Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
File: bMdYWreoPsgLVauVe_N7eR52UBY.mft (raw, json)
Hash identifier: 5wAleoQPjcDMd6vWPRgKYV+3//0jsfitB8JaHmny9Mo=
Subject key identifier: CC:3E:1B:7B:8D:1E:B7:57:C2:71:D2:B8:44:EF:25:6D:B3:57:0D:60
Authority key identifier: 6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
Certificate issuer: /CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Certificate serial: 019CAC4702AD4F71AC39814C9943158F983C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
Manifest number: 15B2
Signing time: Mon 02 Mar 2026 02:01:00 +0000
Manifest this update: Mon 02 Mar 2026 02:01:00 +0000
Manifest next update: Tue 03 Mar 2026 02:01:00 +0000
Files and hashes: 1: bMdYWreoPsgLVauVe_N7eR52UBY.crl (hash: Hf9kiz+wTbDAZAhAz6onkOx85ZfJL9irXqUhYZR4D3Q=)
2: e51r6d8MY0z0wgESUl_beU3OIIY.roa (hash: NKb+xyyt/CtCVFv1JVTrUrEnFhYCHL7jXn1hVp8rZ4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:02:ad:4f:71:ac:39:81:4c:99:43:15:8f:98:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Validity
Not Before: Mar 2 02:01:00 2026 GMT
Not After : Mar 3 02:01:00 2026 GMT
Subject: CN=cc3e1b7b8d1eb757c271d2b844ef256db3570d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:4e:85:bb:aa:a3:ff:9c:4c:b9:c9:de:97:
1d:8a:ac:04:fe:a1:ef:17:96:5d:31:a7:b5:73:e7:
e5:77:b5:69:30:39:c3:46:bc:02:9e:f5:05:5f:b8:
b1:24:19:80:ce:18:0c:97:eb:c0:03:ec:ae:e9:97:
cb:e7:ec:5d:bf:4c:2f:9c:61:76:cd:22:a7:b4:12:
b2:1b:31:8b:9a:d5:f4:cc:65:d8:2d:69:76:33:6f:
ad:48:fd:af:b1:ff:82:bc:74:b3:16:1d:c5:2c:f5:
e0:f9:91:aa:f2:9a:14:3c:56:3a:0b:85:c9:ef:2f:
90:c6:7b:9a:04:87:c8:00:23:3a:71:23:e1:4c:80:
cc:f7:5c:7f:c8:15:dd:66:70:bf:62:2d:56:5c:ea:
c8:6c:60:c5:17:76:ab:eb:c9:51:cf:31:70:8c:6e:
04:06:23:7f:73:7c:65:cd:09:b8:cd:7c:1c:e7:59:
87:ab:18:d2:46:15:7f:de:50:19:af:8f:ff:7b:27:
ed:1f:b9:f6:3a:cd:d0:3c:98:85:a7:85:cc:0b:dc:
92:ab:8d:e8:ce:d8:50:5a:ac:35:b4:e1:c9:32:1b:
38:fb:8b:4b:0d:85:1f:cf:83:67:57:aa:69:b7:e1:
04:f0:5f:d3:68:a9:8a:e9:21:12:fa:49:15:33:92:
1c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3E:1B:7B:8D:1E:B7:57:C2:71:D2:B8:44:EF:25:6D:B3:57:0D:60
X509v3 Authority Key Identifier:
keyid:6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f9:11:0e:e1:af:48:d7:b9:a5:43:55:5d:3c:0a:af:a0:13:
e9:61:35:e7:db:e4:eb:7c:cb:c5:9a:9f:2f:67:49:2f:01:28:
92:b1:16:2e:16:f0:20:b4:29:0b:c4:42:fe:5d:53:2a:c2:92:
aa:51:3c:15:dd:be:6c:9a:b0:77:53:ad:c4:6b:61:47:ed:90:
09:0f:b3:23:b3:eb:0a:af:16:13:1c:b1:e9:9f:6c:69:8c:b8:
4d:a7:bc:ef:54:56:7e:1b:99:9f:93:28:88:d9:11:14:f6:18:
b1:62:61:e6:60:b7:04:a0:51:b4:c6:79:d6:14:82:ec:b6:13:
5c:42:20:82:45:63:8f:a4:6b:06:05:27:f7:0a:a6:e5:ec:70:
31:cb:c1:ba:fe:d8:e9:f9:b9:2f:a8:f9:e8:74:da:8d:08:43:
47:c2:36:c3:dd:0b:b1:33:fd:84:54:01:89:08:f5:08:46:1b:
89:a5:72:36:5b:b5:ec:0e:3d:78:1f:21:c2:84:d3:c8:f9:60:
02:c4:de:4f:88:a0:13:5b:a6:68:d6:96:60:d3:ca:91:b1:11:
6b:c6:d2:2f:05:85:14:de:f0:7e:d7:07:bb:69:3c:57:b0:58:
db:4b:9e:f5:d9:7a:57:70:d0:2d:48:f8:73:3e:a5:e2:1f:64:
76:bc:ce:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:32 2026 by rpki-client