Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File: bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier: U8cGYvlueVE/JJsLX/2nmSvRdTTvogC8R0E3CggvrNk=
Subject key identifier: F2:F6:FC:76:99:48:36:CE:E8:DC:C5:BD:B3:CE:36:DA:4D:60:1E:67
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer: /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial: 019F927F7A403896D4A84C6B0CC38417F210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 05:00:55 +0000
Manifest this update: Fri 24 Jul 2026 05:00:55 +0000
Manifest next update: Sat 25 Jul 2026 05:00:55 +0000
Files and hashes: 1: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: nxNAbnWVaaRSG7/qPiUdXNgMIbwExFe7SsZ2pcKCpMA=)
2: oetUUkO4cZ8XU4zZUrbGoYOdszE.roa (hash: wn2OyJ+kz4z5ywBpw9YbEq0aRUfcFISzvLJUM7TfkuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:7a:40:38:96:d4:a8:4c:6b:0c:c3:84:17:f2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
Validity
Not Before: Jul 24 05:00:55 2026 GMT
Not After : Jul 25 05:00:55 2026 GMT
Subject: CN=f2f6fc76994836cee8dcc5bdb3ce36da4d601e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:02:d3:d1:bf:4f:5a:f6:cc:ae:ea:3f:5b:
3a:45:92:12:4b:7b:dd:5d:70:04:18:16:b1:a7:00:
78:10:b4:43:1a:c4:00:04:95:b0:7f:cb:13:3b:f6:
53:39:b8:7f:64:3d:26:2e:5c:67:43:ec:93:d9:cb:
09:ed:7b:da:85:8d:95:39:c0:9b:b9:34:29:f4:24:
7c:b3:98:3f:1b:da:1a:ea:53:f9:b8:93:b3:0e:34:
80:e9:e4:7a:66:b5:0d:3c:24:b5:8f:aa:7f:a3:07:
79:c1:fa:8f:35:fd:b2:86:41:c0:33:b3:79:cf:6f:
2f:41:87:aa:6a:c5:b5:9d:52:5d:b1:29:a6:98:da:
03:8d:21:b6:4c:48:41:94:a6:39:96:9c:4b:90:7c:
46:ba:9d:75:e1:f8:d3:d9:03:52:1f:de:0d:79:0a:
86:8e:fc:80:95:cd:cf:5f:39:13:86:e3:d4:91:bf:
0a:d6:29:71:ed:df:14:87:14:91:bd:40:89:f0:0e:
f2:5a:a3:ec:7b:84:52:e4:0f:4b:99:cc:8e:36:17:
ea:45:44:33:33:92:cc:c3:71:4f:45:3c:81:fb:9a:
fa:5a:c9:68:68:bf:ef:8b:05:1c:29:8b:c5:b6:6e:
7f:a0:c8:81:21:88:5e:4a:fd:48:d0:1e:9a:d6:90:
70:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F6:FC:76:99:48:36:CE:E8:DC:C5:BD:B3:CE:36:DA:4D:60:1E:67
X509v3 Authority Key Identifier:
keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:18:eb:58:0b:5e:d6:44:be:1c:6a:0d:5c:ba:b6:ac:d2:a5:
c8:ba:e6:bc:c5:60:d7:20:5d:3a:2d:cc:dc:27:11:e1:0e:bf:
46:04:7c:ae:c1:7d:45:db:15:07:2e:ed:bd:db:23:01:2a:e4:
83:91:fe:5c:37:74:7d:e8:37:03:b4:e7:f3:4e:15:08:68:30:
47:3f:69:d0:14:85:b9:0a:fd:e7:d8:1c:ed:08:39:b9:b1:41:
3c:2b:74:56:b1:ca:93:b1:51:18:89:b7:65:61:f8:cf:3d:34:
c2:3a:be:93:a7:d0:55:60:60:bc:4a:b7:d0:45:f7:0b:aa:45:
6b:7b:17:52:ba:5b:ec:68:32:7d:8d:8f:27:35:ae:ac:cc:e0:
cc:16:1a:54:57:01:47:8d:90:32:39:99:6d:e8:7c:a7:cb:89:
c8:73:53:6c:54:7f:45:b9:0f:e8:02:d1:6f:4a:d4:9e:45:cd:
ca:47:d3:f6:e7:ab:4b:b7:1d:0e:90:8d:c5:ea:aa:9e:bc:47:
ac:24:df:04:28:39:43:17:50:46:0f:98:26:76:4e:d5:ac:dd:
8c:7c:2a:92:97:0f:f4:75:0f:42:8a:37:69:86:17:15:23:c9:
0b:b0:2a:af:52:1f:70:3e:7b:42:d8:27:22:10:38:99:2a:23:
4d:90:a1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:56:36 2026 by rpki-client