Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File: bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier: 2T7cZCpv9W7ruLTIo530Z0R4Nq2gr9ysrItU8k8XH28=
Subject key identifier: 7E:38:B8:B7:D8:96:BE:3A:79:DA:51:17:C9:41:28:1A:10:F5:5E:01
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer: /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial: 019CAAFCF9F111C0CFA53C697BB032E75C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 20:00:31 +0000
Manifest this update: Sun 01 Mar 2026 20:00:31 +0000
Manifest next update: Mon 02 Mar 2026 20:00:31 +0000
Files and hashes: 1: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: /wSfF7+dzgxSexsKOdgUQrqX6UxWd7dUmXssiJ1/a6s=)
2: oetUUkO4cZ8XU4zZUrbGoYOdszE.roa (hash: wn2OyJ+kz4z5ywBpw9YbEq0aRUfcFISzvLJUM7TfkuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:f9:f1:11:c0:cf:a5:3c:69:7b:b0:32:e7:5c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
Validity
Not Before: Mar 1 20:00:31 2026 GMT
Not After : Mar 2 20:00:31 2026 GMT
Subject: CN=7e38b8b7d896be3a79da5117c941281a10f55e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:dc:f3:b4:1e:11:36:5d:30:ab:6a:ec:8c:
a6:d6:31:3b:33:a7:05:dc:87:a4:15:6e:72:0d:af:
d9:a7:5f:b1:80:d2:af:09:9b:8e:73:b5:b7:5d:58:
1f:54:4f:92:db:da:a5:7c:70:79:c0:bb:ee:bb:ed:
50:47:a9:c2:cd:69:ae:72:73:fc:e7:4d:ea:30:85:
73:05:8f:42:6c:ec:8e:b3:ff:d6:9f:ea:67:48:14:
95:59:c9:95:9a:6d:5a:11:f0:27:ad:8b:83:1b:9a:
33:6d:50:ee:5b:77:a2:ae:c5:48:51:84:a7:ac:a2:
e4:f3:10:2a:76:b4:65:35:19:11:ae:24:ac:70:a3:
af:14:4e:78:59:54:bc:77:95:3d:96:f3:21:b5:1d:
37:1a:9a:71:d2:b1:a0:8b:75:cf:34:47:d5:cb:6c:
ea:a8:b0:61:64:3a:5b:c5:a4:b0:fc:8f:a1:71:54:
fe:8c:bf:6d:f6:c1:f4:b4:04:d7:d5:3e:ce:32:26:
27:cb:4d:cf:c3:7d:cd:46:64:68:29:60:61:9f:f7:
ca:0b:cf:7b:fc:da:25:35:f8:e8:36:7e:41:c0:3b:
61:9f:73:78:ae:0d:94:5d:08:ee:2d:70:12:04:0d:
29:a2:e9:a5:89:92:08:9b:59:f1:99:c7:a9:af:ca:
a7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:38:B8:B7:D8:96:BE:3A:79:DA:51:17:C9:41:28:1A:10:F5:5E:01
X509v3 Authority Key Identifier:
keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ab:7b:e8:eb:8c:d0:5e:be:29:91:08:c9:84:05:c9:d6:29:
86:91:1e:d3:dc:3d:bb:db:ea:cf:7e:b5:d4:8b:ca:c4:f9:be:
ed:52:37:2c:f6:43:d3:36:37:c0:fc:2c:e2:a1:1f:10:2b:6a:
70:80:1e:2b:20:74:6a:84:70:fb:45:ce:31:d2:5c:2d:e5:69:
da:cd:1f:0f:37:37:92:da:34:15:9b:1a:71:52:5b:a5:0f:c0:
d9:b4:61:7d:54:88:5b:e5:69:23:23:4e:01:69:df:41:8a:b3:
c0:00:f4:32:18:22:b8:dc:30:98:7f:08:e9:f2:1c:7f:17:88:
68:65:70:3f:c6:75:34:a6:c1:9a:12:07:5c:88:ed:d8:1e:ce:
2b:37:05:5a:9e:79:39:69:1e:7d:e5:ae:4c:7d:81:d6:a4:7f:
99:03:e9:24:4f:e5:67:97:63:90:b4:fc:6b:0b:d4:19:4b:5e:
26:92:c5:6e:02:2b:09:8c:fa:78:d7:f1:55:a8:b9:53:9d:f7:
b4:e5:a2:16:c5:75:0f:7e:12:9a:58:45:e1:72:46:2b:8b:6d:
71:25:4a:c2:0c:be:78:a9:e2:f0:d8:bb:31:1c:14:5a:4d:5a:
cd:00:45:27:3d:b1:c0:c4:3e:90:de:69:6c:97:9b:c2:9c:96:
58:5c:e6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:52:11 2026 by rpki-client