Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
File: bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json)
Hash identifier: vhrfm9txjrEn2lpM4dGsW8zRh47VdYLGOYcMt6GWMyU=
Subject key identifier: E9:BA:F6:3C:BD:F5:51:CC:FE:37:02:55:09:16:94:65:16:8D:B5:DB
Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Certificate serial: 019D99D0631F93FB427DE61E9C2F0061EB21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
Manifest number: 0A70
Signing time: Fri 17 Apr 2026 05:01:04 +0000
Manifest this update: Fri 17 Apr 2026 05:01:04 +0000
Manifest next update: Sat 18 Apr 2026 05:01:04 +0000
Files and hashes: 1: 5ID5z559_ezDnZySPYG9BxB-s7o.roa (hash: ni+8ewLYFW0Txvc6bnLeborivZa41Cp0rcVNXQIugfI=)
2: 6qtkp2qDEVEEIbbFxY_2i2rKW-0.roa (hash: 2a2iY/VwDxwMHTiCEWGU641Pb5rVRla6ASIylRtAZzE=)
3: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: 87O290xSusdW9iTxNtSqff4V6/eYaCn0F+M8aUCjVqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:63:1f:93:fb:42:7d:e6:1e:9c:2f:00:61:eb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Validity
Not Before: Apr 17 05:01:04 2026 GMT
Not After : Apr 18 05:01:04 2026 GMT
Subject: CN=e9baf63cbdf551ccfe37025509169465168db5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b4:90:26:69:eb:4b:98:01:5f:ed:5e:98:f0:
d6:99:31:63:44:d3:12:2e:7f:8e:cd:ab:e6:e5:9a:
46:0e:40:f1:01:11:94:34:92:8f:16:90:ae:33:32:
14:67:c1:17:4b:70:e1:af:b1:c7:e5:f8:be:8b:30:
db:10:3d:a2:0c:6f:20:39:8c:83:0d:50:b3:22:2c:
48:fe:99:cd:f7:fd:7d:fc:c8:bd:b4:b9:ec:8d:48:
3f:d6:6e:41:a7:69:ce:82:bf:49:43:3d:fb:2d:6f:
f6:e2:67:ed:91:64:6c:af:b5:52:02:eb:38:b9:ec:
7c:20:e1:b9:35:19:16:72:a4:39:cc:ed:55:a8:5e:
48:43:bb:d6:12:a4:22:65:e2:cd:08:cc:dd:1d:9a:
2d:1d:b6:99:f9:2b:36:fa:94:7c:9e:dd:28:b8:4b:
80:6f:c1:6a:fe:01:0d:08:c4:33:b6:de:3c:4e:9d:
3c:4c:de:02:6f:8d:9e:2d:44:89:7c:f7:63:d8:dd:
bf:8c:a1:e2:00:7f:bb:a7:11:70:78:64:3b:0c:1c:
f9:98:08:7f:48:45:2d:f4:42:ba:be:f4:74:bb:f0:
e1:df:02:1f:75:9c:bf:3b:9b:36:f6:47:34:87:31:
76:cc:f4:1a:84:1b:e9:5a:8b:1f:1e:0d:ff:b1:a0:
a7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BA:F6:3C:BD:F5:51:CC:FE:37:02:55:09:16:94:65:16:8D:B5:DB
X509v3 Authority Key Identifier:
keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9d:76:b5:29:5a:10:25:61:2e:c8:e8:58:e3:8d:dd:94:7f:
cd:eb:82:94:81:01:cb:35:e4:2b:87:3c:6c:94:d3:d1:60:3e:
4e:57:8a:0b:de:40:a9:3b:72:23:83:70:56:13:95:82:30:8c:
03:4c:48:69:9d:db:38:29:5f:b8:4f:9e:84:54:92:fc:be:d7:
93:71:4f:3b:03:4f:a3:c8:b5:ea:10:14:bc:ca:45:6a:fd:57:
1f:e1:05:23:33:84:c3:75:23:19:6e:ca:9a:f0:6a:da:4e:e2:
b4:81:3c:64:c8:7e:d7:f0:c7:4f:66:bd:ea:73:78:ba:b3:d3:
1b:15:94:61:9b:bc:d9:7c:11:8f:3f:3c:f1:6a:fe:a0:43:eb:
06:2b:26:13:55:1d:9c:7d:45:f0:63:fb:1d:96:7b:37:7f:72:
b7:19:49:cd:fe:ae:10:79:47:85:db:e0:7d:a5:fb:2d:ec:20:
ee:e9:98:a0:3f:19:8d:ed:d9:4b:c7:1c:ac:27:36:62:70:df:
89:e7:0c:b1:45:0e:f7:1c:7a:65:21:92:43:09:d1:73:84:52:
0d:2f:63:08:2e:02:df:40:eb:bc:fb:0f:17:b2:2b:2d:01:fd:
eb:e0:17:74:a9:51:c4:2a:c2:8a:04:4d:04:82:f8:64:05:b6:
f4:f1:45:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:12 2026 by rpki-client