Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: 7x3NnI7l7DKMa8md0+Gdjr5UJhsU4jnryT/xI5lKb5E=
Subject key identifier: 9C:02:47:24:7A:E1:6E:58:72:57:2B:7D:8A:B4:A9:F4:77:04:43:04
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 019DA4F8D5880870F5B4EEA3F1B059074D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 15EB
Signing time: Sun 19 Apr 2026 09:01:04 +0000
Manifest this update: Sun 19 Apr 2026 09:01:04 +0000
Manifest next update: Mon 20 Apr 2026 09:01:04 +0000
Files and hashes: 1: 2XpRI5kbe2GcxnCcvXnUxOpReg8.roa (hash: er8I9IPQk+o7pRxbPQb/bNgm7tOw9wB8trgzpv++Gow=)
2: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: 21oZO9hcloSQBlwE8D1x2XpsTT+dGezib17l2W+Gsgw=)
3: zeWDjXMa5d0w5AALex0oOqBNvc4.asa (hash: HCrT/rSODMrRMJuTFQic3exBhgbdh+nyEk9+AkA7lQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:d5:88:08:70:f5:b4:ee:a3:f1:b0:59:07:4d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Apr 19 09:01:04 2026 GMT
Not After : Apr 20 09:01:04 2026 GMT
Subject: CN=9c0247247ae16e5872572b7d8ab4a9f477044304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:cb:a8:17:15:57:97:4a:52:1e:88:36:36:
ba:a3:87:41:b5:0c:d9:e4:04:e6:ef:3d:5d:4c:a9:
20:ea:d2:88:d3:85:72:49:44:18:20:5f:d3:3f:f2:
e1:5b:6c:f2:d3:c2:f6:7e:e0:a0:74:1c:e4:21:29:
bb:58:28:9d:ff:1e:5a:11:3c:28:e6:e1:6f:93:1f:
5f:67:a9:f2:05:04:a9:7c:46:75:f7:9b:76:59:b7:
43:3e:f4:eb:c4:b0:6c:54:f7:f3:d6:08:0b:1c:74:
7b:fa:c6:d4:be:5b:b2:54:d3:cd:cf:dd:6d:43:33:
d2:5f:30:43:6c:f2:b8:9e:01:53:04:e5:3c:aa:41:
05:7d:ba:21:67:ac:7a:50:af:70:72:53:94:eb:4c:
45:39:b8:38:b6:69:5e:1b:6a:b3:30:a1:22:98:96:
b4:f4:20:e6:6a:0d:57:36:98:d0:77:be:9c:10:0c:
75:56:21:2d:98:89:5c:ec:a2:b6:cb:13:a5:2a:e2:
03:21:89:f7:d4:69:ab:5c:c5:db:51:83:3d:30:8d:
10:7b:c2:ff:eb:fb:43:74:64:89:10:65:c4:8a:0d:
c3:e3:26:aa:2e:54:70:c1:20:a3:75:00:a2:d6:86:
10:fd:5e:65:1d:e8:97:73:e0:b5:62:e0:f4:b5:05:
47:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:02:47:24:7A:E1:6E:58:72:57:2B:7D:8A:B4:A9:F4:77:04:43:04
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f3:74:6a:a1:25:5f:23:8c:14:6e:9b:f5:77:ea:c6:e7:0f:
30:97:53:ca:9f:5f:f3:d0:4c:4a:14:ab:bb:3a:16:27:66:4c:
5d:93:eb:a0:a7:d6:16:70:34:d1:7e:0a:85:99:f8:02:b3:b5:
11:94:86:fa:6f:54:bb:be:e7:4a:1c:1b:52:f1:e9:09:6d:24:
c0:86:09:93:5b:ce:10:81:11:34:c4:9e:ba:45:ff:a3:0c:60:
4c:23:ae:18:0d:cf:07:6a:d4:86:74:e9:b6:17:57:cc:3d:03:
47:09:e2:b9:97:29:e9:59:6d:71:81:e4:7e:06:8a:b2:5d:48:
c8:bc:34:c3:54:ab:9e:a3:8f:b8:b1:f7:df:3d:5c:6c:15:4b:
5d:e5:8f:19:17:30:7d:3c:5f:9d:b4:08:69:1d:21:43:64:06:
e4:cb:11:78:99:2c:ed:b9:24:77:5c:24:73:ed:b7:c4:8e:39:
84:1b:9a:45:04:56:60:40:07:a7:24:bd:18:a9:86:02:b3:0b:
88:b5:0d:67:7c:98:fe:b2:4b:6e:0d:df:ba:00:70:d7:07:15:
a8:54:7a:cb:6c:73:cb:b5:25:e0:04:87:a5:1c:7e:9f:b0:25:
39:d6:7b:86:50:17:93:da:5e:f7:7a:29:74:62:96:1a:4a:3c:
ca:1b:c0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:09 2026 by rpki-client