Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier: p98NaxFH1iA0++GVqDucRtAvdXbOhf/I/82THk84W3Q=
Subject key identifier: DA:5D:BF:FF:3E:94:DF:34:77:88:13:96:85:A3:A7:C9:BA:3E:6E:8A
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial: 019D98BD74EFAD42FFD605451BC16DB50777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number: 15AD
Signing time: Fri 17 Apr 2026 00:00:46 +0000
Manifest this update: Fri 17 Apr 2026 00:00:46 +0000
Manifest next update: Sat 18 Apr 2026 00:00:46 +0000
Files and hashes: 1: Oon2IIrGkbnZaP-hb1ZNPn5crpM.roa (hash: aV6nVsAigskV1T2EnkJOb7mIfcRM6nE2dCNvULEtGlA=)
2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: XKs6AidXo9CjpTam2HQROdHg5ys1ljDdLO9HxcLL2vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:74:ef:ad:42:ff:d6:05:45:1b:c1:6d:b5:07:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Validity
Not Before: Apr 17 00:00:46 2026 GMT
Not After : Apr 18 00:00:46 2026 GMT
Subject: CN=da5dbfff3e94df347788139685a3a7c9ba3e6e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:88:4e:44:3f:07:cb:ae:dd:4f:f7:95:99:
06:aa:af:4f:4c:22:c5:3d:48:93:79:41:b9:fc:2a:
a3:ee:3d:7a:1d:55:57:4d:3c:c0:6e:44:62:89:3e:
0a:eb:f0:b1:6c:c3:b7:f3:d9:73:3f:3c:6f:e7:41:
e0:17:de:a7:7b:d7:a6:de:3a:78:5f:d9:eb:f5:56:
59:0f:ed:42:b0:be:0a:0f:46:e4:8c:4b:00:a1:6b:
99:e4:1e:57:f9:8f:5b:7c:c6:32:3d:9b:43:5c:fd:
40:9e:b5:db:78:69:68:6e:42:cd:8f:bc:e0:72:99:
e5:60:0c:e7:da:45:7e:6f:af:e5:6d:14:f1:99:21:
ba:cc:88:61:ba:8c:42:1b:d8:d0:f2:f3:86:a5:7a:
78:54:f8:1b:0f:86:ae:a4:fd:01:e0:34:7e:30:60:
86:06:e1:6c:cc:93:19:b6:3a:3b:9e:c2:4b:a1:8e:
47:fb:fb:03:74:d6:4a:7c:81:31:40:51:fc:98:9d:
d3:3f:09:ff:c6:ce:44:cb:d2:21:be:ff:1a:b1:1c:
cf:db:3f:78:ac:df:42:f2:fd:9a:f7:e7:fc:42:58:
e9:4a:f5:98:7e:7c:aa:a3:a0:d9:0a:c2:96:6e:46:
93:ff:dd:a8:e0:64:f9:70:51:af:cf:48:a5:4f:7e:
fa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5D:BF:FF:3E:94:DF:34:77:88:13:96:85:A3:A7:C9:BA:3E:6E:8A
X509v3 Authority Key Identifier:
keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:34:6f:39:a5:41:e3:20:e2:a8:4b:0f:eb:75:fe:05:6e:0d:
1d:7e:81:a5:9e:74:94:7b:43:77:f8:28:e1:02:11:d6:ae:1a:
94:e5:82:27:b9:9d:e2:81:c4:2d:1e:c9:11:5b:b2:0e:63:b7:
74:38:93:f3:5f:68:08:93:b9:81:a5:c7:63:53:8a:5e:1d:81:
29:8d:8d:fa:ee:23:6d:07:5f:f3:48:1e:47:d5:1d:cb:4a:47:
fe:81:6a:92:69:5a:17:22:f0:c8:1c:63:48:04:d7:3c:9f:eb:
ba:c1:91:f3:c4:6a:22:59:52:d5:50:73:73:9f:29:31:36:09:
c4:9e:c3:43:7e:e4:cd:88:94:62:c1:72:a1:d8:30:4d:5b:0d:
21:ee:12:3f:c0:a4:e5:91:31:6c:bb:7a:e8:b6:5b:c7:53:81:
51:14:86:d9:92:d3:68:52:7c:69:5e:a8:98:95:1c:94:c9:a8:
f2:10:69:47:c2:20:7f:60:95:1a:ca:c8:c2:ae:20:07:2e:5c:
3f:df:a8:08:4a:fd:6a:0f:b9:7c:72:6a:b1:eb:3b:80:e5:58:
c3:d5:a7:72:d7:c8:54:ab:8a:6d:74:ac:53:0e:4e:6c:86:90:
35:83:fa:f4:7b:0c:49:03:1f:b2:f2:bc:67:0c:5d:ec:59:98:
01:f9:d7:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvXTvrUL/1gVFG8FttQd3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlM2U1MDFkMjUxM2U1YWVkNDQyM2Q3ZWIyNjVlNjA4MjJh
OGU3OGQwHhcNMjYwNDE3MDAwMDQ2WhcNMjYwNDE4MDAwMDQ2WjAzMTEwLwYDVQQD
EyhkYTVkYmZmZjNlOTRkZjM0Nzc4ODEzOTY4NWEzYTdjOWJhM2U2ZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSuITkQ/B8uu3U/3lZkGqq9PTCLF
PUiTeUG5/Cqj7j16HVVXTTzAbkRiiT4K6/CxbMO389lzPzxv50HgF96ne9em3jp4
X9nr9VZZD+1CsL4KD0bkjEsAoWuZ5B5X+Y9bfMYyPZtDXP1AnrXbeGlobkLNj7zg
cpnlYAzn2kV+b6/lbRTxmSG6zIhhuoxCG9jQ8vOGpXp4VPgbD4aupP0B4DR+MGCG
BuFszJMZtjo7nsJLoY5H+/sDdNZKfIExQFH8mJ3TPwn/xs5Ey9Ihvv8asRzP2z94
rN9C8v2a9+f8QljpSvWYfnyqo6DZCsKWbkaT/92o4GT5cFGvz0ilT376dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpdv/8+lN80d4gTloWjp8m6Pm6KMB8GA1UdIwQY
MBaAFG4+UB0lE+Wu1EI9frJl5ggiqOeNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85ZDVmZGMtNjZiMi00NzE4LThiMjQt
MTFkYWYxNzBkN2NkLzEvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy85ZDVmZGMtNjZiMi00NzE4LThiMjQtMTFkYWYxNzBkN2Nk
LzEvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDRvOaVB
4yDiqEsP63X+BW4NHX6BpZ50lHtDd/go4QIR1q4alOWCJ7md4oHELR7JEVuyDmO3
dDiT819oCJO5gaXHY1OKXh2BKY2N+u4jbQdf80geR9Udy0pH/oFqkmlaFyLwyBxj
SATXPJ/rusGR88RqIllS1VBzc58pMTYJxJ7DQ37kzYiUYsFyodgwTVsNIe4SP8Ck
5ZExbLt66LZbx1OBURSG2ZLTaFJ8aV6omJUclMmo8hBpR8Igf2CVGsrIwq4gBy5c
P9+oCEr9ag+5fHJqses7gOVYw9WnctfIVKuKbXSsUw5ObIaQNYP69HsMSQMfsvK8
Zwxd7FmYAfnXiQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:14 2026 by rpki-client