Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
File: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft (raw, json)
Hash identifier: ihmpUkNUY3NTSNkcfutr9rMIHiYcoD7wtxl3duw6CdU=
Subject key identifier: 0C:C1:56:F2:18:C6:C0:9C:E5:24:5F:1D:D4:76:12:B0:7D:0D:4A:59
Authority key identifier: 06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
Certificate issuer: /CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Certificate serial: 019CAD59F87F40A7675AACE6739B2CAAE7AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
Manifest number: 1518
Signing time: Mon 02 Mar 2026 07:01:20 +0000
Manifest this update: Mon 02 Mar 2026 07:01:20 +0000
Manifest next update: Tue 03 Mar 2026 07:01:20 +0000
Files and hashes: 1: BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl (hash: 7q5NaC99ytarqZyQWwYFrsP62dFWoCv+WdQbpZpB7Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:f8:7f:40:a7:67:5a:ac:e6:73:9b:2c:aa:e7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066ba209c50c02a858b54308c82ae5bf302efaa4
Validity
Not Before: Mar 2 07:01:20 2026 GMT
Not After : Mar 3 07:01:20 2026 GMT
Subject: CN=0cc156f218c6c09ce5245f1dd47612b07d0d4a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:07:d0:a7:f3:3f:27:e1:1d:b5:d6:14:66:
dc:0f:22:03:d6:23:93:7d:0d:1c:c4:04:12:2c:12:
09:57:8c:02:00:a2:7c:2f:26:73:15:90:12:3e:6c:
46:88:29:05:ed:f4:fa:88:40:24:48:58:8e:0b:60:
a3:9a:d1:44:42:1b:30:00:cb:ce:a0:77:09:bd:54:
16:e5:1c:82:52:cc:8b:b7:42:82:63:0a:1d:8d:cd:
6b:d6:2d:ce:b7:6a:06:1c:19:0d:ec:39:7f:ad:fa:
4b:04:9a:dc:25:3b:b9:77:4f:c6:60:1b:44:c7:7e:
ff:be:9b:a2:95:44:5a:af:94:d5:0f:94:d1:d4:c4:
5a:c1:12:17:6f:43:0d:7b:1c:58:de:74:30:96:9f:
42:92:d2:09:09:08:7b:ce:a5:6a:94:b7:4c:18:d4:
c8:9b:9d:b4:da:ca:c1:9b:4b:87:89:79:ae:0a:48:
84:71:5d:8a:fe:60:ce:7a:7c:52:3c:7d:a5:cf:f6:
58:96:7d:17:8a:d6:39:cd:81:f1:ed:b8:35:1b:f8:
a4:76:60:86:be:b4:89:59:80:f6:2a:c9:38:ea:8d:
3e:70:65:f1:c1:a6:f1:9f:0b:43:67:ca:0a:18:d8:
bf:0c:65:e6:e4:de:c9:5a:52:7c:5c:b4:1b:99:c1:
b1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C1:56:F2:18:C6:C0:9C:E5:24:5F:1D:D4:76:12:B0:7D:0D:4A:59
X509v3 Authority Key Identifier:
keyid:06:6B:A2:09:C5:0C:02:A8:58:B5:43:08:C8:2A:E5:BF:30:2E:FA:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3151b8-d8f1-4102-936f-93ffec5c3c81/1/BmuiCcUMAqhYtUMIyCrlvzAu-qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b5:7d:8d:6a:f5:fd:cf:e3:3a:40:e1:db:31:a2:08:0d:40:
8e:88:2b:63:38:6e:47:ce:f7:1e:33:3d:35:46:0c:bb:85:59:
a4:cf:9b:13:08:57:3d:36:c8:d2:77:26:69:b5:73:d2:ba:0a:
07:8e:d8:52:9c:81:4f:27:d5:80:38:4b:28:92:34:e8:da:15:
a8:ad:b2:a5:5e:d7:f6:b8:ef:be:20:cc:6b:a0:5c:44:88:0e:
88:96:e8:ce:70:16:48:5d:13:32:49:ff:11:c9:6e:1c:cd:c2:
a2:d0:c5:72:15:91:e3:62:60:26:4b:df:58:89:b3:20:8d:f1:
b2:1a:3c:09:5e:ea:32:53:41:7c:36:ec:07:4d:27:e1:02:eb:
c2:67:e1:f0:00:3c:49:15:21:49:bc:7d:d5:49:a1:96:ce:46:
49:3a:68:0b:1a:b0:01:55:6e:a8:94:9e:51:3c:cd:11:46:58:
ee:af:95:01:5a:d3:99:84:63:d8:c8:ef:77:c1:cf:16:3c:64:
75:20:81:3d:a8:c0:36:d9:26:ba:ec:fe:c2:b5:91:51:7c:3c:
b3:41:cf:1b:59:5e:3c:f4:80:8b:65:45:75:af:e6:cd:90:f3:
e7:0a:a2:83:8c:77:05:4c:64:56:b8:a2:43:b5:23:81:75:60:
f0:5f:86:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:15 2026 by rpki-client