Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
File: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json)
Hash identifier: oHE4CGF36bK46Fx67KkhECITwY/eBrXcs+js4TbiYLI=
Subject key identifier: 3D:E5:B7:E2:48:BD:9E:31:14:65:80:C3:C4:B3:7B:3C:04:43:EF:9B
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial: 019D992B1F8414A8A27FE011C9D9CCFB34C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
Manifest number: 0E6F
Signing time: Fri 17 Apr 2026 02:00:33 +0000
Manifest this update: Fri 17 Apr 2026 02:00:33 +0000
Manifest next update: Sat 18 Apr 2026 02:00:33 +0000
Files and hashes: 1: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: zP8hKy/Uzhg3ppghjku6odwYhzfFqBdnYX0AlImGj1E=)
2: zHx4boZUx9mQ4kmi1AyAMn8HdYg.roa (hash: 2evdzACk+oevIsq4yxjXZwXVQi4UVdSShl8e3fPWgbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:1f:84:14:a8:a2:7f:e0:11:c9:d9:cc:fb:34:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Validity
Not Before: Apr 17 02:00:33 2026 GMT
Not After : Apr 18 02:00:33 2026 GMT
Subject: CN=3de5b7e248bd9e31146580c3c4b37b3c0443ef9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:b0:c9:7f:c3:50:99:db:74:1a:9a:71:8f:
18:bf:c9:18:29:95:cf:e0:a1:ee:2d:8b:19:77:3d:
2e:7d:46:37:4b:8c:dc:80:48:24:d1:a5:00:9e:2f:
da:c0:73:01:c5:04:14:ac:87:ef:32:bf:60:50:de:
a7:13:00:2f:9f:26:8c:b4:3d:27:0d:8f:fc:f9:5f:
65:e2:b1:c9:97:6b:65:b0:86:a5:36:e8:a8:5c:f2:
d0:f9:65:54:82:4d:6f:26:33:6e:1c:ba:d2:e7:88:
b3:bc:ca:3a:67:ce:23:66:27:f0:d6:ae:b7:bb:53:
7d:52:10:0d:0d:f0:74:a8:d7:87:d7:9c:20:22:8e:
bd:71:3c:ea:73:f6:dc:72:16:4d:a8:6d:2a:1c:ff:
3a:19:9c:f3:a7:aa:a3:00:54:f7:45:c5:29:42:49:
0a:89:f7:d4:84:c1:fb:e1:15:a7:09:2d:4e:a2:61:
c2:0d:db:1a:44:e5:6a:a6:bd:48:43:25:b2:9a:fa:
82:bd:a1:f5:2e:4b:18:68:e6:1f:ef:1d:0d:ee:95:
43:22:20:de:06:15:4c:7a:23:a0:bb:4a:84:d0:b1:
2a:99:11:ec:13:de:26:95:8c:2f:bf:d0:c3:87:df:
d1:59:dc:33:6c:cd:b4:85:96:4a:75:43:b1:12:14:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E5:B7:E2:48:BD:9E:31:14:65:80:C3:C4:B3:7B:3C:04:43:EF:9B
X509v3 Authority Key Identifier:
keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:7a:c0:7e:8f:fc:16:40:4d:6f:e2:fc:d8:f3:fe:80:17:87:
90:44:2d:78:d8:4b:44:78:c7:64:fb:72:79:67:21:ca:22:6f:
16:8e:82:28:6f:61:4e:81:86:e1:bb:bb:76:70:ec:55:24:1f:
64:d1:65:39:e0:6d:c1:38:33:03:87:21:28:14:4b:20:41:bf:
8a:14:33:06:b7:3f:dd:c1:a5:bc:9f:4a:59:cb:d1:0a:22:ee:
bf:64:42:f2:5f:df:4f:af:b0:d0:54:e8:66:f0:2a:2c:25:66:
ca:d5:30:a2:10:35:28:ce:d7:f2:f8:fa:20:39:12:0c:cc:aa:
0f:24:74:c0:26:60:36:77:07:70:d0:94:14:d5:ee:f3:dc:62:
31:d5:d7:13:b9:26:a4:93:b0:5f:31:c3:92:ea:7d:5d:33:32:
cd:55:eb:e2:86:d8:4d:b5:8f:12:34:01:6d:7d:77:88:dc:5c:
97:54:c3:d4:b9:2c:1d:03:1b:11:83:8a:a3:c1:54:cb:51:f7:
d2:c6:d5:e3:e7:9f:ef:70:b6:60:87:ef:d7:65:f0:cf:d3:e3:
70:af:27:a3:82:35:91:a3:6b:73:ae:c9:1b:5d:34:63:55:7b:
42:3c:52:7b:09:dd:0e:d6:c6:88:f7:60:64:69:98:3f:54:a5:
e7:87:c2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:56:05 2026 by rpki-client