Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
File: bGbVyy-crT9IQ_cUpNxi1yE96-g.mft (raw, json)
Hash identifier: oi+wL7eGSEbV7XXqv+78bX0oFpIgI75fYgX3O51cH2U=
Subject key identifier: 63:9E:9E:D8:AC:FE:2C:0B:2A:84:14:9F:55:F6:8E:9F:93:57:E2:D1
Authority key identifier: 6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
Certificate issuer: /CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Certificate serial: 019D9A07279B4D2F7985CF68F1BB81E8740A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 06:00:53 +0000
Manifest this update: Fri 17 Apr 2026 06:00:53 +0000
Manifest next update: Sat 18 Apr 2026 06:00:53 +0000
Files and hashes: 1: C5jsnVKUNd-QjxAfcYEN208S_pw.roa (hash: hPHsfdIlUzljJe1+AZwmO8/boBM8APNo8d6nTn8lWf0=)
2: bGbVyy-crT9IQ_cUpNxi1yE96-g.crl (hash: MBV/60KAxX+3HUrsefYbJRJ5sKCSEiy+a7BC9twKu0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:27:9b:4d:2f:79:85:cf:68:f1:bb:81:e8:74:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Validity
Not Before: Apr 17 06:00:53 2026 GMT
Not After : Apr 18 06:00:53 2026 GMT
Subject: CN=639e9ed8acfe2c0b2a84149f55f68e9f9357e2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:3d:64:a2:26:97:0c:00:a7:9d:33:bb:50:
15:35:85:ee:ba:9c:59:e1:fc:82:1a:84:91:67:e3:
57:90:6a:08:d8:30:a5:58:84:15:e9:91:86:70:47:
59:c0:be:46:f0:32:b4:1d:d7:1d:5f:93:6a:31:d8:
b5:4d:62:ae:14:04:83:26:9e:0f:6a:d5:c0:dd:da:
be:70:a5:65:63:c0:a5:3c:dd:35:ce:5d:f0:66:32:
ea:9d:7c:4b:86:0e:e3:30:93:ca:f7:a8:2a:ce:de:
ee:ea:77:59:48:08:38:cb:51:04:1f:fa:b7:b6:60:
55:b8:7c:f9:57:ec:79:40:76:71:3a:61:b1:fa:79:
fe:16:8a:ce:df:41:7d:30:32:37:47:44:e1:ba:2a:
b0:ff:1e:be:f7:b3:e1:db:3a:05:99:c7:13:44:db:
45:ac:20:ec:67:1c:cf:11:76:85:03:52:85:98:06:
9d:f8:28:77:08:27:a9:ca:55:0f:fd:06:e2:9f:5b:
9e:b8:27:02:cb:83:52:70:28:22:65:da:a9:17:64:
53:60:c0:3a:21:8d:c3:7d:47:1f:c0:eb:43:a9:98:
2c:a5:01:0e:16:4c:ce:3d:ab:f2:91:87:98:ea:3d:
f0:25:e6:fd:b5:b2:c6:54:d9:ae:c2:6a:15:28:ad:
f6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9E:9E:D8:AC:FE:2C:0B:2A:84:14:9F:55:F6:8E:9F:93:57:E2:D1
X509v3 Authority Key Identifier:
keyid:6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ec:e2:d7:e8:ee:8f:a4:82:41:24:6f:67:dc:aa:32:e4:ef:
fc:69:fa:b9:be:97:9d:ec:92:2b:38:93:f7:de:8c:2a:88:07:
c2:bb:5b:bd:18:21:e4:67:c7:79:12:2c:93:00:3f:5c:d7:c2:
bd:50:3f:15:de:0b:66:7c:4c:f7:71:6f:49:42:94:1e:50:2a:
52:fc:58:e5:7d:9e:f4:0e:4e:81:5d:c4:08:cc:1c:c0:fd:19:
1a:84:59:83:c4:20:25:19:92:5b:df:26:0c:59:0e:f9:4b:f1:
46:dd:38:b7:f0:d0:82:ac:a8:fd:73:e7:a6:48:ee:71:56:32:
5d:ec:3a:e1:b4:97:52:58:a0:85:04:37:4c:d4:c0:5d:22:d9:
94:3b:ed:e7:9d:55:4c:d3:4a:ac:f2:a2:91:b3:15:37:51:ae:
bf:54:03:1c:ae:73:ad:a0:47:80:e0:e8:a8:4e:61:e7:81:b7:
05:83:de:db:cb:48:b4:dd:44:8e:a5:46:a8:52:fe:3b:3a:67:
62:0a:50:6f:05:e2:92:26:6e:fe:bb:23:63:5c:16:88:34:c1:
f1:d7:e4:10:cb:1c:7b:ca:b3:1e:99:13:80:e9:58:b6:95:99:
ed:61:f0:7f:95:bb:b4:3f:71:dc:a4:bd:17:99:09:89:2a:06:
2f:79:5e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:36:04 2026 by rpki-client