Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
File: bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft (raw, json)
Hash identifier: sWZUbUcHGdeJWgAtywk0fG5ZWYegp8yNTfPMtb42h9c=
Subject key identifier: 27:54:95:BE:C1:35:83:2B:AD:80:F6:45:D5:73:7A:61:4C:35:61:35
Authority key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
Certificate issuer: /CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Certificate serial: 019D98BD71EDD4747ABB007589512E04A757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
Manifest number: 1036
Signing time: Fri 17 Apr 2026 00:00:45 +0000
Manifest this update: Fri 17 Apr 2026 00:00:45 +0000
Manifest next update: Sat 18 Apr 2026 00:00:45 +0000
Files and hashes: 1: ZVzgmg8PNrXQsVKOx9_CSmQahtg.roa (hash: BHGDW/+IDMtJk2UEAihZYue4lahmvlWX5Zbyw1itKuM=)
2: bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl (hash: L+DGSBRIq6DUz24Llq7EvPHUwXo/4+8m8IPK3F3zyfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:71:ed:d4:74:7a:bb:00:75:89:51:2e:04:a7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Validity
Not Before: Apr 17 00:00:45 2026 GMT
Not After : Apr 18 00:00:45 2026 GMT
Subject: CN=275495bec135832bad80f645d5737a614c356135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:a6:be:be:c1:33:6c:9a:cb:f8:dc:ee:8e:
73:0a:1f:af:f5:b2:9d:eb:6c:08:25:c2:71:e7:85:
8d:26:62:37:cb:44:5f:16:e9:67:51:48:76:28:51:
41:cb:66:21:4d:5c:3b:8f:ad:04:d8:bc:8a:f0:3a:
e8:70:ea:05:17:fd:33:76:70:28:72:7b:47:43:ce:
f5:ee:84:08:8c:31:f5:29:34:16:d9:30:79:f1:48:
6e:f2:0d:0e:92:18:a1:6e:30:e5:f8:0f:4c:78:69:
f2:6b:4f:42:ee:83:4b:8f:c8:5c:ef:d8:27:38:69:
db:e4:74:8f:21:ad:e1:3c:51:e6:b9:1f:db:38:0a:
ed:e4:8e:23:3b:30:f0:46:c1:51:47:ff:d6:35:1e:
99:29:49:b2:44:cb:0c:37:83:6e:a0:72:5b:8f:ad:
a5:35:57:91:0b:1e:68:63:0b:67:f3:c7:c9:0f:66:
b0:9f:79:ea:5f:0a:1d:bb:ba:10:1c:5d:2d:16:45:
6d:ed:87:70:fd:dc:ec:1c:b8:d4:dd:9c:e9:19:11:
70:81:88:c2:12:81:39:23:82:e6:84:fe:d3:8f:4c:
93:c6:b8:ec:66:0f:fc:a0:6b:c3:15:bd:a7:42:9f:
cb:a6:8c:6e:37:1e:de:5b:4c:0d:fd:22:83:56:71:
13:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:54:95:BE:C1:35:83:2B:AD:80:F6:45:D5:73:7A:61:4C:35:61:35
X509v3 Authority Key Identifier:
keyid:6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:46:5d:36:4e:26:d8:7d:fb:ba:a2:77:f3:81:a7:03:2a:f8:
b7:2d:c6:64:29:95:b5:36:96:c7:e4:ee:44:07:2e:60:ed:23:
34:2d:1a:f0:78:00:80:c8:72:fd:ad:b0:17:02:8a:d1:35:97:
97:c4:05:8d:71:a7:95:1f:e1:5f:6e:07:7b:c2:c3:c2:72:ab:
5f:7d:45:43:7b:fe:68:f5:b5:24:24:80:73:16:bd:9f:f9:52:
10:dc:fc:13:14:17:e2:8c:90:be:3f:a4:86:4a:5d:d3:34:11:
5f:cb:08:b2:32:e1:77:dc:1f:ce:0c:c8:cf:e3:cb:3b:89:20:
a7:11:b0:3e:19:92:0a:7b:fc:4f:57:fc:13:ae:04:e6:e0:2c:
0b:10:ab:70:7a:45:f7:fc:fa:c4:4e:2f:ed:d8:8c:f3:72:fd:
d0:a9:9d:f9:6f:c3:6b:14:63:42:93:d0:ce:4d:1c:aa:51:87:
c5:af:43:f5:35:6f:f9:fe:f6:13:a5:e8:99:21:f3:21:2a:e3:
9d:e9:40:7a:5c:f4:ad:35:a2:f9:c0:b3:06:6f:d9:01:10:83:
8b:11:bc:1a:7d:08:8b:02:84:5e:71:06:56:20:79:a5:27:04:
d6:de:09:79:81:ff:a0:02:52:c5:11:79:97:eb:31:4f:ce:0d:
5e:7f:0b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:48 2026 by rpki-client