Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
File: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft (raw, json)
Hash identifier: nIj2/BvjdsDYdnyv7/QnXvlYp1U5YwT0B8lo3PpSnV4=
Subject key identifier: 36:78:E1:B4:F5:97:FA:ED:E9:5D:09:71:EA:98:7D:11:F6:C2:89:7A
Authority key identifier: 6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
Certificate issuer: /CN=6ccc7137704b26301917563f2a84671ef6758006
Certificate serial: 019D265FE03E2FB08B278090AB849F9D42B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
Manifest number: 076D
Signing time: Wed 25 Mar 2026 19:01:50 +0000
Manifest this update: Wed 25 Mar 2026 19:01:50 +0000
Manifest next update: Thu 26 Mar 2026 19:01:50 +0000
Files and hashes: 1: J6B1NmurBSlkEDodpO862ZEtVnU.asa (hash: vMggm0hPyL6Amd/bf3Z/Hi/LA8ZvGHj5OIPhqcU1OtI=)
2: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl (hash: G15yVkuuy+GBIA/7HrjTB4NgbmUOSKldgXWyRrrUwvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:e0:3e:2f:b0:8b:27:80:90:ab:84:9f:9d:42:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccc7137704b26301917563f2a84671ef6758006
Validity
Not Before: Mar 25 19:01:50 2026 GMT
Not After : Mar 26 19:01:50 2026 GMT
Subject: CN=3678e1b4f597faede95d0971ea987d11f6c2897a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:61:eb:8c:7e:19:27:f9:7b:70:e6:0d:2d:95:
21:61:e8:5c:bf:38:75:60:12:cf:74:42:2f:ce:4b:
e4:7d:c7:d2:5e:f6:91:d1:9d:19:53:35:5a:54:59:
b5:ff:27:b5:d4:9c:a0:97:1e:40:41:60:18:09:4a:
27:58:ce:c6:7c:84:4b:9f:4c:ee:1b:af:d2:89:9f:
c0:49:49:ab:39:59:45:cc:01:a4:4b:c9:15:a5:fb:
8a:02:cd:ba:c5:43:8c:fb:8f:98:ef:28:f8:17:04:
71:6d:d9:5e:c4:4a:e6:25:8b:fa:69:6c:0b:55:67:
81:bf:9e:7f:4c:f7:8d:08:34:f4:fa:ac:b6:80:b3:
c6:1e:6d:1b:02:e6:ba:37:53:6a:03:9d:ea:d1:e5:
db:21:1b:90:4c:0c:ae:80:42:45:df:4e:12:c8:c7:
6e:90:b3:54:a6:73:50:f5:fb:3e:1f:f1:f3:b4:79:
6a:1a:ae:73:76:79:46:56:e2:33:78:8a:4c:bd:11:
c1:85:59:16:72:56:26:14:33:2d:13:14:4b:23:2e:
43:13:84:0c:42:09:09:d5:68:00:37:a5:70:25:33:
31:42:5c:05:32:6d:11:23:9d:b2:ad:9f:3a:58:e8:
86:db:89:72:27:c8:0b:34:2f:4d:69:a5:33:9e:5a:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:78:E1:B4:F5:97:FA:ED:E9:5D:09:71:EA:98:7D:11:F6:C2:89:7A
X509v3 Authority Key Identifier:
keyid:6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7b:16:c8:3b:0f:e6:4e:4b:b4:24:57:48:3f:b0:fe:5b:77:
e7:22:f5:5b:12:b0:a6:15:a8:f6:e8:dc:e1:23:bd:a8:6d:1b:
35:02:9f:c6:74:e5:fd:c2:49:96:7c:a0:a7:71:59:e9:5e:6f:
b1:6c:d1:19:1b:37:b6:24:2e:41:8c:25:68:ec:ca:bc:e6:6a:
b7:58:28:f9:1d:9e:ce:cb:d9:a0:37:f9:8a:e6:87:57:8a:b4:
02:8e:7d:22:5c:ff:2d:ad:62:8c:57:a9:10:78:db:c8:89:ad:
24:77:e4:68:03:51:80:3e:56:36:78:a1:0f:20:52:82:48:d4:
cb:2c:7a:60:2a:06:62:69:a7:f6:20:93:3d:8b:61:55:12:77:
bc:6e:7c:cc:36:89:6a:2e:43:dc:2c:c6:f7:e3:47:eb:6b:5b:
51:ac:b2:12:02:14:ae:5f:21:86:3a:e4:ca:8d:59:39:09:61:
b0:c4:c9:a5:db:db:52:33:20:b1:55:15:7e:66:e2:10:30:bc:
54:c5:6c:af:a2:07:b7:60:d4:5e:fe:01:dc:a7:63:8b:56:de:
e7:d3:cc:cb:59:94:3d:7f:5e:11:5e:a5:d2:55:9d:03:9b:ff:
18:29:de:2f:00:a2:66:b1:96:bb:a6:6e:b7:13:4c:19:9d:32:
06:2a:2b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:25:20 2026 by rpki-client