Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
File: bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft (raw, json)
Hash identifier: 3kflW/dLSkIJadRf2HLSB297PFzKOe9aboVBqBOGVRc=
Subject key identifier: CC:5A:5A:47:B6:04:61:0A:71:61:69:FC:E3:6C:46:30:2D:C5:2B:7F
Authority key identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
Certificate issuer: /CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Certificate serial: 019D9818DB5B4598B7133D02B1D8221FE510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
Manifest number: 0DDF
Signing time: Thu 16 Apr 2026 21:00:59 +0000
Manifest this update: Thu 16 Apr 2026 21:00:59 +0000
Manifest next update: Fri 17 Apr 2026 21:00:59 +0000
Files and hashes: 1: IVxozb3aky8T2vxQz78ZpJ9En0g.roa (hash: qnnxuMzzgk+NwHcYP1qJgAC3Y4zOPpFa8GphL9ABcCI=)
2: bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl (hash: +S0ijAUnHJVZkkCVVhet0L+Wk9YYbneLhui7OAZq9gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:db:5b:45:98:b7:13:3d:02:b1:d8:22:1f:e5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Validity
Not Before: Apr 16 21:00:59 2026 GMT
Not After : Apr 17 21:00:59 2026 GMT
Subject: CN=cc5a5a47b604610a716169fce36c46302dc52b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:64:ea:84:94:07:c6:90:23:ee:71:66:5a:dd:
95:89:ac:09:9b:0c:be:d7:eb:01:f5:64:16:e9:39:
a2:63:94:eb:d0:6a:3e:27:ab:f9:8b:73:b6:4b:de:
22:3b:09:fb:15:ba:b1:69:a8:d2:4f:f4:86:4f:66:
15:89:99:28:d3:3d:f0:d8:e6:db:b5:da:b4:e5:f1:
5a:fc:3d:33:ad:89:73:5f:50:bc:3f:f9:0f:82:c8:
7f:69:35:34:a9:66:36:96:3b:7b:fa:b3:27:01:2e:
03:11:a0:e8:f2:59:65:3c:75:65:6a:7f:31:a2:b0:
44:9b:82:37:e0:09:f3:8a:a6:8d:e2:03:1f:fa:9a:
55:3f:e2:3c:77:a0:5f:56:67:25:4f:f9:80:97:87:
07:1c:91:1d:b1:1d:d6:c0:26:b1:66:a3:3d:46:48:
7f:70:ef:48:4f:0f:c9:2d:d6:1c:45:48:f8:ab:07:
bc:d4:5a:fc:f4:cc:eb:f2:96:cc:d2:07:ea:06:95:
ce:e5:85:40:ce:17:10:17:40:b3:82:6a:02:af:d6:
10:38:a5:52:d0:7b:75:16:fb:51:8b:f8:e6:b5:37:
c1:f9:2c:e2:66:c6:30:e8:7b:57:09:2f:16:45:93:
8a:f3:b7:a3:9c:1c:14:e7:ff:37:e2:5b:cd:c7:9a:
2b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5A:5A:47:B6:04:61:0A:71:61:69:FC:E3:6C:46:30:2D:C5:2B:7F
X509v3 Authority Key Identifier:
keyid:6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a2:68:cf:26:68:8f:7b:d9:c1:55:69:50:b8:70:2e:c7:84:
23:cd:ce:57:d9:da:ec:d4:c2:16:f2:ca:14:e9:4d:1d:de:c3:
09:c9:b5:af:b6:13:d1:a9:de:a4:38:73:79:b6:33:39:9e:66:
48:aa:8e:03:d5:71:2b:3e:c2:0a:42:7d:cb:95:5c:bd:21:29:
74:35:0b:f2:33:5f:ba:30:0d:b2:5a:83:00:14:04:66:92:1a:
e3:c0:01:e9:4c:7f:5b:0d:16:4d:29:1c:4d:cf:d0:02:cd:52:
1c:24:bc:aa:78:79:c4:b6:f1:5f:01:4a:4d:32:2f:7d:b6:09:
42:e8:3c:42:46:de:92:c7:15:2d:2e:d7:68:eb:ef:dd:ca:77:
0e:00:9f:33:ef:78:51:46:ff:0b:de:8f:d3:49:26:84:46:0f:
64:2d:51:dd:4f:89:1e:e1:bd:f9:33:1c:b0:ae:11:e2:76:f8:
96:32:4c:be:dc:37:b9:6f:1e:52:fa:70:2c:94:1c:25:65:9e:
02:b8:8c:87:d1:4e:41:bc:82:ad:26:68:b9:ce:fb:05:02:87:
df:e3:96:17:68:b5:d4:c4:fb:a6:d7:64:04:99:12:97:8b:01:
3b:41:89:a9:cc:3a:ee:3f:45:ec:7a:0b:89:16:f5:45:7d:a7:
ac:dc:cd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:28 2026 by rpki-client