Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
File: bMs_hCGEjxE5UekHCz92OVkzE5k.mft (raw, json)
Hash identifier: +sEl3tdNtMPfxpfyT8h5E0bRfQp1OFM8uR1I4L4KsXg=
Subject key identifier: 3F:17:92:81:B9:E4:2A:D0:37:24:A0:4C:8C:2D:54:F3:5B:90:D4:F8
Authority key identifier: 6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99
Certificate issuer: /CN=6ccb3f8421848f113951e9070b3f763959331399
Certificate serial: 019EBF5B2AB36138DF32BFFE38E2BF3D25FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
Manifest number: 01EE
Signing time: Sat 13 Jun 2026 05:01:23 +0000
Manifest this update: Sat 13 Jun 2026 05:01:23 +0000
Manifest next update: Sun 14 Jun 2026 05:01:23 +0000
Files and hashes: 1: bMs_hCGEjxE5UekHCz92OVkzE5k.crl (hash: 8PuS8+4pkof9k9pJj5Et80NdEsWCJ1ip/zpQmFr1Qug=)
2: bUiH3VbW9e4DGEI6aQ_GDMaBXuU.asa (hash: HiJMoQ+7Z+6mLU3L+V1v5bPyuxJiyPA9eVSUrGC2/Yk=)
3: vWTFnToMRwpADtfp8rKVJDhq4z0.roa (hash: 9KBYCbKq8EeH9dzn6Vsl+J3/PeNavFQcjtRw+/WBxiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:2a:b3:61:38:df:32:bf:fe:38:e2:bf:3d:25:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccb3f8421848f113951e9070b3f763959331399
Validity
Not Before: Jun 13 05:01:23 2026 GMT
Not After : Jun 14 05:01:23 2026 GMT
Subject: CN=3f179281b9e42ad03724a04c8c2d54f35b90d4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:27:f3:9f:7c:3e:1f:a0:ef:67:2d:ae:26:
c1:91:95:52:8f:85:c8:40:b3:5f:57:c4:d8:d7:1b:
fc:82:ff:e7:82:60:13:41:96:cc:16:3d:6f:28:f9:
4d:54:3f:b1:8a:4d:f0:2a:f6:d9:b1:76:07:d9:ed:
df:eb:01:f0:1b:97:a2:15:b7:2d:06:8c:b2:40:4a:
3b:01:94:4d:ef:b2:9a:bb:55:f3:f5:8f:2d:d2:5f:
06:cf:a0:61:7f:fd:bf:d5:14:ef:03:ed:3f:0e:b8:
83:59:1b:71:63:a5:f5:ab:39:ac:af:e0:2a:83:b1:
f7:08:e0:d5:a1:e7:e5:ed:66:61:27:cf:5d:d1:b2:
a8:a5:2b:6b:5a:d5:d0:5b:06:f2:f6:96:04:e4:77:
22:b1:f8:f1:b2:3f:5c:20:75:06:dc:b8:90:03:e1:
69:ba:f7:d2:2b:de:6a:e3:53:1b:f0:20:72:cc:a3:
eb:54:a2:79:38:3b:3d:63:2b:0c:8b:fb:28:41:00:
17:b9:a0:ff:28:1a:e3:3a:c9:82:d7:51:65:e5:54:
d8:4d:dd:8e:32:6b:8e:33:0f:31:4d:6d:e1:5f:e6:
d7:14:ad:1b:f7:f1:df:4e:2d:f2:ea:97:10:76:55:
63:6c:28:1c:55:50:6e:55:88:59:51:b9:8e:90:00:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:17:92:81:B9:E4:2A:D0:37:24:A0:4C:8C:2D:54:F3:5B:90:D4:F8
X509v3 Authority Key Identifier:
keyid:6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c2:e7:d7:7a:fd:7a:2d:ee:ec:21:bf:51:75:eb:2d:68:a1:
f8:64:d5:fa:de:42:67:e4:f0:66:58:34:66:23:72:28:0c:f6:
4c:87:67:bb:a2:7c:ba:8b:26:35:27:3d:c1:98:21:4b:9e:a3:
52:06:72:2d:b5:14:bb:41:2d:0c:6e:43:fe:f5:39:74:be:7a:
6b:d0:7f:c3:f7:e7:e8:89:63:57:e0:ee:1a:43:e6:af:be:7c:
d7:7b:12:81:86:ce:2c:fa:3c:87:b0:99:0a:bf:70:76:5f:6b:
41:8f:19:34:01:64:94:a8:9c:8b:31:83:eb:40:e6:ca:d1:42:
a9:9d:b2:cc:5c:9d:bd:8f:61:a6:cf:80:5b:ac:b4:75:7d:02:
07:93:0f:7c:85:73:09:48:d3:22:24:2e:a6:9d:a4:59:6c:df:
c9:50:78:6e:c7:12:d3:fa:b8:24:f4:19:b8:05:19:77:8d:5b:
3b:1d:7b:f8:db:9e:04:46:fb:64:31:7a:54:bc:1f:72:ba:52:
db:3b:6a:d9:5c:3c:bc:99:d9:ab:32:9f:d9:97:7d:10:8f:8a:
41:64:f0:a1:76:d1:53:f6:ca:bb:7c:41:f5:d9:9c:8a:a9:8e:
7c:b8:8c:2d:4f:80:03:00:12:ff:01:ed:dd:1c:d8:bd:71:df:
59:a6:22:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:39:07 2026 by rpki-client