Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
File: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft (raw, json)
Hash identifier: VCpyLcsjR7d/MDiOCfM7ic3uqyzZY41VL5fo2/QmlSk=
Subject key identifier: 33:C8:DF:64:0A:D7:2C:5F:C7:1E:28:DD:7F:FE:66:2C:D3:F4:25:49
Authority key identifier: 06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
Certificate issuer: /CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Certificate serial: 019D9CD2122BD97BF337A417ACEBD7843AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
Manifest number: 1594
Signing time: Fri 17 Apr 2026 19:01:45 +0000
Manifest this update: Fri 17 Apr 2026 19:01:45 +0000
Manifest next update: Sat 18 Apr 2026 19:01:45 +0000
Files and hashes: 1: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl (hash: V+mLISk1FmVmqyJaX6Zw+bizNtP2zhEuF/CFJGqZepw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 19:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d2:12:2b:d9:7b:f3:37:a4:17:ac:eb:d7:84:3a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Validity
Not Before: Apr 17 19:01:45 2026 GMT
Not After : Apr 18 19:01:45 2026 GMT
Subject: CN=33c8df640ad72c5fc71e28dd7ffe662cd3f42549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:23:b8:17:79:5d:a1:08:d0:41:1c:7d:f4:1d:
b9:85:b4:a5:cb:48:78:c2:c9:31:23:db:49:87:9c:
6c:13:9b:47:cd:de:a8:1d:bd:b7:7d:e2:9b:e5:f7:
84:c5:f4:d5:ba:bf:7b:34:fc:1f:3b:d8:2e:b5:77:
12:3d:56:3f:7a:a0:ba:26:c0:16:05:41:58:fe:f1:
3c:5b:d7:5d:23:13:16:07:b4:58:30:95:63:56:37:
e0:63:9c:f3:cb:d3:61:e7:78:84:39:f7:d0:35:59:
cf:87:3e:92:b3:35:c4:79:87:e0:0d:27:d6:25:6c:
60:be:d3:2a:8c:8e:a0:e1:f1:06:af:53:07:c3:28:
c3:9e:0d:17:4a:5d:8c:9e:62:b4:1d:e1:7f:a1:c6:
aa:6c:ac:24:ab:d0:d9:98:c6:c6:76:e1:9a:0a:fb:
22:04:3c:dc:4f:0d:49:34:e2:0f:c6:7a:be:45:1f:
a1:dc:52:a9:76:fc:09:a9:4c:df:c9:24:e9:f4:0c:
c2:3a:42:ef:67:78:3f:c1:5d:96:24:af:d3:e6:c0:
a5:b5:c5:cf:f8:b2:12:80:3e:ba:cb:a3:a3:e1:f3:
7d:af:3e:01:8c:5c:74:55:fd:c0:8c:c5:97:23:12:
d0:6a:9a:59:2c:1b:3d:43:54:42:c2:70:5a:c0:9d:
b9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C8:DF:64:0A:D7:2C:5F:C7:1E:28:DD:7F:FE:66:2C:D3:F4:25:49
X509v3 Authority Key Identifier:
keyid:06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b0:d1:0b:ae:9b:57:c7:34:29:1b:0b:43:e8:68:ff:ac:ca:
25:31:8c:c9:56:c2:7f:c7:b6:21:aa:79:f4:90:76:3e:6c:13:
81:15:58:91:1c:48:2b:e2:5f:94:d7:a1:17:b7:0c:13:bf:3c:
75:d6:8a:cd:f5:cc:4a:ce:14:4b:8e:a9:b3:0e:70:82:54:5e:
e5:d1:9a:0c:43:b8:77:44:2c:98:cb:2e:50:ac:2a:c8:ad:09:
18:c4:c7:9a:7c:b0:eb:92:71:78:65:0a:e0:2e:d8:72:c6:33:
13:48:4e:59:89:67:1b:c9:9e:9e:92:bd:33:28:1f:fa:77:0f:
60:38:af:d3:85:14:e8:bf:88:38:72:72:1c:b2:24:ed:e1:88:
a5:61:c5:0f:05:3d:a6:1a:6a:8e:8e:78:3d:51:c6:d1:d9:ec:
f1:ad:e7:eb:23:2d:33:8c:a7:e7:03:6e:3c:75:5e:59:43:33:
1d:d2:1a:9c:f5:25:41:70:54:3b:d5:5a:eb:35:54:eb:9b:6e:
e9:8f:61:45:70:53:59:55:06:21:05:6c:a4:51:c7:33:28:a5:
91:32:0c:eb:91:c4:87:13:ab:05:9b:fd:74:0c:59:c7:6b:07:
1d:bb:16:b7:3c:70:82:a7:04:a1:76:96:71:61:40:8c:86:a4:
cb:26:8b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:05:11 2026 by rpki-client