
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
File: BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json)
Hash identifier: 2WBSN/SHoRQHBZzV6qxMRN3clOGblgBsgtwfOoFEnYQ=
Subject key identifier: 57:2C:1E:AC:59:B8:CE:A4:F4:8B:CA:91:A3:E4:8C:D8:5C:89:96:4B
Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
Certificate issuer: /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Certificate serial: 019DA340D5076CD3C164C7BC6144A3B52BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
Manifest number: 084B
Signing time: Sun 19 Apr 2026 01:00:28 +0000
Manifest this update: Sun 19 Apr 2026 01:00:28 +0000
Manifest next update: Mon 20 Apr 2026 01:00:28 +0000
Files and hashes: 1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: 3zxnRrzeT/WSwv8Do3D4NijtSHSSv5CTuq3X6TzFles=)
2: sclym95paOJdvvvFhr-lWNlhbzg.roa (hash: +sl/bnIFSoKaaf5fH2CcAmUfZuUwLWKTgnEpXZ7dEQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:40:d5:07:6c:d3:c1:64:c7:bc:61:44:a3:b5:2b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Validity
Not Before: Apr 19 01:00:28 2026 GMT
Not After : Apr 20 01:00:28 2026 GMT
Subject: CN=572c1eac59b8cea4f48bca91a3e48cd85c89964b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:a7:4d:23:19:8e:ec:89:5d:f7:00:81:40:
e6:47:af:34:b0:93:eb:2c:c2:03:30:ff:34:fb:67:
ca:19:9b:73:79:dc:60:6c:c1:b3:30:59:24:2d:42:
16:5e:7c:d2:f7:d6:67:50:89:01:0a:b2:b5:05:05:
74:ee:37:3c:86:3a:e8:38:2a:85:ff:3b:37:05:e3:
84:65:15:c3:b4:0c:d4:b0:a9:43:12:9d:d7:f3:1e:
c4:37:35:36:ce:99:57:b3:52:20:2b:4d:8b:4f:c1:
91:bf:ca:2b:62:3b:75:38:c9:a3:64:53:db:12:4e:
75:88:44:37:2b:9e:31:37:c2:b2:9d:72:7b:ec:b3:
97:51:9e:ef:88:ec:8f:ff:33:b2:e0:2d:1d:96:55:
f8:e7:32:6b:03:6f:f0:64:da:e6:71:5f:d1:9b:db:
e8:66:32:bf:17:b4:10:76:4d:69:25:77:16:31:00:
c8:7c:48:b1:63:e4:44:c2:9c:1b:ec:9d:ea:b9:b4:
33:9c:45:7d:7d:d0:7d:dd:1e:60:70:14:55:1e:99:
a2:20:fe:c0:a1:d9:4d:fe:0b:35:17:ca:96:c6:49:
b8:42:4e:b8:9b:a3:77:f2:d4:4d:00:04:db:18:86:
83:08:87:0c:31:80:1a:3d:0b:96:f0:ce:66:a2:18:
b5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2C:1E:AC:59:B8:CE:A4:F4:8B:CA:91:A3:E4:8C:D8:5C:89:96:4B
X509v3 Authority Key Identifier:
keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f5:c1:d2:50:5f:30:f7:a5:42:6f:cf:31:a6:37:4d:76:ae:
58:32:22:00:e3:24:5b:96:ed:9a:b3:b9:c0:af:48:fe:c0:e2:
fa:65:1c:4a:85:f3:4f:0c:72:05:bb:15:5b:64:70:7b:0d:d9:
c9:75:11:18:5b:30:4e:06:a7:a8:fc:5b:54:cd:e8:e7:f0:a2:
bd:5a:c0:41:0f:58:20:ba:8a:91:11:5f:6c:05:57:20:45:bf:
98:8e:4a:65:3e:3b:c4:60:76:72:c6:a1:32:45:11:27:8a:3e:
28:6a:39:af:f7:3d:59:e5:c7:03:20:82:58:a6:7b:12:b1:56:
e1:e9:fd:60:32:02:e7:81:e9:44:99:56:80:ca:c1:cc:8a:37:
b5:d0:0f:40:d9:7b:c7:b5:98:e5:ac:e9:de:47:06:60:8b:02:
91:e1:3a:ed:2a:c8:2b:2b:f2:11:51:a9:64:b8:a2:3f:7d:e9:
64:e4:f2:36:58:9a:a0:ee:fd:67:c1:5c:38:fd:56:ef:56:fd:
e3:ca:1d:03:a9:bf:64:ff:44:2a:0c:95:1f:e2:24:51:3a:f0:
b4:f4:d0:f6:9d:df:15:89:fd:ac:3f:3e:19:ca:81:15:be:d4:
1e:36:bc:51:cd:f7:b7:a4:fd:de:12:8f:37:1d:2f:88:82:0c:
6e:a0:09:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:44 2026 by rpki-client