Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
File: xBHDOVke38lmej55EY3SPEAr6H8.mft (raw, json)
Hash identifier: soUROH+FHI+FDJsoC/KO2mqi+UGAwXzhQRgwnRUYmV0=
Subject key identifier: D3:03:4C:02:A6:21:72:BA:FD:73:40:C8:83:1E:4E:34:1E:78:83:10
Authority key identifier: C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
Certificate issuer: /CN=c411c339591edfc9667a3e79118dd23c402be87f
Certificate serial: 019D9998F44F6535F5647F6A49EEFACFCF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
Manifest number: 08BB
Signing time: Fri 17 Apr 2026 04:00:31 +0000
Manifest this update: Fri 17 Apr 2026 04:00:31 +0000
Manifest next update: Sat 18 Apr 2026 04:00:31 +0000
Files and hashes: 1: xBHDOVke38lmej55EY3SPEAr6H8.crl (hash: EnXiMPXBNKx4uZHBrbb6KoNlh+x9piYdjwHYafs+9RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:f4:4f:65:35:f5:64:7f:6a:49:ee:fa:cf:cf:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c411c339591edfc9667a3e79118dd23c402be87f
Validity
Not Before: Apr 17 04:00:31 2026 GMT
Not After : Apr 18 04:00:31 2026 GMT
Subject: CN=d3034c02a62172bafd7340c8831e4e341e788310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:ab:01:83:eb:4e:8c:61:f1:16:63:a7:f7:
16:64:be:35:d1:6b:a1:40:9e:02:05:6f:a5:90:dc:
4a:13:0f:4c:1a:d3:e3:1e:ea:9d:cc:b6:a3:f6:ff:
24:80:7c:73:df:0f:8e:72:1b:6c:07:05:0f:6c:d2:
d0:0c:58:b2:e7:8c:e8:53:12:9d:2d:79:4c:4b:23:
a4:47:3f:96:7f:b6:c2:84:b8:9a:f2:5b:e9:c8:9a:
dd:04:91:9d:85:dc:cd:85:59:8a:76:4f:db:8a:c6:
cc:7f:b4:04:84:4b:08:7c:61:72:c7:c2:b7:2f:23:
4f:46:04:28:c8:67:5c:8a:b7:43:f3:0d:3a:2c:4c:
0e:45:5c:15:47:a0:12:45:68:87:70:23:6c:3a:e5:
87:4d:ae:c0:82:5a:18:1b:cb:55:5c:dd:2a:96:36:
d4:08:05:ae:16:c3:5b:71:a5:24:d0:ff:f6:98:c0:
68:b2:37:54:27:46:2c:09:01:8f:41:e2:c2:ee:93:
ab:eb:19:b3:f0:b4:93:de:75:bd:16:aa:b6:61:b4:
06:f5:b8:69:11:d1:29:15:7e:06:d8:9c:85:dd:12:
cd:af:83:a3:74:dd:f3:0c:b2:c4:ba:9e:80:67:db:
0c:62:23:4a:cb:ed:09:e5:c0:f6:5a:53:6c:fd:86:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:03:4C:02:A6:21:72:BA:FD:73:40:C8:83:1E:4E:34:1E:78:83:10
X509v3 Authority Key Identifier:
keyid:C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:08:04:c3:97:13:c9:cb:b6:cb:e2:a4:f1:2f:e6:ba:14:bf:
aa:31:45:84:2a:ed:c9:5b:bd:54:61:7e:17:d1:ba:bf:f2:27:
77:06:8c:b4:fd:04:cf:02:a2:24:71:2c:ab:2b:c8:6f:11:04:
8d:8b:f0:bb:3b:e6:69:ed:26:9b:a3:68:ae:4d:f8:d7:6a:0e:
3b:74:93:bb:75:18:b6:0f:9e:e1:1f:78:98:77:6f:f0:bd:4d:
53:84:92:e3:3f:16:79:d0:21:6e:74:d1:45:4b:d1:cd:4e:35:
fe:c7:57:a2:cf:af:be:a2:b9:1f:10:c3:ab:a8:93:06:b9:60:
a6:0a:e0:7b:57:2b:57:65:ba:39:16:d8:35:aa:7a:bb:16:57:
38:58:71:27:5e:5c:71:3c:1e:59:8c:00:a2:f6:fc:74:75:6b:
fa:92:c3:71:32:1e:93:08:97:fb:75:38:67:7f:b0:a7:d9:ed:
f9:47:16:f1:21:d3:2b:3a:d8:24:d2:b2:46:da:79:81:dd:a6:
07:f5:d8:9e:6b:db:de:d1:5b:68:67:94:f6:ba:32:3f:86:89:
2d:e1:25:51:00:4a:35:11:45:95:41:77:33:76:b0:3a:24:66:
fa:9f:90:16:db:e4:04:d6:f3:00:ed:69:34:c0:4d:27:23:fb:
c7:02:e5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:07 2026 by rpki-client