Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
File: bMs_hCGEjxE5UekHCz92OVkzE5k.mft (raw, json)
Hash identifier: GI8bKxDR0uCQgc76f4jtsPYGB668BL2UDX0vskJBils=
Subject key identifier: 47:8A:C2:11:FD:A5:56:A6:F5:FA:DD:1E:D9:92:F0:E7:1E:AA:88:9E
Authority key identifier: 6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99
Certificate issuer: /CN=6ccb3f8421848f113951e9070b3f763959331399
Certificate serial: 019FA7BD38C21B71EAD96E7819A95D5E2E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
Manifest number: 0267
Signing time: Tue 28 Jul 2026 08:00:23 +0000
Manifest this update: Tue 28 Jul 2026 08:00:23 +0000
Manifest next update: Wed 29 Jul 2026 08:00:23 +0000
Files and hashes: 1: OniTZJeY2BSA0cvfxsuABJ4v_qE.asa (hash: pHhvpvRyyNpBX/WwUs+RwUflXy5wgKxcBerF2LNMSj8=)
2: bMs_hCGEjxE5UekHCz92OVkzE5k.crl (hash: p2F7X3OUv4SwSZGgVv4zM+lhrAXhwgAXyh74mMlaUoQ=)
3: vWTFnToMRwpADtfp8rKVJDhq4z0.roa (hash: 9KBYCbKq8EeH9dzn6Vsl+J3/PeNavFQcjtRw+/WBxiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:38:c2:1b:71:ea:d9:6e:78:19:a9:5d:5e:2e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccb3f8421848f113951e9070b3f763959331399
Validity
Not Before: Jul 28 08:00:23 2026 GMT
Not After : Jul 29 08:00:23 2026 GMT
Subject: CN=478ac211fda556a6f5fadd1ed992f0e71eaa889e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:d7:09:dc:25:e6:6b:2b:cf:5b:45:66:c0:
6c:88:a1:06:dc:b2:e2:61:a7:fd:44:e2:29:aa:d7:
a9:08:87:0d:99:32:53:33:23:2c:64:64:48:36:fa:
46:99:83:37:53:ff:0c:e4:9a:c5:7c:64:2c:fb:27:
8e:eb:9e:da:91:89:9b:f3:78:63:e0:bd:92:e6:6d:
1d:fe:e8:e6:f0:ea:22:d7:b9:7d:72:c2:18:66:19:
d6:4f:7c:54:b1:30:ef:1e:64:6e:69:af:c3:fb:0a:
17:d1:3b:40:b3:c7:e5:98:c0:9e:be:3c:39:9b:1e:
5b:7c:36:33:38:87:34:04:ba:25:27:e9:0e:db:46:
7d:b9:10:a1:43:85:4e:18:8e:e1:c1:a4:f7:71:d8:
d5:6c:0f:92:a3:72:94:7a:ce:53:93:67:8f:ba:e2:
49:0b:7b:fb:e7:70:a0:73:8b:2c:2a:bf:64:8c:94:
ee:c0:ec:32:8b:17:5f:b6:28:42:f6:ae:a5:81:dc:
4a:85:d7:42:fc:5f:3e:94:85:04:f3:38:97:e0:5a:
c7:c6:eb:7b:82:d0:7d:f6:65:68:72:19:69:06:27:
c7:52:20:f4:79:43:c4:d6:ea:82:c2:94:bb:3e:2f:
16:00:5a:81:0e:13:f2:84:15:c4:f1:c0:b8:26:77:
7f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8A:C2:11:FD:A5:56:A6:F5:FA:DD:1E:D9:92:F0:E7:1E:AA:88:9E
X509v3 Authority Key Identifier:
keyid:6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:79:4e:67:cc:fd:3b:b3:e5:87:bc:39:c7:78:78:18:aa:f7:
49:2c:5c:da:18:e2:4e:a9:00:66:1c:ca:29:de:55:dc:9f:20:
4c:7c:0f:82:17:3c:c7:cf:85:ce:25:fb:4b:69:a9:ba:1b:9a:
f1:82:74:8b:8f:af:d1:1d:56:ce:17:c9:5b:89:c5:92:9d:02:
1a:31:89:f9:ec:83:9f:07:a8:69:2b:50:82:58:59:4c:2f:db:
0a:02:41:a1:b7:29:0d:b6:d4:b5:ef:16:e2:96:d8:3c:65:0b:
04:1f:f6:d9:b9:a7:64:98:9f:1f:27:53:79:d2:e5:4b:37:9a:
c1:5a:36:d9:97:8b:a7:ee:09:96:93:8b:cf:69:ef:95:7b:77:
cd:89:20:c8:83:af:e3:57:59:b3:05:a5:d0:db:ae:59:04:ab:
e8:87:65:9f:0d:7c:57:af:1d:7f:d6:e1:d9:b3:e7:d7:a1:9a:
88:e6:67:9f:e9:72:b0:5d:b4:45:a8:2d:1f:2f:81:36:d2:0a:
85:85:3a:94:65:4d:45:0e:e1:06:bf:b4:cc:ce:ce:39:fd:60:
b4:3c:80:19:cc:68:e3:61:e2:21:9d:fa:62:f9:d1:7a:fd:45:
19:d5:f0:d9:0b:ff:3d:3f:45:3f:9b:00:d9:71:ee:83:16:8f:
46:d6:af:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:24 2026 by rpki-client