Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
File: bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft (raw, json)
Hash identifier: wgUIxua4s+DC3DqzEOivsdsssbWJ3jmbTOYyHrJm8Rc=
Subject key identifier: 0F:F1:79:EF:0E:21:64:6A:BB:8F:50:58:C0:F8:86:E0:85:8B:51:AB
Authority key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
Certificate issuer: /CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Certificate serial: 019D99D0BA9E5B66899971126CC755190FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:01:26 +0000
Manifest this update: Fri 17 Apr 2026 05:01:26 +0000
Manifest next update: Sat 18 Apr 2026 05:01:26 +0000
Files and hashes: 1: bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl (hash: Aev9Sut9qRC/JYof9Ad1e30F0v2j/X8QU7aWVkopigE=)
2: etj0sShjec2CBR92UCLlU4OhoHU.roa (hash: T3WyGa+EDgJcqKV7smiXEGZnclSaocbCUmsz9FP6vjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:ba:9e:5b:66:89:99:71:12:6c:c7:55:19:0f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Validity
Not Before: Apr 17 05:01:26 2026 GMT
Not After : Apr 18 05:01:26 2026 GMT
Subject: CN=0ff179ef0e21646abb8f5058c0f886e0858b51ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:b5:f1:e7:9e:9a:d8:7f:8a:ce:be:09:a3:
05:be:1c:9d:9a:cf:7b:83:f2:6f:bd:22:49:f4:9d:
aa:6c:a7:3e:ce:7f:8a:4e:ef:b8:78:5a:c8:a9:50:
75:6c:0a:8b:15:b4:14:a3:51:06:4d:e6:a4:24:dc:
b0:8f:eb:c1:37:5c:cf:fc:a6:29:79:23:cd:26:0c:
c7:a7:f0:95:7d:68:02:04:78:dd:42:99:21:25:56:
14:b2:a9:ef:14:e7:45:aa:82:e8:bb:8c:3e:53:fd:
11:32:0c:72:10:c8:d3:cd:ea:e0:52:de:29:87:f3:
4d:09:55:5f:14:a5:34:06:c8:36:4b:0f:4f:35:c7:
f2:cd:11:11:d0:13:f7:97:7d:4f:bf:9c:e9:9b:e6:
f9:a8:da:f3:5a:ce:44:1f:7c:e6:1d:b5:02:14:4e:
e1:1f:54:c2:7c:65:40:5c:ff:f6:13:10:72:11:36:
01:2a:35:a8:1a:63:c6:0f:06:59:a7:7e:d1:c7:74:
fd:bf:53:af:0c:14:58:75:ed:c3:4d:3d:95:7d:46:
8c:49:ed:81:ba:fe:5d:4d:14:73:dc:ba:c6:1f:dc:
05:d7:a5:eb:cf:73:3d:76:8f:6f:b8:1f:4c:f6:9e:
fc:9b:be:ca:aa:19:62:bd:6e:40:6d:1e:7d:85:89:
c6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F1:79:EF:0E:21:64:6A:BB:8F:50:58:C0:F8:86:E0:85:8B:51:AB
X509v3 Authority Key Identifier:
keyid:6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:96:54:23:58:58:85:f7:3a:3f:0d:11:5f:ec:df:d1:6d:28:
d4:ff:23:71:78:93:93:67:f5:25:8f:ef:1d:71:3e:7c:9c:1b:
72:6e:82:cb:8f:b1:39:86:42:ef:aa:4f:75:92:11:f8:ee:6d:
a3:f3:02:70:bf:eb:41:79:6e:0b:6a:b5:bc:7a:e9:fc:5d:37:
71:67:3c:1e:be:18:b1:d0:35:69:eb:a3:a7:7f:3b:64:f7:09:
aa:cc:e4:bc:42:e1:7d:9f:66:a2:2b:28:04:3f:b7:e6:8d:80:
07:41:6d:b3:20:15:51:58:02:dc:47:99:e6:d3:e2:0b:52:bb:
65:29:c8:af:99:c9:5a:df:0b:58:83:ec:64:d8:d0:9b:85:22:
85:96:5c:5f:e8:b9:e6:0e:de:10:c0:45:f6:1d:8e:c7:bc:6a:
c0:89:f3:51:99:0c:6d:88:c1:7c:82:06:c5:49:1d:ad:32:6c:
37:0d:9e:dd:08:7f:cb:46:48:71:6a:55:e1:e5:08:20:f7:d2:
08:e2:20:4f:03:f5:1b:da:5f:f8:ab:88:2a:2e:13:2f:29:3a:
7a:d5:13:43:a7:df:ee:6e:4d:c5:ef:d0:36:dd:b8:2a:cf:41:
d3:ca:43:30:52:73:58:07:e3:79:b5:d2:5d:27:d8:1c:e4:63:
17:7e:ab:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:05:09 2026 by rpki-client