Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
File: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json)
Hash identifier: q1Z5suD3FR4OT1sL1rw4d9yD8UR2ekaGA6jFgACENaU=
Subject key identifier: 67:59:C8:70:FD:EF:73:DE:CF:85:85:AA:90:D1:91:D6:2D:7A:D7:83
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Certificate issuer: /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial: 019D98F4EB5B9C17D94CABF511BAB4120277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
Manifest number: 0CF9
Signing time: Fri 17 Apr 2026 01:01:21 +0000
Manifest this update: Fri 17 Apr 2026 01:01:21 +0000
Manifest next update: Sat 18 Apr 2026 01:01:21 +0000
Files and hashes: 1: OY-F0hhlIFsLBb-jhlJlozNHKDw.roa (hash: JseVfilW9clKoxV/EybNUEX+K2HrPNZ0B5i1na1LMg8=)
2: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: Z+q7W8TWOP/IpYY2ip594PnI7/cmzdbZOkxm4RLUe98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:eb:5b:9c:17:d9:4c:ab:f5:11:ba:b4:12:02:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Validity
Not Before: Apr 17 01:01:21 2026 GMT
Not After : Apr 18 01:01:21 2026 GMT
Subject: CN=6759c870fdef73decf8585aa90d191d62d7ad783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:92:e5:f9:88:59:83:25:77:59:9d:0a:8f:
89:d5:fa:14:05:6e:72:af:8a:6d:21:05:ea:24:31:
29:bd:46:e7:6a:32:6c:54:c9:33:5e:0e:3a:e5:84:
1c:16:8a:13:df:0f:8f:5a:99:4e:98:ea:0d:47:d3:
81:3a:0b:d9:b9:71:a3:98:ee:7e:a1:f2:47:a1:54:
9a:78:e8:38:1a:ae:24:63:ac:84:49:ba:a8:63:5c:
88:77:2d:67:21:92:9c:11:88:4d:db:8d:96:82:3a:
ee:18:48:65:df:74:c0:b4:f3:51:13:a7:34:0f:22:
54:2a:de:8e:f7:d2:d9:70:97:d3:2b:74:f1:b1:ee:
c4:23:83:49:72:c7:bd:b2:47:54:e8:84:b4:a4:65:
09:f9:b3:8e:b8:95:3d:79:38:d0:20:fc:42:ca:f7:
a3:1e:ae:f1:db:d7:b3:93:03:72:33:8a:d7:56:ed:
19:4f:cd:50:24:e0:ae:f5:40:dc:ff:e7:bc:55:30:
91:18:c2:df:97:33:6f:f7:36:cd:62:da:80:41:30:
67:fc:69:c5:05:3b:1e:31:54:31:3e:c5:6b:50:98:
4e:4c:90:cc:a9:8b:21:12:1a:e2:94:9a:6b:19:7f:
56:01:ad:9c:95:6d:49:0a:fd:7e:c2:b4:e8:ef:11:
d2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:59:C8:70:FD:EF:73:DE:CF:85:85:AA:90:D1:91:D6:2D:7A:D7:83
X509v3 Authority Key Identifier:
keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d6:c0:b4:52:c0:d7:2b:30:a6:59:97:0d:1f:9d:79:b7:29:
ec:73:da:90:0b:4f:5a:60:2d:27:c4:d8:c6:05:e3:c7:f8:56:
27:93:cc:f8:ed:9d:48:45:d8:fd:87:61:3a:3a:90:00:36:a8:
02:b8:6e:69:b4:05:a6:a0:15:67:3c:15:55:c9:70:c6:fd:36:
3a:c0:ea:30:c0:ef:f5:12:78:b4:06:5f:e5:6a:72:1a:b6:58:
84:f1:39:d8:ab:40:f7:d4:d6:5b:05:50:34:0d:f4:8a:33:6e:
89:ec:d4:a1:bc:29:f8:7b:ca:ac:fc:69:43:a2:b1:ba:bb:c9:
f1:25:32:13:9a:42:5a:1a:c2:22:d9:c5:60:51:c6:bc:8b:09:
ee:dc:5b:66:29:9f:37:f5:48:40:0c:34:66:b9:67:4e:13:77:
ea:2b:c7:02:ff:03:e0:0e:64:c9:5b:a2:af:57:d3:fe:4c:c3:
91:d4:50:ea:ac:11:cd:a9:48:66:ac:04:df:a5:d6:e5:ab:e9:
00:63:94:1f:4c:13:d2:d9:79:3a:ed:92:e0:0c:cd:ec:e2:09:
7c:80:9d:8b:c4:c4:1e:63:dd:a9:09:d1:c7:fa:f5:9c:81:04:
4b:f6:64:62:37:ef:0e:e0:68:9e:e1:28:66:52:44:d9:a1:7b:
00:93:25:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:32:36 2026 by rpki-client