Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
File: bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft (raw, json)
Hash identifier: ATJvBQidsY9VR/I0hZ9xjbwV5pr+XeL1pQ2jTdY1cH8=
Subject key identifier: 36:90:6C:E7:CA:49:61:B3:D3:81:1C:DB:58:2E:D6:3E:AD:F6:7A:70
Authority key identifier: 6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
Certificate issuer: /CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
Certificate serial: 01A0D07FAB8E9D8BF4DBF409304BED0363D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
Manifest number: 0727
Signing time: Wed 23 Sep 2026 23:00:22 +0000
Manifest this update: Wed 23 Sep 2026 23:00:22 +0000
Manifest next update: Thu 24 Sep 2026 23:00:22 +0000
Files and hashes: 1: YDy6wLds96Yf3zX0RUfnfXQDw5Q.roa (hash: 86RzS+pw/jn2zDtIOdA8fDYlhM/9zcSkfL4mjAAa2B4=)
2: bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl (hash: Z+viE09CzxlJ/rm/EgWl1tBs3qOaM+hdBjgjCpF37pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:ab:8e:9d:8b:f4:db:f4:09:30:4b:ed:03:63:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
Validity
Not Before: Sep 23 23:00:22 2026 GMT
Not After : Sep 24 23:00:22 2026 GMT
Subject: CN=36906ce7ca4961b3d3811cdb582ed63eadf67a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:be:3d:06:3b:1f:80:fc:27:7c:98:c3:d6:
7e:95:02:87:d2:91:af:e9:e1:b3:38:65:09:e9:fb:
0f:0d:bc:2c:79:10:c4:82:64:26:64:a9:8e:10:1e:
8e:31:93:82:20:12:f7:35:24:1f:52:3e:21:ff:1e:
19:6c:6c:58:c7:81:49:89:cc:96:d6:c4:69:53:70:
20:8a:3c:00:97:57:80:fc:88:56:6b:8f:ba:ce:08:
d8:f8:8f:c4:3d:04:fe:ad:f8:0b:e9:68:e2:a3:92:
19:2a:17:b9:55:75:6b:7d:c5:b0:29:68:ea:4c:2b:
eb:d2:cf:09:a2:10:89:1d:87:87:ae:f4:ae:83:ae:
67:b6:5e:c0:8e:8c:c9:b3:92:04:f6:47:63:14:41:
ba:40:33:23:8d:c7:e8:1b:87:73:94:a2:dd:37:1f:
b2:c7:be:0d:41:1b:49:cf:42:e8:54:2f:5b:ab:12:
53:91:ee:44:f2:ef:69:46:47:c9:79:1b:ef:69:20:
21:a7:82:49:fa:34:9a:15:65:e8:ac:2f:8b:ba:f2:
89:6a:73:4f:c1:89:e1:4c:f7:72:bc:3d:d0:7e:bf:
bc:1f:1c:4b:96:ff:0c:a0:cd:89:b1:f7:fe:aa:f9:
ef:3c:c4:7d:da:d5:20:2a:a6:c2:b3:c5:7c:40:d3:
c2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:90:6C:E7:CA:49:61:B3:D3:81:1C:DB:58:2E:D6:3E:AD:F6:7A:70
X509v3 Authority Key Identifier:
keyid:6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:56:da:4c:0d:a2:e7:2b:61:12:ed:3c:b5:1b:df:20:63:a9:
d7:f8:1b:49:61:e4:18:b4:ee:67:47:a9:6e:29:87:d6:7c:6d:
63:42:04:0b:fe:b3:a5:1e:3f:92:c9:0b:0b:23:17:a7:64:33:
86:65:ae:a1:bd:82:73:59:b9:56:81:3b:cd:2b:20:d3:2b:13:
9a:6a:0b:64:74:a2:f8:87:78:b0:9a:f2:9f:b9:11:e2:0c:8a:
34:ad:40:d2:7f:f8:ae:80:a9:e8:af:c3:d2:2b:14:b2:0f:8d:
9d:9c:73:68:98:6a:6e:14:96:c6:f0:13:93:81:1e:88:cb:59:
61:33:d1:b1:36:fe:9a:88:9a:f6:82:af:f2:79:ee:d2:c8:b2:
a6:f0:1e:11:77:8f:48:d9:57:6e:5f:54:67:b6:e8:47:ec:c4:
75:05:db:96:d8:7e:99:ce:cc:70:81:77:14:d2:e4:f3:fc:80:
63:d5:9e:b9:48:d7:f0:41:80:2e:c0:27:a5:7b:c9:e2:0a:c3:
9c:53:20:17:47:69:be:49:02:a5:73:3a:b1:ae:ae:3a:7c:56:
95:75:18:eb:ca:90:39:c0:9c:e5:f8:7c:2c:28:66:3c:6d:25:
a5:10:26:53:52:fd:f8:bc:64:42:c3:6a:eb:8e:cc:b2:c8:1c:
f8:2f:be:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:42:03 2026 by rpki-client