Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
File: bMfzcUDRMXn5pckglknIDDfGpxM.mft (raw, json)
Hash identifier: YOw1TPOTRTdIyFMQ0ADkqgtUsHQ2C/pW5oRRzoKHIyk=
Subject key identifier: DF:31:99:CB:11:53:E7:F2:3C:20:1F:FD:31:CD:8D:1F:F6:14:66:81
Authority key identifier: 6C:C7:F3:71:40:D1:31:79:F9:A5:C9:20:96:49:C8:0C:37:C6:A7:13
Certificate issuer: /CN=6cc7f37140d13179f9a5c9209649c80c37c6a713
Certificate serial: 019D9962E0EA23F17558EE99663E33234B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
Manifest number: 14D9
Signing time: Fri 17 Apr 2026 03:01:27 +0000
Manifest this update: Fri 17 Apr 2026 03:01:27 +0000
Manifest next update: Sat 18 Apr 2026 03:01:27 +0000
Files and hashes: 1: bMfzcUDRMXn5pckglknIDDfGpxM.crl (hash: /beQ6fcK/g1ldEs+kpbi2T/W0fe4dHOCWgIINa6Q484=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:e0:ea:23:f1:75:58:ee:99:66:3e:33:23:4b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc7f37140d13179f9a5c9209649c80c37c6a713
Validity
Not Before: Apr 17 03:01:27 2026 GMT
Not After : Apr 18 03:01:27 2026 GMT
Subject: CN=df3199cb1153e7f23c201ffd31cd8d1ff6146681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ef:b0:2d:04:e8:f6:98:65:0d:82:d9:07:71:
91:83:aa:39:f8:a4:c9:fc:77:4f:29:8a:e6:87:d6:
ff:2b:35:91:60:0e:da:4a:cd:88:3a:41:60:76:d3:
61:7d:00:13:a1:b7:b9:62:19:ec:99:62:84:f9:6f:
a6:35:82:f6:01:87:82:54:42:d2:02:c4:15:93:9d:
27:26:33:54:d0:a0:9f:32:ae:59:5c:45:48:8f:49:
1f:b0:8c:a8:d1:57:d2:b5:af:e1:b3:f3:75:48:33:
bc:15:bf:4d:29:dd:5e:4a:9f:a5:7f:a2:ae:03:44:
84:fb:ff:e2:8d:10:44:33:00:8b:40:5c:36:ad:d7:
18:46:d3:1a:1a:8d:39:3f:fe:ed:fb:b3:d5:57:55:
ed:37:db:0c:ab:23:ae:b4:ad:eb:42:a8:cf:83:95:
24:31:47:a1:60:2b:67:a7:32:4d:3e:8a:dc:5d:19:
b1:0b:38:6e:b8:ab:22:9f:85:c4:91:53:ab:fa:bc:
88:08:f9:81:47:ad:c0:d8:2f:a5:f9:39:b1:09:1d:
c0:5f:74:3a:0c:78:81:bb:fe:75:98:fa:8d:ea:ef:
a1:8d:51:60:11:e6:64:41:9e:98:35:69:8a:9c:56:
7b:b8:da:7d:54:90:71:f6:d4:f8:2d:d3:4c:af:b6:
c8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:31:99:CB:11:53:E7:F2:3C:20:1F:FD:31:CD:8D:1F:F6:14:66:81
X509v3 Authority Key Identifier:
keyid:6C:C7:F3:71:40:D1:31:79:F9:A5:C9:20:96:49:C8:0C:37:C6:A7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fe:47:53:31:55:13:04:14:6e:a1:9a:90:e2:e1:40:fb:39:
0e:1a:0e:f5:d6:fc:f8:aa:f1:2f:eb:e1:56:1a:11:10:6b:a2:
b1:2b:32:92:7d:83:2b:36:f9:ff:7b:05:87:17:43:df:9e:5b:
6d:a8:70:ae:6a:cc:84:73:c0:34:a4:d3:d4:5b:f3:96:e5:16:
ee:61:c0:da:e4:0b:ac:29:e5:9b:b3:df:04:20:64:2f:3e:96:
14:b5:fd:43:cb:a9:5e:ea:6a:71:c2:c8:da:10:6f:29:5e:06:
72:9f:31:55:e1:bd:e3:62:90:52:81:6f:25:2b:3c:fa:aa:26:
cc:bd:5d:9b:5f:c2:d3:78:84:88:53:91:d8:dd:cb:88:1a:90:
f6:63:7f:22:9d:8d:7f:b2:df:3e:54:30:ed:eb:cf:80:3c:b7:
1e:cb:4a:79:4a:4a:5c:cf:30:60:b5:80:f7:f8:80:c1:74:9d:
a5:47:b3:17:07:e9:4a:b4:d4:ae:7e:31:6a:ad:75:da:66:02:
84:84:47:60:80:36:ab:4a:98:bf:41:55:7c:08:ac:38:d1:ad:
af:da:fe:f0:ec:51:69:b9:91:54:67:30:16:b7:20:10:87:55:
aa:90:3c:5c:bb:4a:68:51:4a:f5:7a:78:fe:c6:8a:cd:b5:ee:
aa:73:f5:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYuDqI/F1WO6ZZj4zI0sVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYzdmMzcxNDBkMTMxNzlmOWE1YzkyMDk2NDljODBjMzdj
NmE3MTMwHhcNMjYwNDE3MDMwMTI3WhcNMjYwNDE4MDMwMTI3WjAzMTEwLwYDVQQD
EyhkZjMxOTljYjExNTNlN2YyM2MyMDFmZmQzMWNkOGQxZmY2MTQ2NjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3O+wLQTo9phlDYLZB3GRg6o5+KTJ
/HdPKYrmh9b/KzWRYA7aSs2IOkFgdtNhfQATobe5YhnsmWKE+W+mNYL2AYeCVELS
AsQVk50nJjNU0KCfMq5ZXEVIj0kfsIyo0VfSta/hs/N1SDO8Fb9NKd1eSp+lf6Ku
A0SE+//ijRBEMwCLQFw2rdcYRtMaGo05P/7t+7PVV1XtN9sMqyOutK3rQqjPg5Uk
MUehYCtnpzJNPorcXRmxCzhuuKsin4XEkVOr+ryICPmBR63A2C+l+TmxCR3AX3Q6
DHiBu/51mPqN6u+hjVFgEeZkQZ6YNWmKnFZ7uNp9VJBx9tT4LdNMr7bI9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8xmcsRU+fyPCAf/THNjR/2FGaBMB8GA1UdIwQY
MBaAFGzH83FA0TF5+aXJIJZJyAw3xqcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk1memNVRFJNWG41cGNrZ2xrbklERGZHcHhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNzU1MDctNWM1Yy00ODQyLWExYzQt
OGQ1NmRkY2ZhNGI4LzEvYk1memNVRFJNWG41cGNrZ2xrbklERGZHcHhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9hNzU1MDctNWM1Yy00ODQyLWExYzQtOGQ1NmRkY2ZhNGI4
LzEvYk1memNVRFJNWG41cGNrZ2xrbklERGZHcHhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFP5HUzFV
EwQUbqGakOLhQPs5DhoO9db8+KrxL+vhVhoREGuisSsykn2DKzb5/3sFhxdD355b
bahwrmrMhHPANKTT1FvzluUW7mHA2uQLrCnlm7PfBCBkLz6WFLX9Q8upXupqccLI
2hBvKV4Gcp8xVeG942KQUoFvJSs8+qomzL1dm1/C03iEiFOR2N3LiBqQ9mN/Ip2N
f7LfPlQw7evPgDy3HstKeUpKXM8wYLWA9/iAwXSdpUezFwfpSrTUrn4xaq112mYC
hIRHYIA2q0qYv0FVfAisONGtr9r+8OxRabmRVGcwFrcgEIdVqpA8XLtKaFFK9Xp4
/saKzbXuqnP1uA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:16 2026 by rpki-client