Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
File: bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft (raw, json)
Hash identifier: afDt6+RjnuOLmL+3Dxh8UyEnwQGQOYEucdP1mnHK6TM=
Subject key identifier: 77:B0:4F:7A:53:C4:D2:5D:8E:AB:E2:2D:37:80:35:19:18:CF:C6:A0
Authority key identifier: 6E:63:D6:D3:12:D6:5E:E4:EA:28:DA:F4:3A:FC:C8:6E:CE:D4:08:0F
Certificate issuer: /CN=6e63d6d312d65ee4ea28daf43afcc86eced4080f
Certificate serial: 019D9A075DA58D967BC9DB93C56F9720902C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
Manifest number: 07C3
Signing time: Fri 17 Apr 2026 06:01:07 +0000
Manifest this update: Fri 17 Apr 2026 06:01:07 +0000
Manifest next update: Sat 18 Apr 2026 06:01:07 +0000
Files and hashes: 1: bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl (hash: cdMuw8q6t3nndnzGkIInbFaWYkboxvRuUUcFylkOmJ4=)
2: zqPQFXRJf74G4JhmRgtWhS_jMk4.roa (hash: ikDZT7vRt5mAD1vPpg5L69iXwnQy7gbLVQl9JYyhzUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:5d:a5:8d:96:7b:c9:db:93:c5:6f:97:20:90:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e63d6d312d65ee4ea28daf43afcc86eced4080f
Validity
Not Before: Apr 17 06:01:07 2026 GMT
Not After : Apr 18 06:01:07 2026 GMT
Subject: CN=77b04f7a53c4d25d8eabe22d3780351918cfc6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:37:7b:6a:5b:3d:bf:79:c3:a9:56:fa:dd:
e8:3e:3f:00:04:74:76:93:64:02:b6:12:f4:c6:00:
e7:0f:b3:4c:91:1d:da:e2:eb:50:46:76:68:0c:bf:
e6:fd:16:89:81:b9:37:00:7e:38:ca:46:0e:31:81:
7c:a9:a2:50:20:99:22:e9:83:69:5c:03:3e:b2:9f:
0c:db:4d:b1:1f:bd:fe:e5:7e:2a:b2:c9:29:71:79:
cc:4d:03:af:1a:eb:5b:06:f4:63:bf:99:a4:ef:a6:
67:00:ca:f4:58:e8:67:2f:13:39:49:e5:aa:97:43:
a2:d0:c9:b6:76:ef:66:7b:2f:0a:8c:7c:7f:13:9d:
9f:67:b1:6e:8a:fb:a0:1c:03:75:be:39:7f:d5:22:
a2:21:d7:44:8e:fd:3f:f3:dc:96:c4:ad:d9:3d:be:
f9:0e:65:db:6c:f1:25:5c:23:53:df:70:0e:94:9c:
8c:04:37:a8:15:81:da:65:b4:36:53:8d:e7:54:11:
5f:2e:d8:ff:5d:06:8d:37:56:2c:4c:6f:e8:84:7b:
1a:ac:17:cd:2d:58:3d:ab:ad:33:a0:31:13:ad:3b:
8f:b1:30:69:25:51:d6:9a:50:e1:b4:36:46:0c:22:
6d:1b:b7:2c:f1:4d:75:35:06:27:bd:55:c1:8f:91:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B0:4F:7A:53:C4:D2:5D:8E:AB:E2:2D:37:80:35:19:18:CF:C6:A0
X509v3 Authority Key Identifier:
keyid:6E:63:D6:D3:12:D6:5E:E4:EA:28:DA:F4:3A:FC:C8:6E:CE:D4:08:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:89:61:8e:b6:9a:e1:2a:30:83:71:12:9c:fb:59:68:63:93:
65:0d:8c:73:1c:5a:a1:86:2f:dd:e4:14:9e:bd:e8:ab:12:e6:
e9:4b:73:43:77:5c:49:64:ed:87:58:90:b7:ff:bd:0d:1f:95:
5f:ce:fd:73:58:a2:e8:be:3d:a8:a6:8b:a8:28:fc:6e:11:cd:
04:82:e8:30:62:bf:f8:81:44:fc:e9:12:51:91:cb:42:8e:b3:
35:68:2b:80:f8:7c:88:1c:b4:b7:67:11:46:9c:ef:3b:41:2b:
47:5e:b2:17:ae:8c:0e:c6:94:8b:ad:4a:e2:c8:a5:06:d2:92:
41:0c:77:7b:48:62:d4:85:5c:bd:95:8a:68:3e:40:36:69:7c:
ee:25:95:4e:e3:63:6b:65:90:32:59:06:cb:11:69:8c:d5:b5:
d9:07:6a:b5:de:33:9c:c2:21:55:59:cd:2b:af:9e:8e:6b:2a:
0c:46:b8:b6:81:46:19:71:0f:f9:09:63:75:db:8e:3b:87:d8:
de:26:e7:27:15:40:39:fc:8b:7d:11:b8:dc:59:22:95:a1:73:
3e:52:dd:f6:f1:0a:2c:25:84:cf:5e:fa:ca:20:68:ef:de:85:
01:db:4b:86:36:63:f9:ea:09:ee:30:9c:60:69:bb:45:33:25:
d2:55:9e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:52:56 2026 by rpki-client