Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
File: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft (raw, json)
Hash identifier: SYQGOtmRYqom66YDFxukSH6zRw4PKhpVcOqng3f81FQ=
Subject key identifier: 9D:F8:08:23:68:C8:EF:80:12:6D:2B:43:6F:36:C6:D7:0A:78:D8:37
Authority key identifier: 6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
Certificate issuer: /CN=6ccc7137704b26301917563f2a84671ef6758006
Certificate serial: 019CACB5626B59BCBE6B43276CCEB4647C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
Manifest number: 072E
Signing time: Mon 02 Mar 2026 04:01:34 +0000
Manifest this update: Mon 02 Mar 2026 04:01:34 +0000
Manifest next update: Tue 03 Mar 2026 04:01:34 +0000
Files and hashes: 1: J6B1NmurBSlkEDodpO862ZEtVnU.asa (hash: vMggm0hPyL6Amd/bf3Z/Hi/LA8ZvGHj5OIPhqcU1OtI=)
2: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl (hash: 9sYPdp2q5ksuCdx0VPWEuhPpjtNv/enn4sL1bIEev3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:62:6b:59:bc:be:6b:43:27:6c:ce:b4:64:7c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccc7137704b26301917563f2a84671ef6758006
Validity
Not Before: Mar 2 04:01:34 2026 GMT
Not After : Mar 3 04:01:34 2026 GMT
Subject: CN=9df8082368c8ef80126d2b436f36c6d70a78d837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:f1:07:81:f4:c7:03:0d:0c:27:d6:eb:fe:
30:f5:c1:1c:e5:70:63:2d:03:c4:bc:85:c3:38:99:
7b:5d:9e:4d:50:62:8c:48:6e:f9:90:91:9b:4e:38:
cb:3a:aa:06:ed:28:d3:22:14:0c:83:ec:4e:12:ff:
bb:6f:87:1e:a9:e4:fd:a1:0d:60:5d:a7:39:28:9d:
70:6f:c7:cd:c1:69:e4:9a:6e:38:b6:98:1f:4d:7b:
c0:cc:22:bc:cb:7f:f0:9f:bb:a9:89:ca:ac:ae:3c:
e2:78:c0:25:0e:3c:a4:1b:f9:d3:6c:d0:f6:fc:ef:
a2:8f:90:ff:06:99:34:0b:c4:a1:df:0c:07:42:c8:
c6:5f:e0:d2:e0:a4:6b:6b:dd:95:11:ad:8b:a7:ef:
25:9e:03:16:ef:0b:25:fa:55:f8:11:94:70:c7:a9:
31:4f:f4:6b:eb:47:9f:88:d9:e4:5b:f0:a7:e4:bb:
f0:ca:6e:02:87:24:fc:2b:97:80:d0:85:57:98:94:
c4:a9:33:0a:ee:44:cc:0c:8f:c5:ca:df:f6:ab:12:
db:9e:b3:81:8f:d8:31:c3:2b:06:37:3d:f6:13:f7:
82:91:99:86:f0:ed:cf:e6:ec:71:38:c8:e4:d8:48:
78:aa:78:9c:bf:27:9f:23:d0:ac:6c:de:1c:d5:6c:
55:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F8:08:23:68:C8:EF:80:12:6D:2B:43:6F:36:C6:D7:0A:78:D8:37
X509v3 Authority Key Identifier:
keyid:6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3c:56:0b:79:ed:6f:b0:06:07:22:95:84:9d:95:f2:64:09:
dd:6f:e2:bb:dd:7f:e9:7c:5e:f2:ab:6a:fb:f6:a4:b8:a6:6d:
54:f4:75:90:d7:d3:f8:92:73:24:50:a8:91:98:47:b7:63:39:
1c:59:ee:45:df:df:96:54:89:2a:63:b0:4d:ca:ff:a2:ea:94:
7b:3c:56:b8:02:49:3c:56:6c:70:ca:8d:e0:66:73:84:f0:e8:
b1:63:9c:6b:d3:83:9c:a5:a4:a5:1f:91:b3:86:fb:2f:5b:61:
99:de:db:66:e4:70:c2:44:7f:d5:70:54:7f:c6:07:d7:83:06:
bc:b9:28:3f:35:7d:f9:4a:49:80:80:4c:d8:3d:34:59:3b:f7:
3f:4e:3d:d5:3b:9a:5c:ef:f9:9d:de:44:f8:74:e7:ef:6f:71:
e3:18:d9:02:cb:86:a9:f8:c9:de:af:97:51:22:21:ea:b4:ad:
a3:57:89:2c:d5:7a:98:c1:b2:7d:18:f7:fc:4c:55:24:02:1b:
33:28:9a:d3:3f:cc:8d:f2:5d:70:91:9a:4b:07:5a:1c:ea:b3:
f3:52:93:3e:a0:45:e7:2b:39:08:44:c3:e6:72:a3:fd:97:22:
48:05:3c:a5:48:0b:10:b1:97:83:7c:3b:0e:9d:11:4d:56:02:
1e:e7:21:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystWJrWby+a0MnbM60ZHwiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjY2M3MTM3NzA0YjI2MzAxOTE3NTYzZjJhODQ2NzFlZjY3
NTgwMDYwHhcNMjYwMzAyMDQwMTM0WhcNMjYwMzAzMDQwMTM0WjAzMTEwLwYDVQQD
Eyg5ZGY4MDgyMzY4YzhlZjgwMTI2ZDJiNDM2ZjM2YzZkNzBhNzhkODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE3xB4H0xwMNDCfW6/4w9cEc5XBj
LQPEvIXDOJl7XZ5NUGKMSG75kJGbTjjLOqoG7SjTIhQMg+xOEv+7b4ceqeT9oQ1g
Xac5KJ1wb8fNwWnkmm44tpgfTXvAzCK8y3/wn7upicqsrjzieMAlDjykG/nTbND2
/O+ij5D/Bpk0C8Sh3wwHQsjGX+DS4KRra92VEa2Lp+8lngMW7wsl+lX4EZRwx6kx
T/Rr60efiNnkW/Cn5Lvwym4ChyT8K5eA0IVXmJTEqTMK7kTMDI/Fyt/2qxLbnrOB
j9gxwysGNz32E/eCkZmG8O3P5uxxOMjk2Eh4qnicvyefI9CsbN4c1WxVuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ34CCNoyO+AEm0rQ282xtcKeNg3MB8GA1UdIwQY
MBaAFGzMcTdwSyYwGRdWPyqEZx72dYAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk14eE4zQkxKakFaRjFZX0tvUm5IdloxZ0FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lOTcxMjAtNDIwOC00YWNjLWE1NGIt
OTJmNTIwZTQ2ZTg4LzEvYk14eE4zQkxKakFaRjFZX0tvUm5IdloxZ0FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9lOTcxMjAtNDIwOC00YWNjLWE1NGItOTJmNTIwZTQ2ZTg4
LzEvYk14eE4zQkxKakFaRjFZX0tvUm5IdloxZ0FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDxWC3nt
b7AGByKVhJ2V8mQJ3W/iu91/6Xxe8qtq+/akuKZtVPR1kNfT+JJzJFCokZhHt2M5
HFnuRd/fllSJKmOwTcr/ouqUezxWuAJJPFZscMqN4GZzhPDosWOca9ODnKWkpR+R
s4b7L1thmd7bZuRwwkR/1XBUf8YH14MGvLkoPzV9+UpJgIBM2D00WTv3P0491Tua
XO/5nd5E+HTn729x4xjZAsuGqfjJ3q+XUSIh6rSto1eJLNV6mMGyfRj3/ExVJAIb
Myia0z/MjfJdcJGaSwdaHOqz81KTPqBF5ys5CETD5nKj/ZciSAU8pUgLELGXg3w7
Dp0RTVYCHuchvQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:56 2026 by rpki-client