Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
File: b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json)
Hash identifier: YvBAupXSiCcRWEP5dFISYsAM0mWqSSKWx885dm7lGHw=
Subject key identifier: B6:78:EC:93:29:DB:30:3C:B7:05:57:79:0F:F4:52:F4:79:AA:DD:75
Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
Certificate issuer: /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Certificate serial: 019D9C6370D4EF149D32E517F93F553EB3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 17:00:55 +0000
Manifest this update: Fri 17 Apr 2026 17:00:55 +0000
Manifest next update: Sat 18 Apr 2026 17:00:55 +0000
Files and hashes: 1: QowN0LD_MpyH9XeoraRCQC23xeg.roa (hash: hLxc7NbhUpaHA5kGsA3jfQYRDHphB6U/6NiFfrvj7Nw=)
2: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: uIy+gKrljiZaKG03zZJ7z37EgDqXGEiBpyY17KCMkns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:70:d4:ef:14:9d:32:e5:17:f9:3f:55:3e:b3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Validity
Not Before: Apr 17 17:00:55 2026 GMT
Not After : Apr 18 17:00:55 2026 GMT
Subject: CN=b678ec9329db303cb70557790ff452f479aadd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:61:23:56:16:b4:2f:57:6e:26:0e:81:53:cc:
22:e1:48:59:c4:e1:b0:1d:28:6f:94:d2:74:52:a3:
54:27:aa:04:6c:9c:14:42:2e:69:f2:8f:c3:5d:89:
ab:3c:7f:dc:42:62:ee:94:c6:49:cc:ec:3b:e4:90:
5f:91:f9:47:e3:1a:03:00:e8:5a:ec:3a:a0:0b:72:
41:33:65:62:d3:8b:a3:17:7d:42:78:c0:b6:98:c5:
df:ad:68:fc:04:3e:36:8e:da:66:cf:e3:4c:58:30:
43:4e:eb:ff:75:21:50:72:45:59:d0:f7:5e:66:fa:
21:12:da:99:b6:0a:69:74:40:89:61:8a:a5:a4:8b:
36:20:bd:96:99:18:8a:c0:2e:14:be:b2:bc:32:5e:
ce:78:9c:87:42:72:b6:fd:a9:26:e6:97:31:7c:6b:
e5:70:18:fd:c2:fa:0b:da:dd:44:e2:2c:3c:b7:14:
ab:57:3b:d8:05:a4:bd:0e:9b:28:48:93:00:6c:a2:
e5:25:92:18:91:3f:0b:b9:6d:5f:66:b9:f0:59:5f:
45:cb:67:f7:1e:9d:47:7a:cf:da:89:bc:74:9a:e1:
86:d5:e5:5a:e4:5a:ad:7d:b3:b7:a4:c9:85:9e:51:
79:73:94:3f:93:70:ab:cd:ca:1b:2c:f6:36:aa:6b:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:78:EC:93:29:DB:30:3C:B7:05:57:79:0F:F4:52:F4:79:AA:DD:75
X509v3 Authority Key Identifier:
keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a2:f5:b1:44:a6:30:69:a8:80:35:e7:ae:dd:1b:c5:ce:72:
8f:c4:9a:56:7f:38:2b:5e:34:17:09:5d:1c:b1:38:67:fe:02:
51:89:8d:cf:ac:07:05:a8:d6:02:8e:40:e3:d2:4d:83:17:7f:
07:ea:25:de:fc:71:8b:2b:d0:8b:fd:72:9f:dd:34:f4:87:bb:
f5:76:73:46:b6:57:01:17:e3:6a:03:04:f1:54:46:2e:eb:0e:
84:eb:14:af:a6:f9:67:ed:71:04:3e:44:27:ef:d0:c3:e5:52:
a1:c6:1d:e7:22:a2:52:17:e1:46:11:52:c0:25:50:d6:cf:66:
49:3a:14:72:a9:23:fe:3c:f0:a5:cb:41:d1:aa:df:6f:20:e0:
1d:7d:c8:d0:1e:4f:d4:4d:d8:88:af:e7:7b:ae:47:12:d8:fe:
dd:c7:61:b1:33:6b:c1:b8:10:bc:f9:60:8b:24:73:47:de:71:
ce:90:98:1e:72:06:d1:ae:a5:a7:35:51:3e:3e:9e:d3:16:f0:
56:e7:4b:b2:23:63:3a:e1:85:31:a7:b4:12:9e:9f:1f:e4:0e:
12:bb:da:e4:15:36:da:e1:32:b1:eb:48:d4:18:63:f9:e1:4f:
94:3a:5b:9e:6b:1a:d2:4a:23:c8:00:eb:b1:be:b6:27:83:be:
5a:2c:91:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:04:13 2026 by rpki-client