Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
File: bmvNHuBBUxK6utqWpbTHNRu8pr8.mft (raw, json)
Hash identifier: odPKuEwEyLuYdY5ISJ3Yp6wt4ZPPpFWwVJeHEFH8c3Y=
Subject key identifier: 52:72:8A:74:50:8B:10:9A:45:10:6B:F6:62:CD:84:14:C9:B9:06:10
Authority key identifier: 6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
Certificate issuer: /CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Certificate serial: 019D273AC350B366CE7E504F18D224AA6F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:00:55 +0000
Manifest this update: Wed 25 Mar 2026 23:00:55 +0000
Manifest next update: Thu 26 Mar 2026 23:00:55 +0000
Files and hashes: 1: 0Q2ZDhlYXlhZ-Frxgj-xgW0EHa0.roa (hash: 0gmvw8A6bQZ9ir/CJYmtz3ioddyiOq8E5vJFtCG6T3c=)
2: bmvNHuBBUxK6utqWpbTHNRu8pr8.crl (hash: 0YoVqydruORr23pJGNQWiVgD4sirxRmzg3jaDgigFtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c3:50:b3:66:ce:7e:50:4f:18:d2:24:aa:6f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Validity
Not Before: Mar 25 23:00:55 2026 GMT
Not After : Mar 26 23:00:55 2026 GMT
Subject: CN=52728a74508b109a45106bf662cd8414c9b90610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:26:33:99:a1:6b:d0:24:04:e2:1a:b6:a5:1f:
0b:a3:47:24:2d:04:46:f1:f4:30:44:13:73:6b:47:
ab:4f:cd:2c:c8:66:aa:6f:93:60:57:e2:38:05:8d:
07:08:0c:24:20:b2:cb:7a:b8:0c:6a:09:02:fb:1c:
a9:55:30:58:57:fb:ef:91:f7:4b:36:a5:ee:61:ab:
34:52:16:f2:01:b4:1b:00:1e:e0:57:cf:a8:e6:82:
5e:42:13:5e:88:89:ea:f9:62:f0:5e:7e:1f:54:c2:
87:c0:a1:40:07:f5:d0:23:3a:96:39:52:f7:68:8a:
11:3d:84:2b:13:01:d2:5d:5f:4d:45:e2:9a:b8:b2:
e5:8a:ed:7c:c2:eb:4d:bc:60:68:4f:c6:11:7c:cb:
de:c4:98:3e:4e:ef:4b:8e:d4:e2:3d:55:a5:e1:4f:
a5:13:af:b9:81:ab:ed:ed:ba:08:dd:08:88:4f:3f:
e0:ba:41:74:6b:3e:c8:c8:19:dc:fa:1c:f0:30:eb:
c6:df:d8:66:ca:56:42:31:e0:7b:2a:0e:32:23:f6:
d4:a7:30:45:02:b8:6c:b7:77:9a:00:c3:f4:8b:27:
24:42:0f:55:a0:e5:b4:07:5f:e6:9c:ec:ea:82:7a:
70:ae:6d:64:e2:f0:ce:a0:d8:d5:a4:79:28:c9:17:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:72:8A:74:50:8B:10:9A:45:10:6B:F6:62:CD:84:14:C9:B9:06:10
X509v3 Authority Key Identifier:
keyid:6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1d:07:8e:06:8a:26:27:67:a8:62:d4:4e:a4:27:bf:b1:fa:
03:a3:3b:5c:77:37:3b:9b:fc:b3:af:5e:b9:c1:9f:11:9e:36:
a3:ba:63:55:c7:61:8f:57:b6:65:84:f5:02:ee:60:9c:ec:54:
1a:6f:f0:ae:36:38:d3:75:af:ba:cf:6d:e0:67:41:02:ab:86:
69:f3:99:da:03:b9:da:ab:87:94:62:df:9c:22:c9:51:71:1e:
b6:8b:ed:84:b2:d5:fc:74:bd:a4:92:a0:ed:2a:b7:c8:95:e0:
aa:f2:20:b8:8c:68:6e:a0:47:d9:ed:51:74:fa:0a:16:85:b7:
eb:10:1b:29:2a:e8:9e:8e:fa:93:49:1a:9c:a9:ae:db:89:55:
25:9d:ba:ed:ea:4a:4b:51:fc:82:3a:f1:b2:10:c8:f9:e0:70:
5d:b9:d6:c5:61:8f:75:e8:5d:11:34:8b:70:dc:a7:f8:03:e6:
ef:61:29:86:70:ed:df:dd:94:4d:e7:be:27:9a:14:38:53:1d:
f1:b9:4c:12:f7:bc:07:2a:64:c8:b4:bf:06:d7:0e:98:11:86:
cc:2e:71:da:bb:39:65:5f:85:73:9a:90:07:8a:42:c6:ff:bb:
97:80:db:bf:18:e1:47:5b:60:3c:b5:93:24:d4:1b:49:2b:54:
63:4c:be:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:59:45 2026 by rpki-client