c:52:95:70:8c:f6:56:a3:b7:79:
4b:6c:74:b7:04:b9:fd:f3:b6:27:e7:0e:2e:9a:ac:76:74:0c:
2a:85:11:4e:16:1d:9b:52:09:da:35:50:a3:0a:cc:86:5a:ad:
bd:af:6d:0d:83:78:12:9e:c2:c6:15:51:82:15:02:98:07:fa:
56:ca:c2:c9:cb:8d:40:f6:4d:0d:8e:ee:ac:65:09:e0:a5:ce:
20:19:af:22:5b:dc:b9:ca:df:48:a8:13:0e:55:3e:90:25:76:
92:b1:56:84:f6:fd:89:91:bb:15:53:48:fc:34:65:e3:df:10:
18:8b:5f:f2:8f:13:e3:8b:e2:12:dc:a5:6a:05:40:f6:c6:dc:
c9:ab:61:a9:28:19:11:75:61:47:d9:6b:d4:0d:ca:e0:f9:2f:
f8:ad:14:95:60:08:b3:c6:0d:d1:12:15:33:e6:3d:04:8e:02:
09:7d:83:11:3e:e1:ae:7d:b9:61:1e:29:03:3b:35:c0:95:3a:
73:f2:63:c9:05:7c:b3:f8:0f:b1:b9:e7:23:fa:8d:aa:f1:90:
3b:0e:ef:06:2a:dd:52:26:7b:dc:18:b6:c4:86:a0:c8:e9:5c:
b6:25:7c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:46 2026 by rpki-client