Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File: bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier: oTz4N4C2tZig8s4vhg9rpOx9Tuzwb6Biy7Gud6l0Mng=
Subject key identifier: E2:17:74:EC:43:81:75:65:F5:00:C3:48:5B:CA:F1:7E:01:F7:6D:82
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer: /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial: 019D28848E45E20F670B17E0D7CB79F57D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 05:01:08 +0000
Manifest this update: Thu 26 Mar 2026 05:01:08 +0000
Manifest next update: Fri 27 Mar 2026 05:01:08 +0000
Files and hashes: 1: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: mu1roVIELQGLI2tB8D1c7/G9rJyfwtEv9jT7ltEVTZU=)
2: oetUUkO4cZ8XU4zZUrbGoYOdszE.roa (hash: wn2OyJ+kz4z5ywBpw9YbEq0aRUfcFISzvLJUM7TfkuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:8e:45:e2:0f:67:0b:17:e0:d7:cb:79:f5:7d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
Validity
Not Before: Mar 26 05:01:08 2026 GMT
Not After : Mar 27 05:01:08 2026 GMT
Subject: CN=e21774ec43817565f500c3485bcaf17e01f76d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:bf:c8:79:a4:51:fb:a9:75:44:46:5f:cb:
22:a2:c4:ee:64:7a:2d:33:d9:b9:b6:2a:0f:ff:ee:
3d:39:b5:81:83:e1:de:fd:65:93:16:28:36:21:2a:
ee:0b:d0:04:43:b6:ea:42:77:5b:9a:ef:3f:3d:b1:
70:08:e5:7e:c4:60:56:c2:df:6e:de:fe:a1:e9:74:
79:c4:63:24:f6:89:ab:54:ce:61:c0:f5:d2:68:89:
c5:98:c8:2b:3a:69:cb:ea:86:97:84:27:ce:a9:51:
61:89:a9:98:e8:9b:fd:32:ca:d4:fd:df:d1:be:56:
a5:89:aa:3c:18:80:2c:6f:f5:b8:a5:3c:18:7f:f5:
45:68:fb:cb:8a:1c:00:b2:e9:1d:d0:1d:01:35:d6:
7e:16:c1:5f:15:56:e8:e4:7d:de:2f:4a:a6:8e:b1:
b2:d0:93:f0:49:c4:fb:f2:65:eb:23:2f:4b:52:93:
80:ee:af:40:16:62:56:52:41:92:d4:f3:28:1e:95:
8b:5d:32:fc:a0:a4:99:09:35:d9:3e:d7:68:74:ea:
e6:23:77:b1:25:a0:8a:b9:2c:82:74:82:84:24:3d:
59:34:80:7d:24:98:96:98:5f:e7:a3:6b:1b:66:e4:
7a:dc:e6:57:03:46:24:c1:8e:4c:c4:5f:95:93:34:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:17:74:EC:43:81:75:65:F5:00:C3:48:5B:CA:F1:7E:01:F7:6D:82
X509v3 Authority Key Identifier:
keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b4:90:af:53:05:cb:e1:d4:48:e8:b8:86:1c:c2:bb:53:0c:
7e:a5:76:a8:de:cf:f6:ab:76:4b:88:fa:6a:fe:ce:38:d2:c1:
48:0d:16:55:3d:17:d0:ea:23:36:04:bc:4c:4a:a8:aa:d5:aa:
f3:5b:a6:19:e6:5a:8f:59:e7:e5:9a:0b:6c:dc:4b:58:bd:d0:
b3:8d:35:48:a9:7e:ec:ac:89:34:e4:c7:c0:56:e3:7e:90:fd:
23:3a:17:70:39:7e:40:71:37:d5:42:5c:34:75:95:06:62:44:
46:18:f2:8c:87:12:2c:9f:00:99:66:76:11:80:da:1e:97:97:
55:0f:9f:77:5b:be:c0:9c:b5:2f:90:8e:a6:50:00:62:3a:56:
3d:ab:c6:98:36:65:8c:b7:36:5d:bb:aa:bf:76:5a:c3:47:75:
f1:c0:ed:67:32:69:d1:2b:aa:63:3e:69:ba:d1:c2:05:a6:bd:
9f:6a:1d:a6:73:2f:d5:82:5c:65:68:11:0f:28:83:b8:49:a6:
e8:01:48:9c:65:3a:a3:c6:b1:75:ff:96:32:e1:96:0f:49:16:
aa:4f:7e:0c:de:d3:a5:a5:78:2e:c7:09:a8:6d:aa:17:e7:0e:
07:dc:1d:64:af:9f:de:0e:0b:bc:3d:d3:96:fa:f6:28:9a:73:
0e:54:69:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:19:24 2026 by rpki-client