Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
File: BmNp4nBctDPbBlirZm0ItnsVUdw.mft (raw, json)
Hash identifier: exmOuTi3rjgjhV4rKPoW9ns7YnzLHqhg+qFBeuA1kmw=
Subject key identifier: FA:43:14:87:98:9A:01:2F:00:BC:62:95:70:CC:86:18:8C:48:B7:B6
Authority key identifier: 06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
Certificate issuer: /CN=066369e2705cb433db0658ab666d08b67b1551dc
Certificate serial: 019D98504A4D01C3D49EE8AB91FEA00FCADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
Manifest number: 17E6
Signing time: Thu 16 Apr 2026 22:01:31 +0000
Manifest this update: Thu 16 Apr 2026 22:01:31 +0000
Manifest next update: Fri 17 Apr 2026 22:01:31 +0000
Files and hashes: 1: BmNp4nBctDPbBlirZm0ItnsVUdw.crl (hash: rmGPhoJuMxg+wttE3C9TSkA0jNvZBSxLZWyyr7aat5Q=)
2: M2182yhCWIp3Dr1q8N4Z80xWV3w.roa (hash: IY36SUnI5dTjS3K8jOcIn+WsAvHQBxCsJZS9oy5ygLI=)
3: jYy2uYNL4nb69qr5FWiz-y5I14g.roa (hash: uK2ZzVfws+izj4DF8qyLOr4woZd1HOHCjMW0FZXm+bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:4a:4d:01:c3:d4:9e:e8:ab:91:fe:a0:0f:ca:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066369e2705cb433db0658ab666d08b67b1551dc
Validity
Not Before: Apr 16 22:01:31 2026 GMT
Not After : Apr 17 22:01:31 2026 GMT
Subject: CN=fa431487989a012f00bc629570cc86188c48b7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d8:d8:80:ba:dc:2a:05:83:e7:55:77:4c:12:
85:6d:5d:26:1c:67:a0:da:f4:68:de:39:4c:f3:72:
4a:15:66:17:85:03:81:f7:d3:fd:18:ae:4e:20:40:
ed:0d:0f:2f:f0:e7:62:30:e5:19:01:41:7f:a1:39:
cb:d2:95:24:9c:f4:35:da:2b:dd:a2:ba:f2:68:4a:
77:97:7c:f2:3f:1e:e3:71:7b:ac:f9:1e:ee:a8:29:
93:aa:34:19:8c:f9:b9:4e:60:6f:54:24:df:02:b5:
b6:c6:65:61:6b:0d:1a:c4:0d:f9:4e:66:36:0e:a6:
de:05:84:e2:c7:87:98:eb:37:6d:cb:ba:81:2f:ee:
cd:35:9f:07:03:35:d9:b3:2f:99:0b:d3:19:7d:28:
b1:54:d2:47:1f:01:fa:d3:71:fa:3d:a2:7e:0e:88:
a2:82:95:d1:d0:9c:1c:de:9e:bd:11:38:dc:e0:99:
9a:09:31:fb:00:1c:ef:b6:93:5c:18:d8:fd:e3:c5:
31:6d:f9:cc:90:c0:a9:06:5b:13:11:e8:89:2a:bc:
a4:c7:3d:ee:b6:57:0e:38:71:3e:3b:e7:f6:5b:77:
54:d5:29:c8:52:dc:78:ed:76:f3:52:6d:a1:90:22:
ff:c9:38:d8:64:75:17:e0:62:09:2e:66:5b:91:19:
70:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:43:14:87:98:9A:01:2F:00:BC:62:95:70:CC:86:18:8C:48:B7:B6
X509v3 Authority Key Identifier:
keyid:06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1d:e4:ce:e1:fc:83:a7:70:35:1f:e4:17:c9:e7:3e:75:47:
95:d3:c6:ce:6a:04:ec:9c:5b:50:f4:ad:43:41:a3:42:44:77:
ed:82:c7:2c:f7:7d:73:29:d7:46:df:1c:6e:23:95:b7:0a:a8:
30:c8:87:ad:df:1c:e6:27:2c:5e:e1:35:3b:71:8a:14:b8:6e:
2e:db:ba:4b:e9:9b:21:c8:fb:c9:07:fe:f7:cc:ad:62:94:cf:
c5:59:07:f3:1c:c9:3f:6e:80:98:08:1a:63:9e:a2:c4:48:ba:
ec:90:10:e2:77:30:02:b0:b2:d8:e2:7b:d4:f7:a8:27:44:2f:
01:b6:52:15:98:e2:2e:91:54:b3:8c:7c:b4:87:fc:0d:2a:bd:
56:82:c2:ce:4e:06:9a:04:b1:0d:2a:89:e6:8a:ab:b6:52:1d:
35:df:c8:4a:40:5e:97:b3:2c:f0:44:9a:a5:57:89:c1:04:e1:
79:41:ec:67:1b:b1:a3:60:03:75:c8:08:26:fe:ad:9a:c5:3f:
4d:d6:a7:c3:20:f5:82:8a:30:3c:a4:dc:cb:b3:ae:1c:12:68:
9c:ff:ff:b6:df:99:aa:43:88:83:26:70:9e:00:32:74:64:87:
8d:19:da:2b:f5:68:f0:6a:c1:a3:a8:2d:a9:54:de:aa:3e:72:
01:3f:ed:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:50 2026 by rpki-client