Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
File: bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft (raw, json)
Hash identifier: QEw1/rRbK8JQOtbtPEPyMgSXiN1VyC3N9IdfC/jLsaY=
Subject key identifier: 8B:E3:F0:53:8F:AA:84:21:BA:4F:BD:D4:52:AB:9C:67:D0:12:B4:09
Authority key identifier: 6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
Certificate issuer: /CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
Certificate serial: 019D292941CE1BA217F7C8AA5D71491A9E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
Manifest number: 07D3
Signing time: Thu 26 Mar 2026 08:01:02 +0000
Manifest this update: Thu 26 Mar 2026 08:01:02 +0000
Manifest next update: Fri 27 Mar 2026 08:01:02 +0000
Files and hashes: 1: bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl (hash: P1XNQiVI+A7egxuQgiqccMmluDqSXikxNXzihG7hEPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:41:ce:1b:a2:17:f7:c8:aa:5d:71:49:1a:9e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
Validity
Not Before: Mar 26 08:01:02 2026 GMT
Not After : Mar 27 08:01:02 2026 GMT
Subject: CN=8be3f0538faa8421ba4fbdd452ab9c67d012b409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:21:82:ea:9f:45:9b:39:81:68:05:88:f2:
9c:01:89:92:ec:c2:28:76:b3:d9:be:5b:af:75:d7:
c5:7d:de:7f:29:a1:0e:4a:e4:9e:9b:c2:d1:bd:e2:
7e:6e:a8:ae:46:04:e6:17:05:2a:b3:d4:f2:d4:29:
a6:00:98:ac:54:cc:62:21:03:54:8e:cb:fa:75:f6:
c0:a0:03:ea:f9:96:93:ef:74:03:12:4e:78:b7:b1:
53:7e:5b:65:2e:2a:c1:53:73:b6:c7:db:d4:29:11:
02:ec:3c:0f:4a:3b:6f:7a:64:b1:ac:18:4b:11:32:
a4:1d:19:9a:1e:d2:14:70:4d:b1:dd:c8:fc:6b:82:
06:c8:f2:fa:54:a4:3c:87:3e:30:81:30:27:9e:9d:
69:0c:d8:e1:4b:02:61:d6:8f:94:10:04:af:7d:5d:
db:59:0b:9f:d1:de:37:09:fc:76:3f:0c:ee:da:27:
97:f7:b9:b7:d6:f3:34:cb:ea:e6:13:04:66:77:ee:
b9:e0:6c:92:16:7a:60:2f:e6:2b:00:07:3d:b3:a4:
15:27:89:68:b7:83:6e:e2:6f:be:4b:39:33:93:d0:
ae:a7:52:f0:c6:a0:2d:fa:fe:f2:49:8d:2e:33:50:
f3:07:dd:2b:34:44:f2:53:02:bf:29:c7:a7:05:8a:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E3:F0:53:8F:AA:84:21:BA:4F:BD:D4:52:AB:9C:67:D0:12:B4:09
X509v3 Authority Key Identifier:
keyid:6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:52:7a:71:3f:a8:1f:d8:da:44:5f:9c:58:df:18:30:c0:1a:
c5:fd:df:7e:8c:34:ac:74:0a:d3:8e:60:22:7a:10:ce:de:c0:
ae:5f:26:90:03:59:9e:60:2c:c5:7b:4b:d4:ac:91:fd:18:51:
08:14:36:a5:9f:f1:29:1a:21:eb:44:44:dd:ff:5a:d7:a6:4c:
5f:d7:a8:2d:0c:55:4f:b8:5e:92:0f:0e:a4:5e:80:b3:28:b9:
e4:2e:f7:a6:eb:0a:ee:09:ca:23:ff:bb:1b:a9:4d:f5:91:10:
74:df:89:97:b1:c1:07:5e:91:b5:5c:a3:9e:3f:fd:00:4d:c4:
85:51:5f:eb:5c:51:be:a1:1c:40:5e:d7:bc:aa:7c:3d:c1:30:
68:dd:21:5e:70:e9:f6:be:bb:fb:84:57:e8:05:e8:2c:e4:30:
71:3e:a3:80:82:3f:51:1f:5d:38:4d:f7:59:c5:47:84:b5:4c:
09:df:6e:da:62:16:02:db:51:1c:fd:c4:c9:a5:a0:4a:60:42:
43:11:aa:e1:a3:12:6a:2a:d8:06:f6:f9:f8:e2:6c:e4:a9:14:
b5:bd:9d:a0:3d:5b:8b:2d:b6:48:32:62:07:fb:48:e0:40:83:
41:4d:34:d6:7c:b4:c9:a9:56:69:b4:82:05:ef:23:48:d3:1c:
03:d7:d5:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKUHOG6IX98iqXXFJGp4mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNjhjMWI5MGU0NWY5MWJhYjhkNjA3ODhlZWQyNWNiNGEw
MTBmZTgwHhcNMjYwMzI2MDgwMTAyWhcNMjYwMzI3MDgwMTAyWjAzMTEwLwYDVQQD
Eyg4YmUzZjA1MzhmYWE4NDIxYmE0ZmJkZDQ1MmFiOWM2N2QwMTJiNDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreghguqfRZs5gWgFiPKcAYmS7MIo
drPZvluvddfFfd5/KaEOSuSem8LRveJ+bqiuRgTmFwUqs9Ty1CmmAJisVMxiIQNU
jsv6dfbAoAPq+ZaT73QDEk54t7FTfltlLirBU3O2x9vUKREC7DwPSjtvemSxrBhL
ETKkHRmaHtIUcE2x3cj8a4IGyPL6VKQ8hz4wgTAnnp1pDNjhSwJh1o+UEASvfV3b
WQuf0d43Cfx2Pwzu2ieX97m31vM0y+rmEwRmd+654GySFnpgL+YrAAc9s6QVJ4lo
t4Nu4m++Szkzk9Cup1LwxqAt+v7ySY0uM1DzB90rNETyUwK/KcenBYpQtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvj8FOPqoQhuk+91FKrnGfQErQJMB8GA1UdIwQY
MBaAFG5owbkORfkbq41geI7tJctKAQ/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm1qQnVRNUYtUnVyaldCNGp1MGx5MG9CRC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmFjYTEtZjU1Ny00MTA0LWI1ZmEt
MTc0MDYzMGZjYzQ1LzEvYm1qQnVRNUYtUnVyaldCNGp1MGx5MG9CRC1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYmFjYTEtZjU1Ny00MTA0LWI1ZmEtMTc0MDYzMGZjYzQ1
LzEvYm1qQnVRNUYtUnVyaldCNGp1MGx5MG9CRC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFJ6cT+o
H9jaRF+cWN8YMMAaxf3ffow0rHQK045gInoQzt7Arl8mkANZnmAsxXtL1KyR/RhR
CBQ2pZ/xKRoh60RE3f9a16ZMX9eoLQxVT7hekg8OpF6Asyi55C73pusK7gnKI/+7
G6lN9ZEQdN+Jl7HBB16RtVyjnj/9AE3EhVFf61xRvqEcQF7XvKp8PcEwaN0hXnDp
9r67+4RX6AXoLOQwcT6jgII/UR9dOE33WcVHhLVMCd9u2mIWAttRHP3EyaWgSmBC
QxGq4aMSairYBvb5+OJs5KkUtb2doD1biy22SDJiB/tI4ECDQU001ny0yalWabSC
Be8jSNMcA9fVSg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:20:52 2026 by rpki-client