Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json)
Hash identifier: OlJ5d9fL6lCUmyrErffB69pyWH08NOUBfcPxT0JHaiQ=
Subject key identifier: 76:E7:6D:0D:00:C2:1D:42:3F:80:AA:C7:B4:B8:B9:A0:8F:57:1B:24
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial: 019D9AABD046259B9D4B3C52E7A44859FED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 09:00:44 +0000
Manifest this update: Fri 17 Apr 2026 09:00:44 +0000
Manifest next update: Sat 18 Apr 2026 09:00:44 +0000
Files and hashes: 1: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: 2nP+OQUt6vYCv9umMRWnIYup6GW93Nqlhshi36jTNb4=)
2: NnEIJrnmhkwELld_U_QBTUbqU90.asa (hash: 5/Cpmz3yamVpUjVaZZVnuNujoVdFO+RPvIdZmRu6am4=)
3: aToK1H8Eu9LQyX9O96VpmV4-xH4.roa (hash: NOHh63b/9WqU00dOh312eJJg1BRneOILOEiJiVt9VO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:d0:46:25:9b:9d:4b:3c:52:e7:a4:48:59:fe:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Validity
Not Before: Apr 17 09:00:44 2026 GMT
Not After : Apr 18 09:00:44 2026 GMT
Subject: CN=76e76d0d00c21d423f80aac7b4b8b9a08f571b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:0b:50:ad:8b:1f:ce:91:19:f0:05:bd:37:
a0:e4:1f:a3:82:12:9e:bd:54:c3:66:a9:74:f8:4d:
33:ff:94:01:1b:4c:1c:27:cc:e2:b3:47:d4:eb:5a:
86:93:a6:aa:fc:65:87:6f:cf:18:6a:07:34:ca:fb:
6d:2a:8f:70:f5:a9:dc:69:48:51:8f:70:4f:da:8f:
ba:8c:0e:54:a2:6e:53:3e:5b:73:4c:85:ce:92:e9:
47:fa:36:9f:99:5f:f7:8c:e1:31:1b:c6:72:76:78:
c8:fe:e2:6d:80:bf:7b:0d:43:5e:3c:af:0d:50:d1:
7f:4a:88:8c:7e:3c:24:2b:ff:33:bf:da:b3:e2:a1:
fd:de:fa:40:06:4b:19:a1:37:e4:c6:2d:fc:b1:98:
df:08:ef:a9:97:63:bf:2b:2f:4e:09:6d:10:19:00:
b5:9e:ac:c3:3e:5d:d3:f5:8d:91:c8:f4:aa:70:d5:
17:4e:88:1f:8d:0c:3f:df:06:09:ec:dd:41:be:33:
38:df:eb:d3:63:ac:a1:c4:69:6e:f5:26:20:27:a4:
02:98:ae:24:99:97:fd:73:d0:72:d1:12:72:65:36:
7d:af:03:1b:c1:54:2d:89:ab:6a:1d:c4:76:1e:38:
75:b0:dc:4a:c6:31:d6:98:0f:31:ad:09:9c:f6:13:
0b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E7:6D:0D:00:C2:1D:42:3F:80:AA:C7:B4:B8:B9:A0:8F:57:1B:24
X509v3 Authority Key Identifier:
keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:50:37:e9:99:cf:97:4e:f3:3e:a9:b0:bb:8e:85:d2:a9:1b:
eb:d0:83:24:ef:ad:e7:01:8a:e4:49:3f:b0:d1:66:62:a1:ed:
ca:7b:81:a6:ca:34:01:45:a2:11:fb:b7:de:be:00:24:b6:26:
72:6b:f2:28:22:21:1b:31:4a:b5:d0:22:b3:53:ff:ed:f1:cd:
8f:59:24:93:be:b3:53:e0:d1:e4:22:7b:4f:a2:c3:6a:c6:ad:
13:94:ae:04:3c:7c:a6:31:5a:d4:ad:41:1b:99:48:35:12:d7:
46:08:27:ce:4d:c1:ee:b2:7d:8e:50:aa:6b:96:1a:de:ff:88:
91:14:7e:d4:5f:81:a8:cb:60:50:d9:30:cb:7d:b7:3e:21:bb:
bc:69:e8:ab:e7:b3:4b:94:d2:50:70:30:0b:72:60:bf:08:78:
49:cc:3b:8f:c4:f2:72:2a:c7:6f:96:50:60:5f:7c:9b:e4:1e:
e5:ba:b9:38:48:51:e9:90:7a:5c:c2:8f:13:ed:89:51:5b:78:
e0:3e:80:33:1e:b4:8f:1f:7c:77:af:1b:fd:72:b4:c3:5c:0c:
6d:f6:7b:35:a8:32:f1:5f:21:65:4a:72:ac:b5:71:37:c2:e8:
7b:69:a1:8e:b9:b2:3a:67:b2:13:ee:bd:ef:2f:f6:2e:93:13:
45:af:58:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq9BGJZudSzxS56RIWf7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0OGIwYzMzNzc2NjYzY2I0MzIxYTEwOGYyZjRkMTYzNWI1
ZDJkOGEwHhcNMjYwNDE3MDkwMDQ0WhcNMjYwNDE4MDkwMDQ0WjAzMTEwLwYDVQQD
Eyg3NmU3NmQwZDAwYzIxZDQyM2Y4MGFhYzdiNGI4YjlhMDhmNTcxYjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI0LUK2LH86RGfAFvTeg5B+jghKe
vVTDZql0+E0z/5QBG0wcJ8zis0fU61qGk6aq/GWHb88Yagc0yvttKo9w9ancaUhR
j3BP2o+6jA5Uom5TPltzTIXOkulH+jafmV/3jOExG8ZydnjI/uJtgL97DUNePK8N
UNF/SoiMfjwkK/8zv9qz4qH93vpABksZoTfkxi38sZjfCO+pl2O/Ky9OCW0QGQC1
nqzDPl3T9Y2RyPSqcNUXTogfjQw/3wYJ7N1BvjM43+vTY6yhxGlu9SYgJ6QCmK4k
mZf9c9By0RJyZTZ9rwMbwVQtiatqHcR2Hjh1sNxKxjHWmA8xrQmc9hMLkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbnbQ0Awh1CP4Cqx7S4uaCPVxskMB8GA1UdIwQY
MBaAFASLDDN3ZmPLQyGhCPL00WNbXS2KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80YmI3ZjQtOTcwOS00MTA5LWIzMGUt
MjQxMTZjYjZlOTg2LzEvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80YmI3ZjQtOTcwOS00MTA5LWIzMGUtMjQxMTZjYjZlOTg2
LzEvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFA36ZnP
l07zPqmwu46F0qkb69CDJO+t5wGK5Ek/sNFmYqHtynuBpso0AUWiEfu33r4AJLYm
cmvyKCIhGzFKtdAis1P/7fHNj1kkk76zU+DR5CJ7T6LDasatE5SuBDx8pjFa1K1B
G5lINRLXRggnzk3B7rJ9jlCqa5Ya3v+IkRR+1F+BqMtgUNkwy323PiG7vGnoq+ez
S5TSUHAwC3Jgvwh4Scw7j8TycirHb5ZQYF98m+Qe5bq5OEhR6ZB6XMKPE+2JUVt4
4D6AMx60jx98d68b/XK0w1wMbfZ7Nagy8V8hZUpyrLVxN8Loe2mhjrmyOmeyE+69
7y/2LpMTRa9Y8g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:07:09 2026 by rpki-client