
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
File: BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json)
Hash identifier: qPTKds9ksaanx7pEI9P+7LAFSEB8K4acHIkfCesWnjk=
Subject key identifier: 5D:3B:96:AE:95:59:10:03:D2:BD:2B:C0:7F:AD:E2:11:4F:1A:6E:0C
Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
Certificate issuer: /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Certificate serial: 019E1CEB3BB00F15480B557E9DCBC8F37D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
Manifest number: 088A
Signing time: Tue 12 May 2026 16:00:38 +0000
Manifest this update: Tue 12 May 2026 16:00:38 +0000
Manifest next update: Wed 13 May 2026 16:00:38 +0000
Files and hashes: 1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: fQHbpRf9/zsHKr6fxil4Tvs+6TsReFhtfxjNq94cUIA=)
2: sclym95paOJdvvvFhr-lWNlhbzg.roa (hash: +sl/bnIFSoKaaf5fH2CcAmUfZuUwLWKTgnEpXZ7dEQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:3b:b0:0f:15:48:0b:55:7e:9d:cb:c8:f3:7d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Validity
Not Before: May 12 16:00:38 2026 GMT
Not After : May 13 16:00:38 2026 GMT
Subject: CN=5d3b96ae95591003d2bd2bc07fade2114f1a6e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:c4:55:f3:95:7c:c5:08:c8:ff:c3:2c:ee:
50:6e:cd:06:56:03:00:40:55:e7:67:5b:3f:76:f3:
8f:54:02:c6:ed:60:e0:8b:80:e3:d7:c1:89:9e:b6:
be:04:b6:84:dd:aa:03:4d:7e:bb:f5:e7:26:2f:79:
47:fa:88:36:c5:38:ad:1e:82:77:b9:00:e7:ec:fd:
e5:dc:d0:0d:4b:e4:3d:5a:55:25:1c:75:cb:ea:6f:
5b:f0:f0:e6:15:f0:7f:a2:05:4f:b6:2b:69:b9:4e:
98:ee:12:37:ec:4e:b7:87:6e:5b:3c:60:48:62:01:
8c:a2:a3:97:29:a7:ac:11:93:cf:91:cd:cf:25:28:
41:5e:a5:26:41:2d:5a:83:97:73:95:61:08:ee:21:
10:f5:83:8d:70:2f:82:0d:2d:a5:74:eb:00:b7:be:
87:27:f6:d8:0b:4e:14:60:40:de:8d:55:7a:a9:e0:
31:79:92:5b:d7:53:64:d7:3b:e5:ee:e9:43:d9:39:
40:07:9c:6f:1c:10:85:04:83:18:f4:5f:6d:3a:ac:
49:73:12:9e:42:95:dd:1b:fb:cb:17:73:bb:ed:21:
46:23:47:ad:57:13:43:b3:29:ab:85:6f:5a:ae:42:
3c:35:4c:d0:d4:e7:55:82:81:71:9b:a9:0e:a0:b8:
31:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3B:96:AE:95:59:10:03:D2:BD:2B:C0:7F:AD:E2:11:4F:1A:6E:0C
X509v3 Authority Key Identifier:
keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9a:61:45:01:d4:55:ac:ad:74:11:0e:22:73:86:a5:5c:84:
c3:da:16:ea:4a:2f:2b:e4:52:85:62:07:a9:c3:7e:f2:9e:e1:
df:32:e8:70:06:fd:d9:d5:33:40:d4:45:42:1d:42:d0:e7:44:
a0:77:9e:45:bc:6d:7e:31:6a:d3:a4:23:e9:69:ca:b8:3d:c9:
fd:31:1c:e7:7e:88:22:f3:3f:c6:20:e4:b1:f1:cf:07:13:0f:
7a:33:db:90:15:5c:d1:69:51:62:00:0e:2a:fd:ac:20:a6:85:
58:64:92:69:f3:23:e4:ab:cb:77:66:ca:7b:c3:2d:c4:9d:14:
26:56:00:a7:cf:a5:ff:2c:b6:25:65:4d:07:da:9b:c0:0f:94:
8c:38:6b:4e:c8:9e:ae:15:48:c0:0a:bb:87:27:91:cb:31:35:
16:62:6c:97:01:90:71:ee:c7:04:24:b7:b9:72:58:a0:e3:1f:
63:69:c9:90:14:3c:0e:68:dd:73:38:64:48:3e:53:89:a0:f2:
d1:cb:0c:11:21:b4:68:fc:6b:d1:64:2f:5d:6f:ad:78:b2:01:
ae:93:c2:6c:dd:a0:f2:b5:27:66:8c:dc:b5:a9:14:15:15:4d:
08:a0:27:b1:c2:7b:e0:e0:27:b5:4e:df:ec:27:0c:b9:95:9b:
af:b6:f2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:56:34 2026 by rpki-client