Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
File: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft (raw, json)
Hash identifier: iRFCFjMuCEUfiWKriJD5daLU7ZUTp5ckySNvQ05MTVs=
Subject key identifier: 5E:51:5A:55:C4:0C:7B:6B:DC:38:B9:11:07:65:1C:D9:16:F6:27:DC
Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Certificate issuer: /CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Certificate serial: 019D999900DDFF03024D774F16BC900433FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
Manifest number: 0ECA
Signing time: Fri 17 Apr 2026 04:00:34 +0000
Manifest this update: Fri 17 Apr 2026 04:00:34 +0000
Manifest next update: Sat 18 Apr 2026 04:00:34 +0000
Files and hashes: 1: 5yx-LhHh5uIomrp_4UWyJH0BrjQ.roa (hash: my/g78XxKs4ZVLWL7XEbiPiVyaVIQqJmYcRP5qZWpSk=)
2: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl (hash: hKa51ePFhQ9HH7WAGCxtdXubCzY7JEJg2uGdDBxa4xs=)
3: yWDf5NXYf3V5C4RXp6kM7vpCi5U.roa (hash: 6+Q3eraszgocMXtLwLNNOidcC+Bf57i8X6gv7LDo3os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:00:dd:ff:03:02:4d:77:4f:16:bc:90:04:33:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Validity
Not Before: Apr 17 04:00:34 2026 GMT
Not After : Apr 18 04:00:34 2026 GMT
Subject: CN=5e515a55c40c7b6bdc38b91107651cd916f627dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c6:c8:2e:dd:56:4c:cb:a6:d0:7b:b2:64:3d:
d6:ab:66:5e:56:cd:8f:54:ac:b9:c8:f9:0c:31:8b:
55:8c:5b:e6:39:40:3c:06:a1:95:6b:a9:6e:c3:7a:
b1:9d:d0:8d:b9:7e:2f:f1:bb:52:f1:38:39:f8:6a:
70:6d:93:a1:a6:4d:8f:ed:8d:12:15:cb:35:76:8c:
74:2e:89:1f:d8:f9:50:66:07:3e:02:de:d2:10:da:
cf:05:0f:7c:94:e7:f8:f4:b8:98:f6:d0:7d:c3:1d:
9f:4f:19:75:2b:5b:f8:a4:d7:5d:c1:d7:a1:f8:6f:
87:16:08:9b:5f:7d:28:99:b7:b0:12:e7:22:87:b0:
32:05:d4:95:49:20:3f:31:ef:1b:71:71:3d:fa:d8:
14:8e:7a:72:b6:7e:3b:2b:3c:73:8d:b0:e9:11:b6:
cd:21:55:44:ae:fc:70:24:6e:d6:62:58:2d:f1:c2:
75:32:fe:2a:29:ad:b7:ae:ee:98:56:f4:d4:b4:a4:
6a:dc:8c:1b:49:c7:88:c8:6d:57:f4:f6:c7:8e:ed:
de:c7:3b:50:74:29:c0:7a:39:4c:7f:37:8e:60:13:
cc:f2:f9:8c:ea:a6:09:45:fc:a7:83:85:91:68:f8:
e3:c8:fe:e4:9c:0a:3a:b6:d0:17:55:2c:a9:e3:85:
02:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:51:5A:55:C4:0C:7B:6B:DC:38:B9:11:07:65:1C:D9:16:F6:27:DC
X509v3 Authority Key Identifier:
keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4f:43:54:b2:49:1b:3c:5b:e4:f7:b6:3e:8e:8e:18:ea:6b:
cc:51:af:98:8e:29:30:b2:34:c8:2b:3e:e4:37:ae:ed:da:e9:
b1:1a:fa:5d:f9:89:d1:f6:ad:8f:6e:31:4b:cf:bd:12:09:f1:
09:95:a1:d8:89:c7:e9:25:f0:b2:93:0c:ff:16:31:ce:91:52:
49:d7:a4:6f:90:2b:d4:10:6a:77:82:18:d7:d4:8d:ca:fb:f1:
e9:4b:8f:ca:8c:4b:34:00:36:e9:5a:2d:33:4d:92:db:a5:be:
b2:fa:37:db:db:d2:73:5a:0b:23:09:b9:66:d6:fd:e7:b9:42:
03:33:e4:f1:8d:76:c1:43:10:b5:6f:ce:2a:1b:0d:62:09:74:
0a:e8:76:94:9f:9c:d9:a2:ca:b7:24:a1:a3:5a:f5:5d:a3:0f:
ec:6b:d2:ad:ba:97:b6:bc:7d:a4:2e:d4:87:54:7d:37:88:bc:
e0:bf:0e:d2:bf:12:93:bd:db:5b:16:cd:bc:af:00:14:2b:69:
8f:04:f9:e1:81:1b:69:a3:69:f0:bc:c1:89:ff:f3:1e:b7:e8:
53:1e:f7:c6:98:92:f4:22:c0:73:4f:b8:67:2b:42:7e:8b:dc:
e5:1a:86:c7:ce:12:7c:bf:0a:95:16:52:c4:33:00:ff:34:da:
a6:f8:ff:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:17 2026 by rpki-client