Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
File: b1xXEvu82DJBnUxYhK47w8Shbns.mft (raw, json)
Hash identifier: AatTTlIyxde16H/q8aABJq8NcYm/WxlFTz4v0LAepIo=
Subject key identifier: 8E:5F:A5:97:33:31:A0:15:BA:92:8F:AF:72:FB:0D:81:9F:D2:A4:37
Authority key identifier: 6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
Certificate issuer: /CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Certificate serial: 019D9A3E03C818FB29459BF252F3E1B72E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
Manifest number: 18CC
Signing time: Fri 17 Apr 2026 07:00:48 +0000
Manifest this update: Fri 17 Apr 2026 07:00:48 +0000
Manifest next update: Sat 18 Apr 2026 07:00:48 +0000
Files and hashes: 1: b1xXEvu82DJBnUxYhK47w8Shbns.crl (hash: TIbhUHplOrlhV5eq4nSyK3jKaQgYA3i1PJRX9UrKyBw=)
2: ih0pzXO8mqkzc3x2UoefcFyc-tM.roa (hash: Uy5EOXK7Ia8DPFixLWpbgwz0Q6FOdgA2l57Zdh/p9Kk=)
3: mATboytCwcfVcr9XMxZhnCNuehM.roa (hash: CSLxUhKEA5+LpJXjF03TzcnktKHmPFZOf51CwhIx1L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:03:c8:18:fb:29:45:9b:f2:52:f3:e1:b7:2e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Validity
Not Before: Apr 17 07:00:48 2026 GMT
Not After : Apr 18 07:00:48 2026 GMT
Subject: CN=8e5fa5973331a015ba928faf72fb0d819fd2a437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:bd:be:d4:6e:7e:28:f4:96:bc:bb:80:fd:
41:e0:d2:7b:35:c2:2b:e3:49:35:88:b8:22:df:cb:
af:08:cc:68:f8:22:9a:79:49:c3:24:41:f8:70:d5:
47:46:29:8f:09:8e:fb:d6:89:e5:b9:02:c7:b2:2d:
a6:19:d2:4f:2c:b9:d9:c5:d9:eb:c5:3c:12:ef:c3:
84:e7:ef:f2:ca:ab:b2:ee:95:97:4d:63:5d:59:85:
15:62:36:f5:fe:45:dd:77:f3:49:91:03:5d:71:13:
d7:b3:ac:1e:09:38:11:51:3b:56:74:7f:cc:73:20:
fd:d8:94:de:2a:3c:41:73:24:fb:0a:0f:63:6d:c3:
7e:be:3d:40:cb:0d:32:88:83:f3:82:74:6c:33:3c:
60:ed:2c:eb:3d:60:13:3f:96:ce:f0:e0:63:93:25:
54:b8:13:a0:55:52:cc:a3:c2:1b:b1:c0:81:f6:51:
45:9d:ab:a8:fe:27:8f:1b:87:b5:ea:3d:7c:d3:89:
e1:a1:f0:b7:00:eb:d7:35:62:a8:cd:cb:4e:d2:bc:
a3:d9:10:51:fa:12:a1:9c:0a:40:52:95:fc:23:39:
75:02:78:7b:b6:64:2a:2e:76:44:1a:ee:63:18:87:
56:51:50:73:d9:88:40:41:68:1a:ad:47:c2:ba:6a:
11:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5F:A5:97:33:31:A0:15:BA:92:8F:AF:72:FB:0D:81:9F:D2:A4:37
X509v3 Authority Key Identifier:
keyid:6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3a:79:39:8b:f7:16:3e:4a:fe:61:79:e1:b9:ff:4c:6d:96:
cf:c5:b0:14:09:df:75:26:d3:dd:ad:75:ff:87:ea:c7:30:9c:
41:ce:b7:58:90:4a:b2:30:fe:18:e6:91:b4:46:0c:6a:a2:a2:
4e:e8:d6:ba:4e:8d:c8:8b:04:f5:f1:77:c0:bf:f0:8c:56:6a:
20:61:d4:61:75:fe:12:31:41:6a:b8:fe:6d:dd:80:de:60:93:
a8:57:18:5c:2b:39:6c:fb:1f:23:24:5a:36:eb:d2:50:ca:6f:
2c:39:1a:9f:f8:76:90:70:54:d2:40:f8:31:dc:15:38:c9:e2:
e2:50:11:4a:32:9b:89:dd:8c:11:8b:10:3b:36:25:db:1b:64:
9e:a0:54:35:cc:43:43:ad:d7:37:5f:6a:5f:16:0d:c2:a8:11:
20:61:6e:79:7e:a1:b8:a8:d3:f8:0d:15:aa:1e:68:59:93:c9:
4f:17:25:6d:30:8a:0c:ef:79:a6:08:fa:fd:1e:fb:56:b6:23:
90:64:6b:25:38:da:17:c9:6b:c5:62:ae:00:fa:89:88:07:f7:
42:08:78:37:99:28:20:7a:ab:58:c4:9c:05:be:68:86:c5:f6:
cd:4b:49:a0:c1:56:74:67:93:21:ca:54:e1:d4:b3:3d:e7:6b:
4a:1f:93:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:01:09 2026 by rpki-client