Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
File: bMdYWreoPsgLVauVe_N7eR52UBY.mft (raw, json)
Hash identifier: KFMp9T8xC2xFO6GoPwDYcwVFSILiG8W3VyvotaTtBF4=
Subject key identifier: BF:AF:86:D8:0B:37:14:C8:BB:7E:92:78:DD:66:50:7A:07:70:B7:CD
Authority key identifier: 6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
Certificate issuer: /CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Certificate serial: 019D99D09389D40D44A4D98762940CCFF82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
Manifest number: 162D
Signing time: Fri 17 Apr 2026 05:01:16 +0000
Manifest this update: Fri 17 Apr 2026 05:01:16 +0000
Manifest next update: Sat 18 Apr 2026 05:01:16 +0000
Files and hashes: 1: bMdYWreoPsgLVauVe_N7eR52UBY.crl (hash: UQi2iVQGjUGZz1wY7xrQwEPZ6OjpjT+THahVKDFlz5k=)
2: e51r6d8MY0z0wgESUl_beU3OIIY.roa (hash: NKb+xyyt/CtCVFv1JVTrUrEnFhYCHL7jXn1hVp8rZ4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:93:89:d4:0d:44:a4:d9:87:62:94:0c:cf:f8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Validity
Not Before: Apr 17 05:01:16 2026 GMT
Not After : Apr 18 05:01:16 2026 GMT
Subject: CN=bfaf86d80b3714c8bb7e9278dd66507a0770b7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:de:bc:dd:08:85:f6:da:68:5c:fd:e5:30:92:
8b:7c:e5:a2:57:e4:4f:2a:2e:ce:7b:70:13:af:e4:
49:9b:2d:93:84:59:ba:31:96:f5:f7:2b:44:f4:e6:
0b:e4:c2:32:6b:d5:9c:54:3e:4f:93:58:e0:da:26:
b6:95:c1:18:d5:0b:17:79:3c:11:52:f4:f7:6a:35:
72:29:ca:40:44:95:9b:78:25:68:8e:4d:5c:33:a9:
ea:ce:30:6b:8a:82:24:0b:45:c5:45:63:ab:72:6c:
70:3e:90:c0:58:66:35:f6:ca:76:95:93:dd:44:9f:
09:73:2c:86:2d:01:fe:02:c3:a9:1b:45:6e:15:fc:
40:8e:30:b0:b7:32:76:f9:6e:fd:97:21:7e:9f:e0:
86:5c:cb:e6:d6:3d:25:94:c6:24:f7:6f:9b:22:ec:
4f:ca:f8:6e:19:52:08:2a:02:bc:63:56:1e:bc:1f:
d8:df:d0:a1:5b:1b:be:f3:0d:14:b5:67:04:03:eb:
73:56:0e:a0:aa:49:08:5c:ae:44:56:fb:85:e2:c8:
75:5e:1b:1b:aa:d0:f6:34:9d:a6:21:6d:e2:ef:ac:
b7:ef:1c:67:8a:87:c6:f1:95:0a:0d:66:29:3c:d1:
73:97:96:55:83:da:1b:b6:70:ea:ae:ff:dc:d4:7a:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AF:86:D8:0B:37:14:C8:BB:7E:92:78:DD:66:50:7A:07:70:B7:CD
X509v3 Authority Key Identifier:
keyid:6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e2:c2:14:0e:ed:b0:fa:6d:9d:07:0b:16:bf:3f:66:72:7c:
be:be:28:42:ba:77:13:70:8d:6d:c2:6c:86:3d:7b:57:61:c2:
71:d1:ab:56:99:1b:08:03:e6:84:b1:9a:bc:04:45:fb:dc:91:
8d:f4:5b:f1:81:0b:ec:d0:e0:06:a1:bc:04:61:cd:38:34:53:
0c:30:f8:a5:e3:39:7f:87:bb:5e:8d:e7:86:cb:8c:07:bf:c9:
01:1d:7d:be:06:33:1c:49:e2:34:db:c1:13:e7:58:78:87:5e:
ca:c8:9b:1f:e7:52:ef:7e:42:b6:67:5c:bc:3d:98:06:8e:df:
29:6a:3b:d4:97:5a:cf:a3:8c:0d:f4:b4:dc:22:34:54:f2:51:
77:2c:fe:6c:f2:ba:3b:08:25:c1:70:d4:4a:47:7d:1a:b5:b0:
a9:8c:f1:c5:c4:d2:f3:1f:8f:88:c3:ed:10:df:d0:f0:ec:d5:
8b:d2:7f:7b:34:6a:8c:e7:fd:cb:19:6d:4a:c0:43:6b:c5:7b:
75:e1:e8:5b:11:06:f3:d0:49:b3:85:44:7e:0e:18:9f:f4:12:
98:5d:bd:3c:3b:71:50:d3:85:1f:94:c2:f5:aa:1e:58:02:ee:
f6:be:75:31:4b:0b:07:23:cc:36:45:39:25:35:02:c9:80:5c:
55:06:c6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:42:02 2026 by rpki-client