Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
File: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft (raw, json)
Hash identifier: SiCGiqOZnCqOICh4zqB2Q8rymWZUP/cf4a9fdvrAVAM=
Subject key identifier: A4:88:AF:E0:08:E3:1C:B1:EF:80:DB:93:8D:FA:8B:05:EC:17:0A:65
Authority key identifier: 6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
Certificate issuer: /CN=6ccc7137704b26301917563f2a84671ef6758006
Certificate serial: 019D9C2CAAA775F5842800CC25D97404C03E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
Manifest number: 07AA
Signing time: Fri 17 Apr 2026 16:01:06 +0000
Manifest this update: Fri 17 Apr 2026 16:01:06 +0000
Manifest next update: Sat 18 Apr 2026 16:01:06 +0000
Files and hashes: 1: J6B1NmurBSlkEDodpO862ZEtVnU.asa (hash: vMggm0hPyL6Amd/bf3Z/Hi/LA8ZvGHj5OIPhqcU1OtI=)
2: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl (hash: QcXIQqhWcGoNfXXyaaKOShpmMN7pWheDiKs2LJ6kSu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:aa:a7:75:f5:84:28:00:cc:25:d9:74:04:c0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccc7137704b26301917563f2a84671ef6758006
Validity
Not Before: Apr 17 16:01:06 2026 GMT
Not After : Apr 18 16:01:06 2026 GMT
Subject: CN=a488afe008e31cb1ef80db938dfa8b05ec170a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:27:3e:6b:9e:a2:fd:f3:6a:8a:e0:26:ca:
b2:f7:d3:b8:63:de:fe:dd:2d:33:1f:25:1f:f6:16:
67:fb:78:d2:36:96:04:e0:23:9e:77:cf:0e:b7:c6:
53:d0:96:f6:b1:8e:02:45:fb:21:e2:b1:dd:06:0a:
c7:b0:62:1e:2c:bf:03:34:00:b5:35:1f:39:3b:c2:
2a:9c:90:2b:ec:b5:b0:ed:be:d7:2b:64:b2:a1:d5:
21:50:01:b0:ac:12:02:92:13:0e:6b:46:39:07:b4:
60:c8:f0:f9:7e:66:57:a9:e0:8f:ab:b2:b4:22:fe:
5b:e4:53:04:e0:e6:b8:de:37:8a:02:58:e3:2c:37:
04:5e:a2:59:6c:c8:e9:11:70:be:af:c0:0d:05:23:
d1:4d:93:b6:12:d4:83:78:08:5c:c3:20:2f:a1:b9:
57:c5:b6:47:ea:da:0b:7b:f1:46:f0:30:dd:f4:2b:
23:df:60:a2:32:55:b7:91:10:db:48:07:57:5c:60:
c9:49:6e:07:6a:ab:8c:6c:be:27:64:f0:eb:0c:39:
06:e0:ff:5d:78:4f:df:e8:52:ae:68:cc:d6:35:ac:
23:fa:7e:aa:16:70:84:a0:8b:db:af:aa:c2:66:91:
18:54:5d:9d:23:97:45:85:5c:6c:76:c6:b6:da:72:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:88:AF:E0:08:E3:1C:B1:EF:80:DB:93:8D:FA:8B:05:EC:17:0A:65
X509v3 Authority Key Identifier:
keyid:6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1f:23:95:16:9f:3e:44:50:d7:0b:f7:62:e6:bd:d2:04:13:
ef:ab:14:1e:a9:03:a5:6b:ba:bc:66:0d:b8:97:c0:02:d7:d7:
ab:fa:ee:f5:13:40:e4:c8:a7:df:b0:02:cd:e8:fe:6b:8e:b8:
ff:b4:00:67:28:80:4c:98:83:1e:3f:92:3d:34:09:1f:68:c5:
15:e4:b6:30:a1:db:5e:88:46:29:25:e8:f9:b4:b6:92:e6:f2:
f6:c5:9f:f3:e1:78:f6:0b:f1:35:59:76:48:34:a5:a2:d8:f4:
16:77:a3:78:5d:01:63:9f:d3:68:c8:88:25:3f:b8:11:45:f1:
1a:26:82:d3:36:1b:a0:7d:64:d4:65:76:35:1e:61:16:60:ef:
9a:f0:74:6c:5e:47:33:3a:ac:fa:44:95:c4:77:4a:14:ff:b4:
8f:4b:fe:fe:62:d3:46:b6:ed:b8:09:4e:1c:9f:3d:9f:81:e7:
f5:21:87:1a:36:27:81:9d:f4:10:b9:05:d1:96:28:e1:79:42:
0f:65:34:9e:03:fd:ab:9e:e6:49:2e:ce:10:50:a9:88:46:70:
21:b1:f4:4f:0f:eb:65:e2:4c:ec:34:b5:5f:40:fa:a0:a6:82:
82:f9:0e:09:ff:61:41:67:7c:bb:4e:9d:dc:f2:3a:71:04:12:
ab:1a:00:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:25:38 2026 by rpki-client