Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
File: BDqcNdnhovTTSnVPom0gNleEchg.mft (raw, json)
Hash identifier: hbh1yQN+eC1P9xUyO2L0GBfREoVBSEacKwao8kc/jxI=
Subject key identifier: B4:D1:E7:CA:DF:5B:10:20:87:10:DE:2B:76:1A:3B:75:95:9C:4D:21
Authority key identifier: 04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
Certificate issuer: /CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Certificate serial: 019D98BDACEE27DAD294427E2699ED7F5A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
Manifest number: 16FA
Signing time: Fri 17 Apr 2026 00:01:00 +0000
Manifest this update: Fri 17 Apr 2026 00:01:00 +0000
Manifest next update: Sat 18 Apr 2026 00:01:00 +0000
Files and hashes: 1: BDqcNdnhovTTSnVPom0gNleEchg.crl (hash: mMHsd0cbmA8qyJa5GE1W6Dq9HL+GJSHJAlat+JQJCNA=)
2: lTfd7GgHfFfG-NrFVv4P-oURL84.roa (hash: flnE10R0DAa5/66iQpSm47J0K/6sHRptDOR5dGtHv+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:ac:ee:27:da:d2:94:42:7e:26:99:ed:7f:5a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Validity
Not Before: Apr 17 00:01:00 2026 GMT
Not After : Apr 18 00:01:00 2026 GMT
Subject: CN=b4d1e7cadf5b10208710de2b761a3b75959c4d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:bd:db:68:db:ab:29:4d:0d:e9:5d:56:87:
de:97:94:83:21:d4:1a:52:05:7f:4a:96:ae:58:d0:
7b:b8:32:d0:ee:ca:8f:bc:d1:df:f3:15:5c:ad:ef:
11:6e:a6:8c:8d:3b:17:c3:cb:d7:d5:e9:1b:f5:ed:
8c:ab:48:57:97:be:97:99:68:7e:2f:a4:9d:7b:e7:
85:fb:79:bf:09:ae:57:01:a3:11:cf:49:e6:8e:63:
aa:89:65:e1:1b:64:af:66:05:7d:1b:2c:db:26:7f:
22:15:23:e2:5f:9c:6f:f4:6c:1d:13:28:aa:9b:a5:
ac:8e:cf:74:d3:ed:6a:9b:c4:5a:7a:e5:47:63:0b:
73:17:ac:a9:cc:42:7b:43:18:b1:e1:0f:94:1d:a6:
d9:47:52:e2:22:d5:14:29:6c:91:04:95:8d:e4:04:
c1:67:24:10:0f:b0:b4:58:5b:08:58:77:51:29:a0:
db:cd:a0:dc:f3:8f:78:89:55:c8:86:8c:36:25:e1:
a0:8e:ca:32:b9:11:b3:d9:26:22:29:3d:cf:36:66:
79:1b:02:36:47:37:7e:94:50:b5:f8:d5:fb:7f:d1:
03:88:0a:a2:f7:d9:eb:86:39:d0:58:f7:c8:18:0d:
a1:09:a8:36:ce:70:95:d0:57:d0:33:5d:1b:c3:c8:
08:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D1:E7:CA:DF:5B:10:20:87:10:DE:2B:76:1A:3B:75:95:9C:4D:21
X509v3 Authority Key Identifier:
keyid:04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:2a:3e:5a:3e:dc:89:d2:5a:0a:68:92:b5:83:15:52:e7:6c:
9b:c9:51:d9:f4:93:2f:54:c9:cc:08:37:99:76:2c:08:85:76:
74:99:44:30:fa:29:85:68:88:d9:ee:21:eb:49:a5:5a:53:43:
1f:da:37:23:b4:8a:08:f6:97:9b:19:37:36:65:f9:fb:b2:4b:
f3:77:dd:ea:05:b0:d6:81:40:ab:1c:74:93:e4:47:8b:c7:0c:
cb:e8:82:ac:75:66:91:b2:63:de:ee:23:74:8d:37:f0:64:66:
3a:b8:d8:83:ef:23:cd:35:c4:67:cb:ea:88:e2:7e:b0:9a:d1:
a5:58:bb:b2:ee:06:81:8e:6a:04:c7:7e:59:b3:bc:ee:69:53:
42:01:6e:df:1d:4f:78:44:27:53:c9:cd:d6:a0:26:d3:0e:2a:
94:8a:3b:28:7a:5b:d4:e7:2b:e9:1e:2f:90:19:8d:6e:be:f8:
c6:77:e0:7b:4d:0f:38:42:83:4b:5e:6d:e3:39:ac:5c:df:8e:
d9:16:70:6c:92:fd:d4:af:47:7b:65:05:d7:bc:ba:70:d5:18:
8a:f8:ab:dd:38:dd:9f:a5:87:cc:61:f1:77:6b:65:ef:c0:2d:
76:0a:80:6e:fe:c3:51:6c:a9:00:9d:05:98:9a:23:3d:a0:42:
25:b1:b9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:50 2026 by rpki-client