Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
File: bDpjxTHO5Bs77YcwDkWeRfueiXg.mft (raw, json)
Hash identifier: kqE019N8C2oeVdRL2J+uV4LcEaLk+wQ9w9Ie4wj+W8M=
Subject key identifier: D6:B5:E1:AB:8C:02:67:A5:FD:33:DB:08:AF:30:D8:8A:9C:37:6F:73
Authority key identifier: 6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
Certificate issuer: /CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Certificate serial: 019D9B87BAE49029E619B978D41701B3BA90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
Manifest number: 17C5
Signing time: Fri 17 Apr 2026 13:00:56 +0000
Manifest this update: Fri 17 Apr 2026 13:00:56 +0000
Manifest next update: Sat 18 Apr 2026 13:00:56 +0000
Files and hashes: 1: 7ekKRg8g8HrfOcB9YF4-OtPsRQs.roa (hash: yMXJseso0YF/5O/OMhuQoK6YA8+AHyLDCsIrCokdoMw=)
2: bDpjxTHO5Bs77YcwDkWeRfueiXg.crl (hash: I7bEhUmoxm0VG+Grr+iLFt5BkMc1o2prv/nCwR0T8Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:ba:e4:90:29:e6:19:b9:78:d4:17:01:b3:ba:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Validity
Not Before: Apr 17 13:00:56 2026 GMT
Not After : Apr 18 13:00:56 2026 GMT
Subject: CN=d6b5e1ab8c0267a5fd33db08af30d88a9c376f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:d8:0b:21:5e:86:c3:46:2c:94:12:8b:65:
4a:12:22:5b:6e:38:6f:de:d3:88:0f:b6:40:d7:fa:
90:76:de:6d:84:9a:0b:7f:dc:e7:74:49:45:b9:04:
64:34:91:fe:f6:5b:50:42:d4:32:b4:af:ca:ee:29:
ee:e1:fb:32:70:ea:cc:58:56:16:27:13:68:7f:be:
88:a4:08:18:5d:75:d9:59:71:51:a1:a6:a6:06:a0:
0e:b8:00:97:b4:e9:2e:e8:b8:28:8b:6e:a8:61:f2:
1b:39:2d:39:29:c0:d1:50:42:c0:73:df:30:70:94:
8d:48:7f:bb:b2:d1:30:48:af:ea:2f:e0:2f:ee:eb:
50:47:6b:a2:cd:5d:a8:ec:27:8e:f4:d5:61:68:8a:
5b:b1:a5:fb:54:1c:df:63:dc:b6:99:78:ca:43:92:
0e:54:a0:9f:01:f3:65:d7:ad:c4:3f:05:58:f4:1d:
e4:40:8d:65:8a:f5:b0:d7:bb:3a:9b:fb:a2:3d:c1:
5d:7c:fd:ae:ee:a2:c9:9b:56:c9:76:26:5a:6b:8f:
aa:bb:df:55:d8:d3:7a:61:7e:5b:e5:e8:21:b4:1f:
02:b1:64:f0:9d:97:b9:8d:a7:0a:40:37:8c:7b:1c:
4b:7b:e7:b9:2f:da:fd:4d:1d:28:f0:a7:cc:2c:0d:
f6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B5:E1:AB:8C:02:67:A5:FD:33:DB:08:AF:30:D8:8A:9C:37:6F:73
X509v3 Authority Key Identifier:
keyid:6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b1:20:e3:77:f6:72:1e:27:e4:fd:34:84:eb:35:57:17:a6:
19:0f:b1:72:5b:01:ad:f1:aa:83:a9:c5:e6:46:78:53:f7:4a:
ca:a9:28:48:a7:81:9f:78:2c:d0:76:cf:77:6b:04:50:ff:d5:
9a:e4:27:65:b2:21:83:7d:b2:75:49:a3:2b:4e:e0:52:24:a8:
c9:19:93:d7:82:f0:92:1b:ff:35:5e:31:57:49:be:f4:a1:4c:
5f:63:64:6a:ce:b7:d6:0b:7f:1d:2b:ec:0b:e3:42:e2:85:91:
2d:b5:eb:20:ad:ee:e0:f1:59:38:ab:1e:8d:7a:6e:56:14:96:
37:f0:d6:5c:63:3e:c1:d7:e6:b0:e3:18:7e:f9:10:eb:61:62:
08:a4:c4:c2:4c:ed:fb:78:0d:43:37:87:2c:7b:de:47:35:c7:
f9:9d:fe:a0:8d:e4:cd:c3:83:36:5d:5f:56:97:16:1c:30:01:
28:c9:6a:30:fd:05:98:27:35:03:63:e5:23:98:8b:15:cf:d0:
83:3b:9d:2e:e2:8a:7e:f7:ef:0a:e0:97:f0:bb:4e:34:a3:06:
46:84:17:f8:ca:07:fe:31:a8:35:6c:27:82:75:11:fb:b3:ac:
01:8d:79:73:96:0f:7e:77:92:27:dd:7d:fe:f7:61:9e:6c:36:
ef:60:38:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh7rkkCnmGbl41BcBs7qQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjM2E2M2M1MzFjZWU0MWIzYmVkODczMDBlNDU5ZTQ1ZmI5
ZTg5NzgwHhcNMjYwNDE3MTMwMDU2WhcNMjYwNDE4MTMwMDU2WjAzMTEwLwYDVQQD
EyhkNmI1ZTFhYjhjMDI2N2E1ZmQzM2RiMDhhZjMwZDg4YTljMzc2ZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTfYCyFehsNGLJQSi2VKEiJbbjhv
3tOID7ZA1/qQdt5thJoLf9zndElFuQRkNJH+9ltQQtQytK/K7inu4fsycOrMWFYW
JxNof76IpAgYXXXZWXFRoaamBqAOuACXtOku6Lgoi26oYfIbOS05KcDRUELAc98w
cJSNSH+7stEwSK/qL+Av7utQR2uizV2o7CeO9NVhaIpbsaX7VBzfY9y2mXjKQ5IO
VKCfAfNl163EPwVY9B3kQI1livWw17s6m/uiPcFdfP2u7qLJm1bJdiZaa4+qu99V
2NN6YX5b5eghtB8CsWTwnZe5jacKQDeMexxLe+e5L9r9TR0o8KfMLA32ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNa14auMAmel/TPbCK8w2IqcN29zMB8GA1UdIwQY
MBaAFGw6Y8UxzuQbO+2HMA5FnkX7nol4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mNWVhMTMtODI3YS00YWNkLWEyMDct
YjlmM2M2MzUxMjI1LzEvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9mNWVhMTMtODI3YS00YWNkLWEyMDctYjlmM2M2MzUxMjI1
LzEvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLEg43f2
ch4n5P00hOs1VxemGQ+xclsBrfGqg6nF5kZ4U/dKyqkoSKeBn3gs0HbPd2sEUP/V
muQnZbIhg32ydUmjK07gUiSoyRmT14Lwkhv/NV4xV0m+9KFMX2Nkas631gt/HSvs
C+NC4oWRLbXrIK3u4PFZOKsejXpuVhSWN/DWXGM+wdfmsOMYfvkQ62FiCKTEwkzt
+3gNQzeHLHveRzXH+Z3+oI3kzcODNl1fVpcWHDABKMlqMP0FmCc1A2PlI5iLFc/Q
gzudLuKKfvfvCuCX8LtONKMGRoQX+MoH/jGoNWwngnUR+7OsAY15c5YPfneSJ919
/vdhnmw272A40w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:01 2026 by rpki-client