
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
File: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft (raw, json)
Hash identifier: 93RQrrruZ4I8YQYzRtvmz4GhSxLsNsQ3cp9ltTXNpBg=
Subject key identifier: 85:87:B1:5B:8B:ED:5D:31:8B:86:83:D6:45:C8:0B:A9:2C:D8:E6:E4
Authority key identifier: 6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
Certificate issuer: /CN=6ccc7137704b26301917563f2a84671ef6758006
Certificate serial: 019E1D911D6DE7D4416A49C04EDBFB7FCF6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
Manifest number: 07ED
Signing time: Tue 12 May 2026 19:01:49 +0000
Manifest this update: Tue 12 May 2026 19:01:49 +0000
Manifest next update: Wed 13 May 2026 19:01:49 +0000
Files and hashes: 1: J6B1NmurBSlkEDodpO862ZEtVnU.asa (hash: vMggm0hPyL6Amd/bf3Z/Hi/LA8ZvGHj5OIPhqcU1OtI=)
2: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl (hash: H3GGnKrz/8at68ORkYBI36EMmVGh/OzwGNRJ6+58oIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:1d:6d:e7:d4:41:6a:49:c0:4e:db:fb:7f:cf:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccc7137704b26301917563f2a84671ef6758006
Validity
Not Before: May 12 19:01:49 2026 GMT
Not After : May 13 19:01:49 2026 GMT
Subject: CN=8587b15b8bed5d318b8683d645c80ba92cd8e6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9b:a3:a5:1f:50:be:2a:67:c0:61:02:ce:eb:
99:a6:8c:79:81:2c:d9:1f:5f:2a:f2:64:3c:10:6f:
54:78:4f:c6:11:fe:a4:de:ea:6f:34:92:cf:f3:4b:
d4:47:53:05:2e:e6:79:83:42:5e:c2:41:0a:f8:34:
a0:5f:5b:bd:cc:67:b7:36:96:a1:f7:b8:ea:8c:e7:
92:db:c3:1d:e5:bf:77:39:e2:41:af:90:05:d1:81:
5a:82:68:02:45:76:24:1b:53:63:81:f2:96:c9:ed:
74:4b:b3:86:52:25:a3:bc:6d:db:37:6a:bc:86:21:
9a:36:d3:99:10:0d:08:9c:8f:44:2d:4c:3d:15:6e:
54:e2:3e:32:8c:57:dc:c3:ae:e0:c1:fe:50:4d:01:
94:86:cd:b5:1c:9b:d5:8d:32:b7:da:82:39:f6:b6:
ad:30:e8:93:c8:58:0a:2a:e9:68:6f:06:95:ba:ae:
7f:5b:89:73:25:10:17:76:4c:3c:67:17:d3:88:2f:
96:fd:fd:df:0a:2c:02:2c:b3:4b:49:36:40:c7:a1:
59:64:2b:c2:ff:44:a3:a6:85:f3:7f:d8:9f:29:68:
48:36:d4:53:f3:d9:73:4c:6a:22:a3:a8:10:64:86:
50:81:65:cc:60:90:82:e0:f0:74:11:af:c6:06:be:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:87:B1:5B:8B:ED:5D:31:8B:86:83:D6:45:C8:0B:A9:2C:D8:E6:E4
X509v3 Authority Key Identifier:
keyid:6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:72:a4:dd:cf:c6:0a:4e:fb:e8:49:ba:3c:57:8c:a1:6d:3f:
03:67:c1:e5:d1:4d:10:39:6d:f9:37:2c:14:fd:41:74:e0:a1:
6c:2d:82:0a:80:af:85:9b:d5:9f:5b:bb:b7:41:03:2c:fb:fa:
de:f5:b1:6a:fb:6c:4f:f7:eb:f6:6e:b3:9c:ec:a9:ca:10:a1:
38:27:cc:35:c9:f4:aa:8f:18:46:74:38:70:47:8c:18:8f:fa:
df:d3:31:00:5c:fd:96:29:ea:a1:72:c8:97:0c:a7:84:d1:b6:
60:0d:9f:37:6d:50:73:66:cc:e7:55:c7:f0:5d:b6:9b:22:c8:
40:2b:1b:54:1e:cf:35:9e:72:a8:99:11:f8:0f:8b:c0:e1:fc:
df:1a:ee:0e:d0:2e:ff:b5:23:5a:52:49:ae:d3:c6:e8:78:d1:
35:31:72:e1:db:84:81:e2:11:39:d5:2b:22:25:c5:5b:62:db:
d1:3d:ba:e0:a5:77:10:d0:ee:34:a6:42:80:8b:2c:36:7c:14:
eb:63:80:f1:23:04:1f:5a:c6:71:93:fa:a2:ef:8d:e3:ec:34:
62:75:51:7f:00:a2:2d:b6:b9:be:3b:ac:bf:87:b6:d1:d1:a6:
ac:76:df:e9:b2:18:46:eb:86:35:16:90:89:95:f3:a9:ff:7f:
83:a0:29:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:27:30 2026 by rpki-client