Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
File: BKSudHHI82IdUyVtdfEQt0iZeJg.mft (raw, json)
Hash identifier: HeAESTdD8lmg9mRx1Rzqc7Yyh3asO+ZVJCVd6mnO3FM=
Subject key identifier: 2F:40:DF:46:A0:00:2B:83:5E:22:55:C7:8A:8F:68:9B:0B:1F:48:FC
Authority key identifier: 04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
Certificate issuer: /CN=04a4ae7471c8f3621d53256d75f110b748997898
Certificate serial: 019D9C2CBB63E0ACA109CDCD1A1B78ABF88A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 16:01:10 +0000
Manifest this update: Fri 17 Apr 2026 16:01:10 +0000
Manifest next update: Sat 18 Apr 2026 16:01:10 +0000
Files and hashes: 1: BKSudHHI82IdUyVtdfEQt0iZeJg.crl (hash: nc01dFqVkIqdjEGoDaF2HTs7gCbXcElBDk7ubnteDE8=)
2: ZN4yF-e-6U6siCtfTnv-FW1OUx0.roa (hash: I9BYHq4fiuWBb+LO42h3XEWS7qzon5TJhCXafUyINuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:bb:63:e0:ac:a1:09:cd:cd:1a:1b:78:ab:f8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a4ae7471c8f3621d53256d75f110b748997898
Validity
Not Before: Apr 17 16:01:10 2026 GMT
Not After : Apr 18 16:01:10 2026 GMT
Subject: CN=2f40df46a0002b835e2255c78a8f689b0b1f48fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:09:cf:2e:dc:e9:cf:27:91:cd:ae:f6:d7:41:
6d:d8:c0:73:86:48:70:42:41:06:d4:44:2f:de:5a:
57:9a:f0:98:f2:74:98:6f:c3:1b:99:83:e3:d9:1c:
21:d4:47:c7:b9:39:cf:74:99:81:60:6e:d5:44:33:
69:1e:3b:5a:d1:a6:9b:4c:a7:ca:28:2d:90:0a:69:
a9:a0:97:b9:04:21:cc:8b:75:de:a1:82:04:18:87:
86:d4:b4:df:38:89:d3:8c:6d:00:0a:5c:07:b0:ba:
39:9a:6b:d0:1c:00:67:0b:d8:90:e5:c5:6c:3b:b6:
36:9b:60:60:4f:69:b1:0e:db:e8:76:10:37:90:17:
17:e6:47:67:d3:bc:d5:7c:35:f0:55:05:2c:55:1e:
57:92:38:0c:8d:1a:cf:4b:f4:aa:0a:2c:f9:67:a1:
a8:00:3a:b8:65:94:78:ae:02:8b:0f:a9:75:01:b9:
b5:d6:3e:5f:f1:4b:30:57:57:7b:24:29:39:60:b7:
08:9f:df:f7:a1:f6:54:04:0a:fd:18:ba:47:88:33:
42:fa:3b:f9:d2:a6:12:bb:7f:3b:50:a7:25:61:d4:
3c:d5:76:91:4b:83:40:26:49:a8:19:ea:01:1f:1f:
81:c7:95:eb:a1:3b:68:7a:18:f4:60:01:c0:2c:a0:
0d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:40:DF:46:A0:00:2B:83:5E:22:55:C7:8A:8F:68:9B:0B:1F:48:FC
X509v3 Authority Key Identifier:
keyid:04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f9:27:b3:86:0f:a8:6c:a6:63:fa:59:78:c3:79:c2:35:9a:
d1:dd:d3:c3:98:ba:4c:34:60:6b:3d:db:64:41:45:61:b3:4d:
cf:3d:fb:e2:ab:0f:dc:1e:8d:63:a6:c9:9b:c1:5e:5f:ac:d4:
c4:b2:17:ad:e4:7b:af:6f:8c:7b:c6:98:ff:84:79:42:11:31:
7f:d0:bb:d4:8d:e9:d6:65:51:09:33:22:21:73:87:85:4f:90:
ba:9f:d9:08:1a:fc:5b:e4:84:06:64:ed:bb:2c:9c:e5:de:c6:
28:db:12:84:0b:0d:1f:99:11:56:01:81:0c:94:87:3e:c5:19:
f5:53:eb:ce:21:da:91:c7:f7:fb:45:d3:2f:4d:71:ca:3b:37:
19:3e:36:df:46:68:4c:b3:d9:2a:ff:0b:87:e7:e5:c6:bc:2e:
f3:8b:5a:69:df:8d:b7:8e:78:34:81:23:73:ff:4a:ca:73:a7:
f5:87:6a:05:9e:00:9f:37:1c:1e:61:95:c8:10:bd:be:6b:a5:
08:bd:cb:33:00:3f:d7:3d:57:3f:26:be:a4:a8:95:e6:b6:08:
1e:3f:1f:0d:4c:dd:ce:c2:b6:62:92:aa:f7:7c:c5:b0:54:c3:
c2:3e:59:bf:85:87:5a:25:db:ab:fe:cc:eb:0d:70:88:57:9c:
52:88:fc:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLLtj4KyhCc3NGht4q/iKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTRhZTc0NzFjOGYzNjIxZDUzMjU2ZDc1ZjExMGI3NDg5
OTc4OTgwHhcNMjYwNDE3MTYwMTEwWhcNMjYwNDE4MTYwMTEwWjAzMTEwLwYDVQQD
EygyZjQwZGY0NmEwMDAyYjgzNWUyMjU1Yzc4YThmNjg5YjBiMWY0OGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gnPLtzpzyeRza7210Ft2MBzhkhw
QkEG1EQv3lpXmvCY8nSYb8MbmYPj2Rwh1EfHuTnPdJmBYG7VRDNpHjta0aabTKfK
KC2QCmmpoJe5BCHMi3XeoYIEGIeG1LTfOInTjG0AClwHsLo5mmvQHABnC9iQ5cVs
O7Y2m2BgT2mxDtvodhA3kBcX5kdn07zVfDXwVQUsVR5XkjgMjRrPS/SqCiz5Z6Go
ADq4ZZR4rgKLD6l1Abm11j5f8UswV1d7JCk5YLcIn9/3ofZUBAr9GLpHiDNC+jv5
0qYSu387UKclYdQ81XaRS4NAJkmoGeoBHx+Bx5XroTtoehj0YAHALKANTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9A30agACuDXiJVx4qPaJsLH0j8MB8GA1UdIwQY
MBaAFASkrnRxyPNiHVMlbXXxELdImXiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktTdWRISEk4MklkVXlWdGRmRVF0MGlaZUpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mM2JhNWUtODk4Yy00ZmU5LWJkODgt
M2MzNjczZDQ0OTA1LzEvQktTdWRISEk4MklkVXlWdGRmRVF0MGlaZUpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mM2JhNWUtODk4Yy00ZmU5LWJkODgtM2MzNjczZDQ0OTA1
LzEvQktTdWRISEk4MklkVXlWdGRmRVF0MGlaZUpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvkns4YP
qGymY/pZeMN5wjWa0d3Tw5i6TDRgaz3bZEFFYbNNzz374qsP3B6NY6bJm8FeX6zU
xLIXreR7r2+Me8aY/4R5QhExf9C71I3p1mVRCTMiIXOHhU+Qup/ZCBr8W+SEBmTt
uyyc5d7GKNsShAsNH5kRVgGBDJSHPsUZ9VPrziHakcf3+0XTL01xyjs3GT4230Zo
TLPZKv8Lh+flxrwu84taad+Nt454NIEjc/9KynOn9YdqBZ4AnzccHmGVyBC9vmul
CL3LMwA/1z1XPya+pKiV5rYIHj8fDUzdzsK2YpKq93zFsFTDwj5Zv4WHWiXbq/7M
6w1wiFecUoj8fA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:26:24 2026 by rpki-client