Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
File: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft (raw, json)
Hash identifier: xT0itWfwyHBZP/Hg1PBVFal3e3kvvWiqm43DbMT8qJQ=
Subject key identifier: BA:3B:9B:07:8B:26:6E:56:CA:20:B1:04:5F:07:21:66:91:3B:29:EF
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial: 019D9B8760EA4547767B58B348D22AB4148A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
Manifest number: 141E
Signing time: Fri 17 Apr 2026 13:00:33 +0000
Manifest this update: Fri 17 Apr 2026 13:00:33 +0000
Manifest next update: Sat 18 Apr 2026 13:00:33 +0000
Files and hashes: 1: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl (hash: 4damM+LkyTt7QaKyw1waFbu++h3SpfGBvx+6lqfjprE=)
2: tXmLrxvg5P19LKcFcwpM22Ekbt8.roa (hash: 6toc+sBgc1NEsqiLqJzbi/jVjcSYilb06CubyR9HJrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:60:ea:45:47:76:7b:58:b3:48:d2:2a:b4:14:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Validity
Not Before: Apr 17 13:00:33 2026 GMT
Not After : Apr 18 13:00:33 2026 GMT
Subject: CN=ba3b9b078b266e56ca20b1045f072166913b29ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7a:eb:60:bf:9d:85:a8:4a:af:cf:9f:64:6e:
c2:7c:1f:a5:37:ac:fb:16:ea:36:a4:66:1e:f0:53:
69:ab:da:1f:28:9d:24:dc:d5:d1:3b:09:25:4e:e7:
cd:8d:58:33:44:40:d4:4f:05:31:58:08:72:5b:79:
f6:5f:fd:6c:4e:a2:15:97:e0:58:2a:f0:d0:f2:f0:
0e:a8:92:f3:da:8d:e2:15:bf:28:c0:73:64:53:93:
b0:7f:a8:73:be:59:03:9c:59:b2:11:ad:1d:70:7a:
ad:63:8c:2b:db:f1:02:9f:b3:66:aa:bd:16:eb:4d:
97:ab:db:e0:41:71:ae:59:02:a5:62:eb:b1:23:c8:
7f:16:31:53:17:51:a6:cc:69:95:02:0d:36:f9:d6:
42:87:bb:7e:ed:6c:55:d3:af:4c:46:18:d2:99:4a:
73:ba:da:54:52:aa:e1:04:21:5a:fc:7c:27:8f:83:
9d:bc:b7:82:ab:92:67:37:b7:c5:d4:5c:8d:e1:6b:
a2:7c:b3:16:d2:51:01:d7:6f:2a:41:93:6e:41:63:
33:c2:af:16:b6:4b:7c:3c:87:18:79:c7:bb:e5:0a:
26:de:69:fa:bc:1b:d4:51:c7:79:b2:ef:b6:42:2c:
5a:6f:70:41:b3:db:bc:7b:1c:62:f2:00:ff:65:c2:
d3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3B:9B:07:8B:26:6E:56:CA:20:B1:04:5F:07:21:66:91:3B:29:EF
X509v3 Authority Key Identifier:
keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:10:59:96:7a:80:56:8f:20:0e:f6:12:e2:88:5a:4b:6b:ac:
0e:2b:58:1e:8f:be:49:d6:9a:67:2f:f1:32:61:7e:f5:b6:26:
a5:ba:32:47:f1:19:f1:ff:a0:3d:5b:f5:fd:ee:48:9d:cb:52:
cb:06:59:ed:44:b8:4c:fb:52:b4:40:4e:bb:95:62:e2:76:d2:
86:07:e5:24:4f:65:06:24:5c:d1:73:5f:35:d8:28:7e:5c:05:
cc:c0:46:72:ef:20:78:70:9e:99:6f:7e:8a:2c:8a:88:b4:b0:
53:d2:ce:34:1a:a2:a2:d1:ea:cd:5f:ee:52:bb:51:c3:6b:24:
0f:a1:fb:71:98:13:e1:c9:6e:2f:8f:0d:29:de:91:2f:2c:cc:
79:ff:35:f2:d4:65:8c:c3:f3:e2:a2:fc:11:ec:de:99:ed:2e:
5a:b1:a3:43:29:1c:0f:c8:03:7f:e2:b3:e0:dd:bc:c3:10:ed:
24:27:85:e7:44:fe:5b:55:6a:ca:30:3e:6b:ea:06:c2:93:0e:
a1:75:76:ae:fa:13:64:4e:67:b3:41:d9:f9:37:be:c4:e6:bd:
35:28:39:8e:60:49:9d:76:63:29:f8:09:24:1e:a6:11:c8:7c:
c9:33:7d:fc:c2:d3:dd:d6:bf:15:88:cb:cf:26:7d:43:c8:a7:
cb:69:da:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh2DqRUd2e1izSNIqtBSKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2Y2YxOWUxOTdiZGFmOTRlNjEwMGUwZTE3ODA4ZTEzZDQ4
NTRmOWMwHhcNMjYwNDE3MTMwMDMzWhcNMjYwNDE4MTMwMDMzWjAzMTEwLwYDVQQD
EyhiYTNiOWIwNzhiMjY2ZTU2Y2EyMGIxMDQ1ZjA3MjE2NjkxM2IyOWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXrrYL+dhahKr8+fZG7CfB+lN6z7
Fuo2pGYe8FNpq9ofKJ0k3NXROwklTufNjVgzREDUTwUxWAhyW3n2X/1sTqIVl+BY
KvDQ8vAOqJLz2o3iFb8owHNkU5Owf6hzvlkDnFmyEa0dcHqtY4wr2/ECn7Nmqr0W
602Xq9vgQXGuWQKlYuuxI8h/FjFTF1GmzGmVAg02+dZCh7t+7WxV069MRhjSmUpz
utpUUqrhBCFa/Hwnj4OdvLeCq5JnN7fF1FyN4WuifLMW0lEB128qQZNuQWMzwq8W
tkt8PIcYece75Qom3mn6vBvUUcd5su+2Qixab3BBs9u8exxi8gD/ZcLTlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLo7mweLJm5WyiCxBF8HIWaROynvMB8GA1UdIwQY
MBaAFAbPGeGXva+U5hAODheAjhPUhU+cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi85OGQ2MjAtMTU5OS00ODYzLTk2Mjkt
MzU2NTA1MzAzYzQ5LzEvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi85OGQ2MjAtMTU5OS00ODYzLTk2MjktMzU2NTA1MzAzYzQ5
LzEvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBBZlnqA
Vo8gDvYS4ohaS2usDitYHo++SdaaZy/xMmF+9bYmpboyR/EZ8f+gPVv1/e5InctS
ywZZ7US4TPtStEBOu5Vi4nbShgflJE9lBiRc0XNfNdgoflwFzMBGcu8geHCemW9+
iiyKiLSwU9LONBqiotHqzV/uUrtRw2skD6H7cZgT4cluL48NKd6RLyzMef818tRl
jMPz4qL8Eezeme0uWrGjQykcD8gDf+Kz4N28wxDtJCeF50T+W1VqyjA+a+oGwpMO
oXV2rvoTZE5ns0HZ+Te+xOa9NSg5jmBJnXZjKfgJJB6mEch8yTN9/MLT3da/FYjL
zyZ9Q8iny2naMQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:28:24 2026 by rpki-client