Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
File: bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft (raw, json)
Hash identifier: +nKDpzyj0ZY5EvYpwklAxElQOiiqUIGwsQTuEoTcAUs=
Subject key identifier: 8D:28:05:F9:B2:28:FC:3F:C5:4B:A0:88:E6:4D:71:F3:B7:DB:67:FB
Authority key identifier: 6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
Certificate issuer: /CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
Certificate serial: 01A0EF66F0FF18C9A46F6AD510FA25E5667B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
Manifest number: 0737
Signing time: Tue 29 Sep 2026 23:01:35 +0000
Manifest this update: Tue 29 Sep 2026 23:01:35 +0000
Manifest next update: Wed 30 Sep 2026 23:01:35 +0000
Files and hashes: 1: YDy6wLds96Yf3zX0RUfnfXQDw5Q.roa (hash: 86RzS+pw/jn2zDtIOdA8fDYlhM/9zcSkfL4mjAAa2B4=)
2: bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl (hash: k2E6U1YITqSPgQW7qbA1/ZY51a/3qy9XSN7MCdG8JiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:66:f0:ff:18:c9:a4:6f:6a:d5:10:fa:25:e5:66:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
Validity
Not Before: Sep 29 23:01:35 2026 GMT
Not After : Sep 30 23:01:35 2026 GMT
Subject: CN=8d2805f9b228fc3fc54ba088e64d71f3b7db67fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:ab:ca:78:9a:5b:2b:9b:ad:e6:41:f4:03:
fc:cc:dd:e9:fc:71:49:f1:6b:bc:6d:2e:8e:14:7f:
d4:9b:ff:56:bb:26:cf:26:c1:0f:6d:fe:0a:dd:df:
16:7e:e5:96:9e:75:78:b0:e9:00:11:2a:22:f2:2c:
6a:24:0e:25:b4:42:ba:16:a1:98:cd:56:1d:61:e0:
7f:09:61:22:66:82:82:c5:c3:8b:23:32:ae:ec:e5:
c5:4c:54:38:fb:f7:8a:98:e6:32:a7:64:76:53:a8:
a2:a9:48:3f:30:2d:3f:80:20:e1:31:e2:f0:62:1a:
7b:0d:16:d4:76:f4:af:59:d4:df:95:df:ac:73:5f:
9f:0f:cf:7f:ba:a0:97:79:dd:d0:2a:65:3c:a2:f0:
ef:a8:8c:fc:61:ef:76:b0:b1:37:cf:66:77:66:d7:
71:9e:ab:a1:4a:fd:49:40:a1:dc:9f:da:c1:fb:4c:
ff:95:69:99:ca:0f:98:1a:87:f7:85:51:01:38:ff:
a2:06:fd:ae:20:1e:e7:ed:3a:e4:65:fa:db:a0:5d:
37:ed:3f:d4:9d:d6:14:ea:b3:e5:65:2e:b0:27:75:
6c:12:c5:8e:89:5d:1c:cc:8f:ff:cb:0e:94:ce:71:
50:b5:98:a0:3b:49:89:a2:f2:cd:03:22:20:6c:42:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:28:05:F9:B2:28:FC:3F:C5:4B:A0:88:E6:4D:71:F3:B7:DB:67:FB
X509v3 Authority Key Identifier:
keyid:6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:77:38:d8:cd:86:69:fe:b9:0b:14:b1:d5:e9:1b:f8:cd:6d:
b3:bd:44:72:1c:db:df:ae:54:d2:f4:1f:b7:13:88:14:1c:bb:
f8:94:46:ac:7c:9f:35:2a:2a:94:71:0a:3c:f3:71:53:89:50:
b4:3d:aa:8d:e7:0e:e9:ba:98:6b:07:21:ee:3a:b7:1a:0c:e1:
be:21:86:e4:fd:a7:a3:22:b2:20:84:c4:2a:ae:d2:2c:4b:a7:
1d:17:2a:3c:f7:f0:1e:f1:6b:e1:9d:70:60:7d:c4:6d:49:b0:
e1:6f:36:43:e7:e3:e6:f2:57:06:61:17:12:45:17:d7:0b:aa:
a2:79:aa:ce:ee:86:cd:46:8e:c0:61:a6:e3:42:f3:fd:9f:85:
e4:c5:c0:1b:74:d9:fd:e9:89:7a:21:a8:d5:dd:f1:82:1d:b9:
b4:47:01:ef:e7:bf:99:06:5f:3c:cd:b4:9b:ef:58:69:18:46:
fb:f0:cf:12:1e:ad:82:5d:0f:51:c7:bc:43:a1:57:48:a9:16:
db:4e:80:0b:e8:85:2a:0c:06:b4:f8:27:63:07:1f:e4:a8:16:
b6:13:9d:9b:01:7f:c0:4d:f3:54:e0:e6:0b:9a:2d:6f:a3:47:
a3:3a:e8:06:82:24:fa:b7:97:ef:97:be:19:ba:b2:10:cf:99:
34:d6:5a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:00:21 2026 by rpki-client