Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
File: bMfzcUDRMXn5pckglknIDDfGpxM.mft (raw, json)
Hash identifier: Cfiq/NwYFaLeAEzmGNpP/bEUsiR2JflvivCB2ufAmg8=
Subject key identifier: B0:CA:22:A3:E0:55:04:A8:EC:DF:CF:0B:8B:F1:00:CF:A3:4B:04:26
Authority key identifier: 6C:C7:F3:71:40:D1:31:79:F9:A5:C9:20:96:49:C8:0C:37:C6:A7:13
Certificate issuer: /CN=6cc7f37140d13179f9a5c9209649c80c37c6a713
Certificate serial: 019CABD92FB7C5F4EEA69BE4DB2EFD878DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
Manifest number: 145E
Signing time: Mon 02 Mar 2026 00:01:03 +0000
Manifest this update: Mon 02 Mar 2026 00:01:03 +0000
Manifest next update: Tue 03 Mar 2026 00:01:03 +0000
Files and hashes: 1: bMfzcUDRMXn5pckglknIDDfGpxM.crl (hash: /dSHetwzFoPha2/JIxp5D6DMNa3awRgqdGcP1MvU/K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2f:b7:c5:f4:ee:a6:9b:e4:db:2e:fd:87:8d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc7f37140d13179f9a5c9209649c80c37c6a713
Validity
Not Before: Mar 2 00:01:03 2026 GMT
Not After : Mar 3 00:01:03 2026 GMT
Subject: CN=b0ca22a3e05504a8ecdfcf0b8bf100cfa34b0426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:44:0d:f0:de:21:84:13:1d:ff:aa:e4:56:
0f:3f:00:00:82:c4:07:54:b8:56:b7:e4:fb:d5:f9:
0d:d1:e4:97:f8:28:5d:46:44:30:53:d7:3b:ce:fe:
53:16:47:56:5a:24:c8:cf:91:8b:f3:76:c7:e6:d0:
6a:a3:a6:df:77:75:dc:8b:7c:96:6c:7a:ea:93:a5:
ee:6e:2b:64:ec:e1:c8:dc:59:29:a1:9f:ea:04:df:
b6:1e:b2:f9:94:da:5b:3c:26:18:f7:4d:d5:18:25:
a3:55:9f:14:1a:8e:69:67:1e:ef:35:c9:6e:2f:f0:
11:9a:6e:e8:c1:a3:bb:aa:e1:4b:7c:29:2b:c7:be:
44:f2:12:3e:f3:60:19:a0:7b:f4:e0:f9:14:d6:23:
74:5f:6d:38:bc:86:f4:68:d0:d6:ce:ad:58:e8:f5:
8b:7b:ac:f1:5f:fc:26:fd:12:39:00:0d:cf:9f:4c:
2e:8a:67:d0:5a:78:99:0f:00:c3:b3:d7:79:c8:ec:
59:49:b0:61:c1:2d:44:3c:a8:41:af:3a:d5:c4:df:
e7:2f:cb:4d:45:db:02:9e:9c:7e:d1:aa:ab:ed:c2:
25:d1:4e:5f:02:43:a3:2f:22:ae:9c:8e:f1:07:1c:
2c:6e:a7:f3:41:9b:58:bd:03:2d:76:a9:da:87:bd:
78:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CA:22:A3:E0:55:04:A8:EC:DF:CF:0B:8B:F1:00:CF:A3:4B:04:26
X509v3 Authority Key Identifier:
keyid:6C:C7:F3:71:40:D1:31:79:F9:A5:C9:20:96:49:C8:0C:37:C6:A7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1c:f0:5b:45:18:8e:f2:5b:ed:a3:47:db:94:8f:bc:b3:8a:
0d:37:59:3c:41:cc:dd:6c:33:36:94:2d:bd:06:e4:e4:8e:45:
15:43:6a:bf:30:2b:73:b0:5e:c4:49:5e:8d:74:68:f9:3b:92:
09:01:fc:24:0f:fd:7f:93:12:f4:70:d2:99:d3:4d:5e:98:51:
bb:52:ac:cc:3f:21:40:ba:ff:59:1e:19:ae:f5:77:81:14:e3:
fb:0a:e3:42:51:c7:c8:4f:32:ed:bd:e3:8f:96:1b:a5:44:47:
c2:f8:52:29:0b:c5:7c:7f:67:5c:1e:03:df:41:b2:12:b6:e0:
6a:5c:c6:dc:6f:b4:aa:c0:bb:20:6f:96:ac:1e:a3:cb:21:a0:
fd:4c:f4:dc:70:5f:96:1f:9e:86:9c:77:ea:76:91:46:8b:cc:
35:02:99:07:b8:56:81:10:28:e8:85:0a:27:80:be:40:1d:b5:
04:d9:ac:d3:18:fd:2b:d7:a4:98:a6:67:81:4d:a3:96:75:8f:
f7:03:0c:1e:c3:ee:af:e5:f3:ee:d8:76:d1:fd:f6:8d:a0:9b:
b4:e7:81:b1:f1:6e:64:f2:d2:36:96:c5:44:a7:22:e7:5c:76:
46:ed:9d:81:68:f4:06:de:78:16:14:43:31:b1:7d:31:9b:57:
40:ed:e9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:17 2026 by rpki-client