Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier: dm/i8nfpwWpBLOWFFfwDXw/N9A98I2ZQrDrL5O5qtyw=
Subject key identifier: 1A:4C:09:FB:0B:9D:FE:B6:DF:8F:C0:B5:51:81:1B:4B:9A:52:FB:ED
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial: 019D988685373B2C3E353A97D12C52EA27FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number: 18BE
Signing time: Thu 16 Apr 2026 23:00:45 +0000
Manifest this update: Thu 16 Apr 2026 23:00:45 +0000
Manifest next update: Fri 17 Apr 2026 23:00:45 +0000
Files and hashes: 1: 8NckC_oseoG1c4-4ea0CrcpBLdM.asa (hash: 8hX5tr+7WeyJg0xyopH30d0iH2Eoc2imGEvt1yJnVGo=)
2: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: gu+LHwgi9ZEJDhMSgizAoEUE5bD/uCyFtfKqTBR8QKw=)
3: hxaq6eiJQ6KIeDkuFuKpk9DlMmM.roa (hash: xzNRvq9UxlokWK6wW9763CTDxuLBGl6gUz0jxPwvuI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:85:37:3b:2c:3e:35:3a:97:d1:2c:52:ea:27:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
Validity
Not Before: Apr 16 23:00:45 2026 GMT
Not After : Apr 17 23:00:45 2026 GMT
Subject: CN=1a4c09fb0b9dfeb6df8fc0b551811b4b9a52fbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:a5:ea:19:bb:64:5a:9f:e1:34:5b:b9:a3:
bb:e5:a3:e9:44:78:81:2f:1b:cb:73:46:de:99:b6:
03:9d:d1:38:3d:2c:d3:2d:e7:2f:d1:85:77:15:b3:
e7:2d:d2:76:72:95:ca:c9:f0:55:3e:52:24:eb:ba:
93:ec:aa:02:c9:4f:b8:15:2b:73:0d:63:9e:7d:4e:
5b:55:d7:92:27:c1:75:b1:a5:ee:bf:4a:6b:30:5e:
ce:01:60:20:53:8d:0c:b7:4a:a0:cb:89:ee:d7:56:
de:6b:50:33:df:62:87:7f:64:24:2e:d2:62:61:3e:
60:6d:42:2f:02:4c:53:89:af:aa:aa:d6:61:ee:e5:
be:66:27:d4:2f:19:c8:3b:ce:ba:af:51:6d:7d:c6:
11:c1:e4:c3:4f:72:87:23:6f:5b:a5:0b:cf:ea:70:
08:78:3b:7b:9d:79:61:4b:6d:d6:e3:1a:2b:fb:91:
b8:11:80:63:59:85:6b:2b:41:53:75:49:4b:a0:3b:
3d:54:ca:a1:60:2c:29:f0:ef:8e:ef:1d:05:a8:40:
21:51:1d:5e:f2:9e:f5:5c:0e:6a:c6:1c:06:74:19:
4a:43:44:7d:d7:dc:3a:16:df:b5:84:e8:e9:71:f6:
07:9a:a6:7a:7a:51:0d:12:57:ab:43:30:bf:0e:9a:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4C:09:FB:0B:9D:FE:B6:DF:8F:C0:B5:51:81:1B:4B:9A:52:FB:ED
X509v3 Authority Key Identifier:
keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9f:fc:f7:12:4b:64:3e:6c:9a:76:66:7c:20:08:de:0f:ce:
20:66:2d:bd:01:8a:0b:89:fa:49:5f:a6:27:3c:75:1e:dc:66:
ef:ac:19:7d:7e:71:70:82:7d:1a:fc:5b:f0:da:ce:3c:7f:fd:
20:3b:ec:e5:49:b2:a2:d9:d9:ae:b2:35:ed:b3:63:be:3a:e6:
01:28:4d:b4:be:0b:e6:d2:0c:a9:ae:62:8d:ab:31:2d:c0:c6:
7f:8e:ea:0e:8c:d0:6f:ce:b7:b9:87:e1:49:ac:af:25:cb:bf:
ad:08:8f:93:cc:2f:2c:07:ee:3b:93:13:2d:67:fc:80:9a:a0:
be:07:be:45:c0:05:a2:f3:a5:58:76:2d:40:2f:3b:4e:6a:43:
d2:04:92:6e:d5:b9:3d:f2:9b:7b:68:32:cb:8f:43:6d:03:e7:
f5:0a:f6:12:7b:cb:b5:24:40:27:80:bf:94:46:99:4b:ce:22:
12:23:ee:96:33:de:00:dd:72:98:d8:ce:2d:ee:82:5c:77:db:
d0:e5:c8:c1:66:2f:84:3e:54:49:47:10:55:d8:db:94:c1:a0:
7e:d3:7b:f9:6b:90:8f:65:af:4d:58:e7:dc:f4:d1:97:74:dd:
89:36:c6:89:bd:29:9d:9e:6a:57:97:bb:85:80:ed:58:a9:02:
9a:1f:ed:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:53 2026 by rpki-client