Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
File: bMs_hCGEjxE5UekHCz92OVkzE5k.mft (raw, json)
Hash identifier: ol4Kl5WrhoyYAiJNuf5w2tlBTRVPpQas1UklOGUOtJw=
Subject key identifier: E5:C3:A9:1B:BB:81:52:06:39:3A:09:BF:3D:71:E0:38:A1:92:48:AC
Authority key identifier: 6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99
Certificate issuer: /CN=6ccb3f8421848f113951e9070b3f763959331399
Certificate serial: 019DA566E2425FEBCEE6B8FB561F1E69A42A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
Manifest number: 015C
Signing time: Sun 19 Apr 2026 11:01:16 +0000
Manifest this update: Sun 19 Apr 2026 11:01:16 +0000
Manifest next update: Mon 20 Apr 2026 11:01:16 +0000
Files and hashes: 1: bMs_hCGEjxE5UekHCz92OVkzE5k.crl (hash: I8UA2v2rDH9tI40YGrQ+0sshACGO5B7SjBzCNFN7pYo=)
2: bUiH3VbW9e4DGEI6aQ_GDMaBXuU.asa (hash: HiJMoQ+7Z+6mLU3L+V1v5bPyuxJiyPA9eVSUrGC2/Yk=)
3: vWTFnToMRwpADtfp8rKVJDhq4z0.roa (hash: 9KBYCbKq8EeH9dzn6Vsl+J3/PeNavFQcjtRw+/WBxiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:e2:42:5f:eb:ce:e6:b8:fb:56:1f:1e:69:a4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccb3f8421848f113951e9070b3f763959331399
Validity
Not Before: Apr 19 11:01:16 2026 GMT
Not After : Apr 20 11:01:16 2026 GMT
Subject: CN=e5c3a91bbb815206393a09bf3d71e038a19248ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:cb:14:ac:8b:01:c2:c2:32:c0:6a:a0:ef:
69:df:e0:56:1c:f0:01:11:e1:03:25:d1:40:a7:af:
51:93:e7:0d:4c:37:67:08:36:b0:a9:78:12:7c:38:
f8:50:37:ed:cc:ae:64:91:b9:7c:3e:de:e3:b4:25:
9d:e3:93:11:01:1b:f7:f8:be:e5:4c:18:59:9b:ce:
43:d3:bb:f2:83:b8:15:f2:17:74:cd:d3:a7:f2:81:
18:63:90:52:90:5b:3a:97:d6:6c:06:e9:19:cc:18:
7f:5c:42:e5:32:a6:08:b6:5a:5a:e6:1e:5c:d5:32:
bb:a7:0e:b6:80:fd:95:51:f4:c6:ec:9f:09:d4:76:
bd:0f:74:f6:b0:96:d9:77:7f:d5:c5:a2:af:01:d0:
62:a3:9c:65:79:c6:88:ed:38:29:ac:1a:98:1c:2d:
94:c5:cd:eb:7a:e4:b0:4a:75:46:5c:a7:2b:f1:b0:
0c:8a:71:cd:d8:d3:fe:f4:26:13:79:7c:b9:c4:35:
4f:f8:f0:43:96:ed:fd:9d:75:7c:95:3f:68:f5:76:
e4:3b:85:32:a8:3b:63:9f:19:be:ed:53:d3:92:59:
c0:b8:fa:ae:f4:72:26:65:3a:31:7d:a8:e6:01:aa:
04:0c:ea:82:42:8b:ce:0c:fe:70:7e:a3:3b:91:18:
ba:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C3:A9:1B:BB:81:52:06:39:3A:09:BF:3D:71:E0:38:A1:92:48:AC
X509v3 Authority Key Identifier:
keyid:6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9f:ee:36:18:fe:60:52:62:d3:86:ff:15:c8:c4:88:c3:9d:
17:26:9f:e0:cc:d7:2a:9c:53:7d:31:06:68:7e:18:70:85:09:
25:2f:5a:dc:ae:fb:04:b6:65:38:7c:f5:d6:4f:fa:91:b7:7a:
49:3b:e1:93:3a:49:e4:c4:b9:01:b9:76:20:96:45:cf:f7:14:
01:9f:ba:5a:d9:5f:d9:f8:a6:43:50:a3:7a:f4:a6:d2:c8:8e:
aa:da:75:00:53:0c:30:7f:c3:b4:0a:6b:82:42:79:6f:cf:05:
d7:9e:0b:c4:9c:65:fa:7d:d4:f1:58:46:7f:a0:30:ee:1d:79:
33:e9:d0:9e:75:ef:ef:d8:be:2c:8a:5b:d5:99:3b:85:c9:22:
d6:f4:2b:27:ea:9a:0b:e2:41:b7:1a:2a:c8:86:ee:12:88:a6:
4d:4c:89:2e:6b:17:97:5d:7a:ba:a3:21:a9:b5:c4:08:58:9c:
3d:59:8e:99:b8:d7:e1:82:29:b9:fd:b6:33:27:3b:21:ce:6c:
47:47:8e:c0:0f:67:a0:ba:ce:db:8d:7f:fa:f9:54:bf:db:b2:
6d:94:36:01:b8:8c:29:05:97:93:18:d5:07:5d:6c:43:c5:20:
ae:fb:e9:5a:8e:54:78:62:b4:80:9f:b7:1a:55:5e:20:5c:aa:
48:cd:f8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:44:47 2026 by rpki-client