Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
File: BmNp4nBctDPbBlirZm0ItnsVUdw.mft (raw, json)
Hash identifier: 5W4hQYKmN014VW0vzaS8SNFDHPqdwTuMG2Pi5nPSb84=
Subject key identifier: 2A:E4:E9:91:36:E5:DB:33:05:12:A3:AF:C2:98:07:95:1E:DE:B7:7A
Authority key identifier: 06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
Certificate issuer: /CN=066369e2705cb433db0658ab666d08b67b1551dc
Certificate serial: 019EBFC827F4AB3797EAF2BB48B75B921BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
Manifest number: 187F
Signing time: Sat 13 Jun 2026 07:00:25 +0000
Manifest this update: Sat 13 Jun 2026 07:00:25 +0000
Manifest next update: Sun 14 Jun 2026 07:00:25 +0000
Files and hashes: 1: BmNp4nBctDPbBlirZm0ItnsVUdw.crl (hash: LzsQR4RhkszVFSYEnTtah+vY/LDqYqCd6MAfQ8MSd7A=)
2: M2182yhCWIp3Dr1q8N4Z80xWV3w.roa (hash: IY36SUnI5dTjS3K8jOcIn+WsAvHQBxCsJZS9oy5ygLI=)
3: jYy2uYNL4nb69qr5FWiz-y5I14g.roa (hash: uK2ZzVfws+izj4DF8qyLOr4woZd1HOHCjMW0FZXm+bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:27:f4:ab:37:97:ea:f2:bb:48:b7:5b:92:1b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066369e2705cb433db0658ab666d08b67b1551dc
Validity
Not Before: Jun 13 07:00:25 2026 GMT
Not After : Jun 14 07:00:25 2026 GMT
Subject: CN=2ae4e99136e5db330512a3afc29807951edeb77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:78:27:a9:ad:4f:74:6c:ac:35:d3:d1:8c:
c5:0a:77:40:89:9d:b5:cb:29:c8:c0:3e:19:21:74:
40:b6:22:53:f1:4d:2f:db:92:00:80:68:e5:2c:41:
37:ed:eb:98:1a:46:37:c6:e3:28:4d:f9:de:0f:76:
06:9a:89:af:95:23:19:97:da:bb:65:ab:e7:d1:6a:
cd:6e:3a:65:43:1c:a7:ff:d2:a0:15:fa:b9:02:a3:
37:45:35:e6:05:c7:0d:77:2c:4e:50:6a:54:8c:37:
5b:17:77:fb:7c:94:f6:19:8c:6a:d9:53:e5:4a:c7:
65:d9:24:50:b9:06:1f:5d:7a:1d:a7:a0:97:6d:49:
c3:ef:76:b6:10:51:56:1e:37:28:fd:ef:e4:c1:37:
cb:f4:09:91:e7:86:8f:e6:ee:b5:a7:b5:4d:5c:0c:
e9:47:92:ee:56:fa:97:f1:23:95:a0:55:9a:67:31:
e0:cc:93:db:69:3a:df:03:e9:81:7e:ab:99:d6:04:
ea:40:b3:0d:7b:82:c4:45:6a:bf:08:cc:b0:74:31:
da:2b:c9:51:94:d9:0f:40:14:a0:b0:a4:20:54:af:
5f:80:34:2c:e2:ef:42:ff:75:01:67:9f:42:f8:1e:
1d:a2:a6:c6:0a:8c:0e:5e:6f:d3:92:07:a0:0f:47:
e7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E4:E9:91:36:E5:DB:33:05:12:A3:AF:C2:98:07:95:1E:DE:B7:7A
X509v3 Authority Key Identifier:
keyid:06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:58:59:ad:ae:1a:14:0c:3b:74:51:02:45:a6:9b:46:56:78:
17:6a:52:bb:72:c0:ee:4e:20:bd:28:e8:32:95:14:01:74:ab:
0a:ce:2b:99:d0:b5:40:70:1c:aa:21:35:03:70:85:53:20:16:
23:a0:9e:f8:f6:80:c3:aa:99:8a:ce:a3:3a:1e:f5:7e:13:27:
7b:5c:1d:1e:16:a4:16:2b:fb:87:1f:6a:f9:41:e4:5b:31:30:
1c:56:44:f8:f8:72:50:8c:85:d5:ed:53:00:9a:40:c8:57:02:
f2:e4:78:db:9c:cc:80:24:d8:eb:ec:a0:d9:a0:01:be:17:07:
1c:a4:0c:50:49:ad:12:03:4b:d8:03:7d:cf:5f:37:72:f2:05:
b2:75:1f:d3:24:1b:09:38:c7:37:74:0f:bd:50:cd:3e:cd:3a:
bf:2b:3e:fc:48:27:09:f7:4c:e4:16:7a:f9:1b:0a:37:b0:4b:
02:d5:57:bf:52:00:73:a5:03:5d:5b:ee:f5:2e:c0:00:c3:3f:
be:ee:d8:f5:73:46:81:e9:6c:fa:91:c4:92:18:4e:c9:3e:dd:
13:a6:8d:03:6c:91:57:91:e1:54:0d:e1:10:75:73:9b:30:47:
ed:9d:c7:c1:e6:8e:08:6c:a0:ca:f8:3b:37:fb:74:ff:17:63:
f4:97:04:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:26:04 2026 by rpki-client