Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
File: BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json)
Hash identifier: +RmcyVJWIZrbEDSs9w9MIbjrttBMzP4QNBXwtNrO4b8=
Subject key identifier: CA:3E:F1:FA:79:60:99:DD:B6:B2:D4:3E:22:1C:04:71:16:15:AC:05
Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
Certificate issuer: /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Certificate serial: 019FAABF02A575C6A29C1CFD4773B37FB6AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
Manifest number: 0958
Signing time: Tue 28 Jul 2026 22:01:12 +0000
Manifest this update: Tue 28 Jul 2026 22:01:12 +0000
Manifest next update: Wed 29 Jul 2026 22:01:12 +0000
Files and hashes: 1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: HtPHaIqJgT/HM3JOptbPoxh4pbWYd+HPeHHZ+itlrwI=)
2: sclym95paOJdvvvFhr-lWNlhbzg.roa (hash: +sl/bnIFSoKaaf5fH2CcAmUfZuUwLWKTgnEpXZ7dEQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:bf:02:a5:75:c6:a2:9c:1c:fd:47:73:b3:7f:b6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Validity
Not Before: Jul 28 22:01:12 2026 GMT
Not After : Jul 29 22:01:12 2026 GMT
Subject: CN=ca3ef1fa796099ddb6b2d43e221c04711615ac05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:89:40:17:60:9b:0f:00:16:e3:bf:ef:2e:
ec:67:be:6c:d3:be:f9:f7:60:a7:76:3b:ee:52:d4:
42:c1:1a:17:e5:00:6c:11:a4:33:38:91:54:7f:e8:
7c:c6:51:cc:9e:80:05:eb:2c:ec:e3:66:c3:cc:06:
a5:c3:28:c7:1d:47:4e:2b:af:35:eb:4c:4b:a6:f9:
ee:53:da:02:45:33:0a:b1:32:09:cf:83:0f:3a:33:
fa:3d:a6:ce:94:62:fb:6e:ec:58:49:8a:2e:a8:4f:
b7:82:91:ff:cd:59:a8:f1:ec:d9:18:04:35:0a:db:
04:b4:ca:e6:c6:32:e7:32:78:a7:be:cb:c3:a9:3d:
1a:65:6a:12:f7:d6:e6:5e:07:43:95:b7:5c:0d:75:
fd:c3:f5:87:22:05:2b:fa:9f:3a:9b:04:4a:35:21:
d5:60:f3:80:09:a8:3d:81:11:e6:02:62:25:db:90:
b9:c4:63:19:cc:67:3a:ba:19:74:c7:7b:df:f8:b9:
bc:05:b6:19:79:20:40:22:dc:05:df:75:d2:79:58:
c4:de:8d:62:a9:4d:0c:ea:f5:ea:33:5a:14:1f:fd:
58:36:fa:24:ae:84:64:eb:0f:ab:3f:71:0d:6e:8d:
92:71:9c:85:8c:47:8f:e2:94:1a:00:ee:ba:4c:74:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3E:F1:FA:79:60:99:DD:B6:B2:D4:3E:22:1C:04:71:16:15:AC:05
X509v3 Authority Key Identifier:
keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2b:d4:e8:63:46:9c:f4:0b:bd:0c:08:37:09:f4:2d:55:56:
33:a7:2e:0e:08:a5:ac:2c:b5:63:0f:c0:3d:94:17:44:cb:4c:
3b:a9:6e:6d:c6:32:db:7a:a4:9b:e7:94:e8:fb:a9:df:46:a4:
8c:21:cf:8c:db:b0:e6:09:7a:71:96:8a:f1:44:a0:f8:f1:2f:
54:2e:7e:a0:c2:f2:45:35:93:7a:68:57:df:b8:13:68:5a:0f:
c1:9d:fd:da:ca:c8:2f:49:53:c8:ad:83:82:e3:16:90:6f:03:
6e:ff:d9:30:1e:c7:63:19:34:dc:cb:7c:37:ff:f7:ca:73:4f:
6a:49:bb:51:b7:15:dd:79:2a:52:ab:25:1b:df:3c:c3:0f:08:
63:96:9d:41:d8:bc:3d:08:43:75:00:3f:e1:62:d5:63:e3:33:
0e:32:0b:61:fa:c9:44:e3:06:bb:2f:cc:68:a0:cc:4a:32:a6:
64:4e:83:23:b9:81:98:01:63:fe:7a:96:cb:b7:22:d5:eb:68:
ab:0d:f5:43:f2:16:51:65:34:2a:7c:80:91:b4:72:3f:24:60:
a3:a3:65:da:53:5b:46:93:42:7a:be:63:c5:00:a7:35:0d:66:
39:5a:03:de:1e:16:5f:4a:1e:17:9a:13:8c:21:53:22:a8:a2:
cc:98:2a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:52:31 2026 by rpki-client