Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
File: BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json)
Hash identifier: 3nQBy9HxDb/M4jHouaT8T1mtgL5NPyjHjK3Iw9tP8e8=
Subject key identifier: 69:D0:84:C8:D9:37:88:89:41:19:E9:55:DC:66:F7:55:E5:23:78:8E
Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
Certificate issuer: /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Certificate serial: 01A0D2373403A134433C4B55613FD0B2D956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
Manifest number: 09F1
Signing time: Thu 24 Sep 2026 07:00:28 +0000
Manifest this update: Thu 24 Sep 2026 07:00:28 +0000
Manifest next update: Fri 25 Sep 2026 07:00:28 +0000
Files and hashes: 1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: WNoL8pdHg57fbuO5sfu7wMXVrLuvHttltsltGVRf1fQ=)
2: sclym95paOJdvvvFhr-lWNlhbzg.roa (hash: +sl/bnIFSoKaaf5fH2CcAmUfZuUwLWKTgnEpXZ7dEQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:34:03:a1:34:43:3c:4b:55:61:3f:d0:b2:d9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Validity
Not Before: Sep 24 07:00:28 2026 GMT
Not After : Sep 25 07:00:28 2026 GMT
Subject: CN=69d084c8d93788894119e955dc66f755e523788e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:64:17:70:95:90:b9:58:9f:96:79:6a:d7:
c7:88:67:0d:37:72:2c:56:2d:6d:e5:9d:2b:49:9c:
16:1d:b5:dc:a6:0b:30:90:6e:b9:3e:bc:f1:fd:9d:
90:9f:6d:65:db:ac:d8:6f:49:3f:a9:6c:43:a5:35:
6f:be:c2:14:5c:2b:ee:0e:07:32:3a:4d:1c:86:43:
a3:92:f9:47:e8:a7:f0:2e:d9:1e:11:07:22:51:e4:
fd:a7:d0:e9:93:a9:44:30:b0:ba:dd:6a:ac:5c:1d:
14:58:14:e0:2c:e5:fd:5a:1f:7c:61:e1:ae:68:35:
f3:c5:4e:7d:57:6c:16:66:7e:73:d9:09:e4:86:3b:
84:70:bb:bb:3d:53:c3:85:cb:e3:bf:6d:7a:04:26:
29:3e:e2:b5:62:9f:dd:69:88:97:87:8c:9c:0f:de:
54:3f:f0:28:27:8c:f2:ce:c8:02:66:ff:36:19:49:
98:43:a4:87:26:d6:e8:22:61:7c:5a:78:ea:8e:e7:
a4:a1:e1:96:35:8b:cf:7a:5e:fe:22:8b:99:a5:80:
91:7b:9d:89:46:2a:b7:99:86:15:82:e4:92:6d:32:
5c:77:11:c6:45:22:24:4a:29:29:79:02:35:e3:d7:
aa:4b:0f:df:19:8a:17:25:00:e8:4f:7d:5a:1d:3e:
a2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D0:84:C8:D9:37:88:89:41:19:E9:55:DC:66:F7:55:E5:23:78:8E
X509v3 Authority Key Identifier:
keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a6:83:25:bb:a5:64:70:9b:c2:47:f8:8a:e5:97:1e:37:7c:
14:ee:30:50:9a:c5:8d:dc:f3:46:fe:4c:7e:99:f1:ea:51:9f:
df:e1:02:f6:db:7a:c6:d6:25:48:85:d8:2c:6f:ac:ae:fc:e8:
e5:cd:38:f1:8f:ba:f8:4f:82:54:86:8b:01:80:68:4d:57:91:
86:ef:0d:f8:a6:39:65:42:27:99:90:fd:55:37:c2:57:35:f2:
e2:1d:03:cb:4c:eb:d2:5d:c4:59:c1:63:b2:0b:ba:2d:85:6a:
42:4c:7c:23:fe:4e:fa:03:c4:f7:43:ca:a3:3b:0a:49:1b:d9:
5b:05:9c:ed:f2:18:b0:fa:d0:17:21:d7:37:00:e0:d8:42:b1:
92:14:7f:34:dd:6c:e8:f1:cf:8e:46:55:0f:06:5e:55:14:27:
b1:45:64:f7:27:54:3d:ad:89:d9:2e:06:d6:5e:06:fa:59:a1:
7e:97:62:d7:ab:6e:08:05:53:11:a4:42:dd:27:96:1b:99:51:
8e:e9:5f:9c:49:8e:a0:23:5a:1d:1b:b7:3e:0e:a0:b5:45:6a:
76:8e:1d:f2:4d:8a:8a:d5:36:45:05:81:1e:bc:79:6c:14:ef:
bf:58:9f:64:f9:22:75:af:52:9c:0f:09:c1:76:9c:0d:db:fe:
cc:3e:06:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:07:16 2026 by rpki-client