Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
File: bPlqfAHWLjes7PB4b2SXiQUSFkc.mft (raw, json)
Hash identifier: RqD/G3awj/Vyt6ulDBekkwsb0NKCvjlkDBDrbMRz1QE=
Subject key identifier: BF:D3:4E:0B:A6:EE:6C:0D:90:0B:8C:28:B5:A7:F7:D2:95:0F:80:14
Authority key identifier: 6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
Certificate issuer: /CN=6cf96a7c01d62e37acecf0786f64978905121647
Certificate serial: 019D98F4BB8B941315113BCC9D8AD444124A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 01:01:08 +0000
Manifest this update: Fri 17 Apr 2026 01:01:08 +0000
Manifest next update: Sat 18 Apr 2026 01:01:08 +0000
Files and hashes: 1: 0ohKVQN8JuTcilJLLas1PbkpJLQ.roa (hash: Iy3MQLBkcAq1eJnpEU2jctdrlX7AMZPQC/y2+z0Uq40=)
2: bPlqfAHWLjes7PB4b2SXiQUSFkc.crl (hash: jvtC7APonxCLkvCSEIU15SatW4Cig4piQHV3eSOLuY8=)
3: jWDr3wDugKmfFHaWOIXK3rm3KBM.roa (hash: t/jm2gNNlq/4NY3+0/h6qliZGJIxWHdoCDUSrWKpxvQ=)
4: kA7mfes0bqBl5D-bI67VpsmJV9k.roa (hash: Y1kiJDLllKmeTEYbA2zY2rhRombUij5BSss+NTqpPIw=)
5: n0ruOGbeVvXhGIrsWayjSXVW_as.roa (hash: 39LLK08KXO2vyHtc1/PHu8DzL0QhDBg9EmDMQZMx3yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:bb:8b:94:13:15:11:3b:cc:9d:8a:d4:44:12:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf96a7c01d62e37acecf0786f64978905121647
Validity
Not Before: Apr 17 01:01:08 2026 GMT
Not After : Apr 18 01:01:08 2026 GMT
Subject: CN=bfd34e0ba6ee6c0d900b8c28b5a7f7d2950f8014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:15:29:7c:a6:b0:d6:57:d1:38:18:ad:d4:ad:
0c:05:bf:18:a0:34:9e:09:ec:7b:e1:88:73:be:b1:
30:29:45:c4:86:50:ed:4b:4a:d0:cd:60:bb:ee:e2:
6d:8c:3e:86:44:7b:eb:d3:14:0b:08:54:05:66:a1:
03:72:3e:f2:8a:11:a1:c8:a3:b5:e1:b1:61:f3:01:
61:44:b2:ca:e5:03:d3:44:df:44:77:8f:f5:22:d0:
dc:6f:c5:35:37:ed:71:b2:92:3c:dc:33:60:54:9c:
59:77:ff:20:fd:3b:76:53:d1:a3:b1:4f:ee:e3:db:
37:55:ba:c0:ef:fd:0d:f5:6f:d3:12:8e:4f:22:c0:
75:fe:dc:fc:cc:17:86:7a:e7:d4:d0:c3:cc:68:64:
bb:f1:8f:05:2a:fa:28:8a:c1:88:fa:f0:18:31:9d:
e8:d5:fd:25:f6:89:34:46:9a:11:c5:27:0f:2c:f3:
53:42:9b:0a:e4:6a:d0:cd:e1:86:8b:be:75:e5:a5:
be:26:bc:77:da:57:4f:93:1e:54:d5:5d:cc:54:a8:
61:ba:9b:89:76:9c:f3:c9:ef:03:92:8a:6e:ea:fb:
cd:f6:11:bd:d3:21:0b:a4:f2:2e:bd:19:6c:c9:ab:
c3:7c:42:89:7c:c5:0e:0f:f7:97:ae:99:2f:31:cc:
80:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D3:4E:0B:A6:EE:6C:0D:90:0B:8C:28:B5:A7:F7:D2:95:0F:80:14
X509v3 Authority Key Identifier:
keyid:6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:a7:b8:9b:3d:58:da:d1:de:0c:0c:0c:ca:f9:37:6d:ac:c2:
3b:0f:28:3b:3d:bf:56:8a:6c:81:96:60:41:d7:21:3f:58:8b:
01:6d:78:7e:74:a5:43:57:03:a5:c3:97:c7:72:a0:98:ea:70:
76:ba:e6:57:5e:0e:69:fb:41:c8:c3:53:d7:66:ab:33:4c:cd:
ad:fe:65:85:6a:de:87:3c:2d:a7:c4:77:a4:c3:a4:2b:7f:12:
8f:14:29:c4:6f:39:d7:1a:52:3e:5c:98:6b:3f:be:a0:1f:64:
21:45:68:55:ce:04:18:f3:ce:ef:f1:3d:3a:fc:a5:df:e6:c9:
79:4a:02:7c:20:24:0b:bf:5e:7e:27:5d:3c:d9:53:fa:86:9d:
2f:50:20:d0:79:29:02:58:14:89:ec:05:23:5f:37:6b:ed:62:
e8:b5:92:0c:bd:94:77:49:fa:1b:f7:ea:a3:51:f0:fb:c1:63:
6a:0e:33:69:55:3b:1a:b7:4a:69:26:4c:19:07:2f:bc:92:08:
86:2b:51:67:9e:10:60:08:77:5b:24:25:bc:12:3b:cb:42:b0:
d9:0d:0d:99:1a:29:94:9f:c2:71:a2:92:d3:26:29:d6:b9:90:
a4:07:bb:6a:80:74:c9:1b:7c:29:a0:37:b4:93:7e:0c:0a:9c:
bf:ab:8e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:41 2026 by rpki-client