Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
File: bMs_hCGEjxE5UekHCz92OVkzE5k.mft (raw, json)
Hash identifier: OcNWrBfYTmVkxUX1mF3zIAsi5E1QpxCI90S5wVJK+B8=
Subject key identifier: FD:B8:A5:EA:07:F5:9D:66:6E:A7:FC:40:03:29:1C:80:DB:57:A2:98
Authority key identifier: 6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99
Certificate issuer: /CN=6ccb3f8421848f113951e9070b3f763959331399
Certificate serial: 019CAC473B460586964BC8289823D2796B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
Manifest number: DB
Signing time: Mon 02 Mar 2026 02:01:15 +0000
Manifest this update: Mon 02 Mar 2026 02:01:15 +0000
Manifest next update: Tue 03 Mar 2026 02:01:15 +0000
Files and hashes: 1: bMs_hCGEjxE5UekHCz92OVkzE5k.crl (hash: /F3om47duSOw0CbZwVP393m81cCe2hQ5CD3ogyr0ClM=)
2: bUiH3VbW9e4DGEI6aQ_GDMaBXuU.asa (hash: HiJMoQ+7Z+6mLU3L+V1v5bPyuxJiyPA9eVSUrGC2/Yk=)
3: vWTFnToMRwpADtfp8rKVJDhq4z0.roa (hash: 9KBYCbKq8EeH9dzn6Vsl+J3/PeNavFQcjtRw+/WBxiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:3b:46:05:86:96:4b:c8:28:98:23:d2:79:6b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccb3f8421848f113951e9070b3f763959331399
Validity
Not Before: Mar 2 02:01:15 2026 GMT
Not After : Mar 3 02:01:15 2026 GMT
Subject: CN=fdb8a5ea07f59d666ea7fc4003291c80db57a298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:d4:96:cb:ee:9f:31:66:af:3d:23:cb:c1:
66:1d:e3:0e:a1:7a:d5:b5:e1:04:08:0f:b9:71:a8:
b9:ae:61:ec:ec:4e:ee:e3:4b:1a:76:1b:ef:3b:d7:
3c:3c:39:2a:58:9f:79:63:2d:80:c3:c7:ff:c8:73:
da:5a:ea:7b:de:3e:f2:1a:61:0e:bb:a3:7c:15:74:
d9:34:2a:89:d4:e3:94:c4:0d:e5:81:0d:ad:b0:9a:
ab:3f:8d:5e:8b:eb:0c:3d:45:99:41:c5:4a:65:0f:
d1:2d:d0:4d:45:b3:db:29:45:97:10:3d:65:cb:26:
9a:7d:b6:c3:d8:85:01:b1:d4:19:83:c3:0d:70:69:
76:22:64:9e:c0:1c:82:83:57:69:72:4d:eb:5f:47:
3d:74:60:dc:0d:48:e8:97:1a:87:2c:ab:67:88:dd:
c6:ec:5a:b6:41:a5:27:cb:b7:fe:dc:54:21:7e:85:
06:55:15:36:ce:2d:06:36:a2:02:d3:bb:02:41:e1:
03:13:1f:27:1c:6f:fb:c3:fc:9f:7e:d9:59:cd:1a:
6d:ba:94:3e:94:92:68:76:cd:1a:a5:97:05:c5:d3:
9b:3c:4d:a9:34:a6:de:a4:7a:94:c6:3c:13:5f:70:
11:5e:0b:7b:9b:34:97:c6:20:8c:4d:f3:b1:aa:b4:
d2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B8:A5:EA:07:F5:9D:66:6E:A7:FC:40:03:29:1C:80:DB:57:A2:98
X509v3 Authority Key Identifier:
keyid:6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d7:58:11:d6:16:f4:59:e7:37:65:69:1b:12:9a:e8:36:7e:
3b:1f:c6:f4:e1:1f:bd:65:2d:fa:3c:3e:9a:4e:f1:9f:e6:c7:
8b:4b:a0:a8:42:7d:15:74:be:ee:29:8e:48:52:7b:f4:18:a7:
52:33:32:5f:f4:74:70:87:f9:b3:4a:cc:b9:84:03:78:ca:a8:
67:69:b8:01:dc:e6:92:65:bf:d0:9c:cd:3c:bb:74:80:e5:56:
76:0e:a8:e0:4b:d3:fd:4f:8b:d9:06:fa:61:70:96:d0:5b:76:
0a:ce:bd:f3:fd:b2:35:b4:cb:06:dc:cb:b1:4c:fc:1f:b3:98:
9e:8f:fe:b0:79:b5:28:9f:da:d6:a5:e5:e4:5d:ca:dd:95:30:
ef:d1:15:45:d0:23:0e:ba:33:cd:e8:e0:2c:c0:9b:34:90:6f:
20:01:e9:61:37:aa:aa:a9:d4:7b:0c:28:12:18:bf:4a:a9:66:
02:6c:6f:0b:fd:00:84:e1:ae:33:3b:81:f2:b0:f8:ec:61:35:
1f:6a:00:6d:78:6a:3b:a1:c6:99:0d:71:24:f6:ba:86:c8:04:
c1:be:83:d7:45:e4:91:0b:01:aa:2d:de:c0:f9:91:38:6c:e1:
a0:38:09:ff:1c:bc:43:18:90:05:16:7a:53:dc:df:60:f3:0b:
b9:93:d5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:52:04 2026 by rpki-client