Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
File: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft (raw, json)
Hash identifier: HRCXQ0nf8FUlb29i0xGiWS8VFtC02SBNzqXoJ273vnI=
Subject key identifier: 2C:97:10:5A:1F:3F:4E:2E:EE:C5:72:DD:F6:04:28:3A:04:B9:0E:DB
Authority key identifier: 6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
Certificate issuer: /CN=6d005198b74572a156ab63f23085897bd3ccd41b
Certificate serial: 019DA3E6089C45CDEBD487A5F7DB94AEF280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
Manifest number: 04EB
Signing time: Sun 19 Apr 2026 04:00:54 +0000
Manifest this update: Sun 19 Apr 2026 04:00:54 +0000
Manifest next update: Mon 20 Apr 2026 04:00:54 +0000
Files and hashes: 1: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl (hash: HTc/XnKueawPRrd4pJYt+Qehvck+4JS+fjXGvnFoHS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:08:9c:45:cd:eb:d4:87:a5:f7:db:94:ae:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d005198b74572a156ab63f23085897bd3ccd41b
Validity
Not Before: Apr 19 04:00:54 2026 GMT
Not After : Apr 20 04:00:54 2026 GMT
Subject: CN=2c97105a1f3f4e2eeec572ddf604283a04b90edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:64:47:37:44:9d:80:b2:5c:91:b9:48:d3:39:
9d:3b:59:18:7d:31:af:b7:80:b5:87:2e:9d:0e:00:
b4:fb:dd:50:2a:52:a4:ef:e9:cd:2e:d7:8f:b8:02:
34:79:9a:db:3d:fa:7d:43:7b:bf:6a:43:48:58:58:
ba:79:aa:f2:83:01:78:cb:74:2c:f0:0c:d0:ea:f3:
de:b9:c5:db:0e:d9:bc:fd:c6:96:97:01:ec:af:66:
e2:d8:50:3d:27:4a:91:a9:87:79:e5:f0:d9:19:b6:
9d:e4:24:8c:7e:e4:70:bb:db:d9:7c:55:6d:98:b0:
1c:cb:e8:d3:f3:39:aa:91:5c:f6:32:09:d1:fa:5a:
d9:d4:5a:88:fe:22:90:ff:82:7d:0a:08:5d:71:30:
aa:5f:38:1c:46:15:04:b9:87:45:69:49:eb:52:66:
b0:86:88:82:cb:f3:b8:0a:09:92:b5:9d:98:b5:4e:
75:6b:79:52:cd:90:46:a4:f1:e9:d7:dc:51:01:b5:
96:42:57:df:d3:a3:6a:0f:18:07:e4:48:11:30:87:
86:ad:b0:22:73:1e:9d:b5:e4:0e:fb:81:7b:eb:72:
e2:0a:17:c0:d8:85:60:09:d9:0a:50:54:81:ee:37:
d7:71:9d:3a:2a:f6:02:28:9e:f5:47:84:15:97:68:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:97:10:5A:1F:3F:4E:2E:EE:C5:72:DD:F6:04:28:3A:04:B9:0E:DB
X509v3 Authority Key Identifier:
keyid:6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1b:70:53:c9:ac:db:f2:77:22:a1:e4:ba:3b:69:6a:6d:7b:
8a:3e:21:40:1c:4b:29:38:8e:24:87:7c:c3:0e:12:c3:78:fa:
8f:a8:df:bb:cc:cf:72:e5:8e:35:72:65:32:54:99:d4:a3:9b:
bc:cb:c8:d3:e8:8f:be:1c:ee:90:2a:d1:d0:8c:32:7b:5b:e8:
84:f1:fa:5d:ec:ce:ee:39:a4:16:69:7d:93:ad:de:04:cd:47:
9c:32:78:9a:4a:93:8c:83:d2:97:9a:72:35:3a:1f:ba:a8:77:
af:4f:18:4c:59:5e:aa:a5:a1:77:b1:06:62:f5:c3:b5:b5:dc:
07:66:fb:f1:ba:62:fc:32:d2:7e:19:f8:d8:46:95:25:d5:4f:
19:ba:69:11:91:87:43:e6:90:7d:e0:fa:5c:29:fe:3e:eb:d3:
bc:9f:4d:93:33:37:2a:69:60:fe:20:db:3b:e3:01:a9:13:0b:
3a:4b:77:42:00:3d:ce:4c:94:31:9f:7b:45:b8:a4:e7:a0:aa:
58:ea:01:db:bb:27:99:be:95:a4:a7:21:9c:7c:d1:6a:f5:55:
c0:c2:79:3a:2f:d6:03:ab:fd:6c:16:d8:54:7c:e9:76:bf:c2:
83:e3:1d:7a:48:88:51:c2:07:a2:89:4a:e1:5a:23:d4:9b:31:
83:c7:0e:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5gicRc3r1Iel99uUrvKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMDA1MTk4Yjc0NTcyYTE1NmFiNjNmMjMwODU4OTdiZDNj
Y2Q0MWIwHhcNMjYwNDE5MDQwMDU0WhcNMjYwNDIwMDQwMDU0WjAzMTEwLwYDVQQD
EygyYzk3MTA1YTFmM2Y0ZTJlZWVjNTcyZGRmNjA0MjgzYTA0YjkwZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mRHN0SdgLJckblI0zmdO1kYfTGv
t4C1hy6dDgC0+91QKlKk7+nNLtePuAI0eZrbPfp9Q3u/akNIWFi6earygwF4y3Qs
8AzQ6vPeucXbDtm8/caWlwHsr2bi2FA9J0qRqYd55fDZGbad5CSMfuRwu9vZfFVt
mLAcy+jT8zmqkVz2MgnR+lrZ1FqI/iKQ/4J9CghdcTCqXzgcRhUEuYdFaUnrUmaw
hoiCy/O4CgmStZ2YtU51a3lSzZBGpPHp19xRAbWWQlff06NqDxgH5EgRMIeGrbAi
cx6dteQO+4F763LiChfA2IVgCdkKUFSB7jfXcZ06KvYCKJ71R4QVl2gA/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyXEFofP04u7sVy3fYEKDoEuQ7bMB8GA1UdIwQY
MBaAFG0AUZi3RXKhVqtj8jCFiXvTzNQbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC85NzVmM2MtYWY0YS00MzdiLTg5YjEt
Mjg0ZTUxMjNlMjlmLzEvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC85NzVmM2MtYWY0YS00MzdiLTg5YjEtMjg0ZTUxMjNlMjlm
LzEvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhtwU8ms
2/J3IqHkujtpam17ij4hQBxLKTiOJId8ww4Sw3j6j6jfu8zPcuWONXJlMlSZ1KOb
vMvI0+iPvhzukCrR0Iwye1vohPH6XezO7jmkFml9k63eBM1HnDJ4mkqTjIPSl5py
NTofuqh3r08YTFleqqWhd7EGYvXDtbXcB2b78bpi/DLSfhn42EaVJdVPGbppEZGH
Q+aQfeD6XCn+PuvTvJ9NkzM3Kmlg/iDbO+MBqRMLOkt3QgA9zkyUMZ97Rbik56Cq
WOoB27snmb6VpKchnHzRavVVwMJ5Oi/WA6v9bBbYVHzpdr/Cg+MdekiIUcIHoolK
4Voj1Jsxg8cO5Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:26:22 2026 by rpki-client