Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
File: BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft (raw, json)
Hash identifier: +ODTCuajjwgt3blayH8ll6rn9VQfpopfDbENFWgQVpU=
Subject key identifier: F5:86:6B:6A:9E:6F:9B:B4:F6:75:C2:87:D2:1D:90:9F:77:5F:77:C5
Authority key identifier: 06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
Certificate issuer: /CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Certificate serial: 019D97AA70CD7FED304255931E240597A2A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 19:00:22 +0000
Manifest this update: Thu 16 Apr 2026 19:00:22 +0000
Manifest next update: Fri 17 Apr 2026 19:00:22 +0000
Files and hashes: 1: BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl (hash: m9RvlLmi975JKj9i3rDkaOgdlSt8IwFlRJUMFQa64z8=)
2: hhSORRB_cbi8J7UPYVa8deItbjI.roa (hash: tbnenU0D5ezQqQe74bKynFZLzheD+pCDrBBIC6BR1ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:70:cd:7f:ed:30:42:55:93:1e:24:05:97:a2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Validity
Not Before: Apr 16 19:00:22 2026 GMT
Not After : Apr 17 19:00:22 2026 GMT
Subject: CN=f5866b6a9e6f9bb4f675c287d21d909f775f77c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:40:41:22:68:40:81:f6:aa:da:91:e8:3f:
18:4c:d4:e6:1f:fa:bc:72:04:d5:15:09:ad:46:ce:
ef:d7:1c:79:e6:3d:67:85:08:c7:14:89:a7:5b:95:
0a:4f:52:0c:59:3c:c4:7f:fd:03:81:1d:1e:90:c5:
b6:c5:40:fd:c2:06:00:b5:79:61:01:a3:e9:7e:09:
20:4d:8d:75:d7:56:aa:ca:90:7f:09:96:6d:8d:88:
9a:a2:66:a6:42:3f:98:03:32:a7:88:fb:22:bd:38:
fd:8c:cf:76:98:c7:5e:b0:21:a6:c5:5f:1b:39:38:
3d:e2:41:bd:7a:30:d6:a0:d6:87:1c:22:fb:e6:21:
04:cd:c9:76:0d:90:43:34:29:f9:3b:56:0a:b4:31:
51:1c:70:b5:44:cc:ba:1c:a5:ba:57:bc:f3:96:be:
46:24:7a:36:8a:61:86:5e:8c:97:44:3f:4d:b2:6d:
d2:7a:0b:8b:89:38:47:2d:7c:f9:ae:96:61:33:f5:
72:25:d5:65:ba:93:2b:43:45:4f:15:e8:d7:5c:c8:
77:90:4e:fc:6a:bc:46:fe:be:a1:b8:d4:ab:87:14:
ec:38:b4:b3:7d:44:c6:7d:7d:90:dc:e3:fe:a1:91:
2d:2c:4e:ca:e0:16:c9:b5:a6:34:5c:52:49:fd:de:
40:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:86:6B:6A:9E:6F:9B:B4:F6:75:C2:87:D2:1D:90:9F:77:5F:77:C5
X509v3 Authority Key Identifier:
keyid:06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9e:49:9a:e8:e8:04:eb:e0:1f:1d:a8:51:70:49:70:cd:dd:
26:ff:d7:2d:79:ca:da:17:8a:25:8f:e7:17:83:b5:da:89:fa:
fb:b1:b3:6e:f1:36:a8:f8:a0:80:65:b3:07:d2:27:86:77:4d:
66:cf:af:ae:2c:f6:82:34:04:e4:ad:67:2e:5c:eb:89:91:9c:
6d:a2:7a:75:ce:38:b9:4e:66:25:31:72:88:7a:7a:14:da:36:
dc:6e:64:6b:2f:0d:14:f0:fa:02:05:16:9f:0b:a3:b4:eb:c9:
85:8f:22:21:d3:0f:bb:bf:49:c3:d3:6c:b9:85:52:74:2b:25:
d6:84:43:8d:94:d9:e7:d8:f2:a5:4f:41:d8:9b:95:29:74:b9:
45:c6:7f:52:b6:f4:81:03:19:1c:74:46:e1:a3:58:e9:1e:dd:
72:09:f8:f7:65:ad:c7:ea:aa:01:bf:53:61:c3:78:66:06:55:
c4:90:dc:03:04:82:a2:5b:05:b6:05:55:67:8d:6e:df:ef:9d:
ad:5e:10:1d:e4:95:73:9d:b7:45:c4:db:d3:fa:4f:2a:41:d0:
30:82:e7:f5:43:66:38:04:7e:be:71:dc:27:7f:76:b8:d1:af:
6b:7d:93:53:c3:a1:d9:6e:86:fc:c2:22:64:fd:3a:71:6c:8c:
c0:99:d8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:51:29 2026 by rpki-client