Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
File: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft (raw, json)
Hash identifier: 31Xan58r6/dTTku+/LWQjLtc3mW4F/e1yLTwla8RQvI=
Subject key identifier: 2B:A4:C2:D4:46:3E:A5:F3:0C:A0:0B:F1:04:39:48:05:8E:95:86:BE
Authority key identifier: 6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3
Certificate issuer: /CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
Certificate serial: 019D97741853AF966C497170AA37D0049091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
Manifest number: 0F52
Signing time: Thu 16 Apr 2026 18:01:00 +0000
Manifest this update: Thu 16 Apr 2026 18:01:00 +0000
Manifest next update: Fri 17 Apr 2026 18:01:00 +0000
Files and hashes: 1: S6w96UHg_c8FTTvp7nnV9lxHYXY.roa (hash: UVfs6pTpT1WnTTA5N47wWDXe4Rk7XOyosSup+Jvul20=)
2: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl (hash: 2Uh2HqjNkexGqfCRAlLq8tYDsyVlGadRywV+zaM1KQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:18:53:af:96:6c:49:71:70:aa:37:d0:04:90:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
Validity
Not Before: Apr 16 18:01:00 2026 GMT
Not After : Apr 17 18:01:00 2026 GMT
Subject: CN=2ba4c2d4463ea5f30ca00bf1043948058e9586be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:03:ad:5b:ec:d6:03:5b:d6:8d:a0:c0:f1:
bc:af:eb:33:b8:7f:dd:70:75:25:c6:af:e4:95:0c:
cd:08:6d:56:20:0d:48:b5:c1:93:ee:a6:f7:83:81:
48:82:e4:61:d7:f7:69:9d:26:ea:f3:5e:51:b8:a5:
30:43:73:fe:50:47:9e:62:ee:3d:11:f4:c2:9f:37:
10:48:71:72:11:74:37:b3:50:e0:33:8f:d2:36:b8:
ef:81:9e:a1:76:6a:17:1b:e6:49:ff:7b:8c:b1:60:
9d:ac:3d:a4:fb:f0:e2:cf:ad:78:55:7f:14:18:5b:
87:03:bd:75:22:1c:c2:77:60:eb:b2:d9:c3:a2:f7:
9d:be:39:d8:cd:e5:f9:39:71:e6:57:2a:97:3d:1b:
ca:99:85:d9:29:86:4c:de:98:58:3d:c2:47:c6:90:
f6:f2:93:cf:f6:53:90:78:3c:15:75:3a:7c:de:91:
d1:dd:05:16:17:dc:d3:77:08:d4:25:34:e7:ce:d2:
e6:9d:1d:6c:11:45:46:b9:32:1c:1a:f0:05:78:17:
1f:16:22:98:08:1e:32:52:45:df:3c:90:4b:c0:6a:
ab:88:c7:9a:e6:86:48:db:94:31:c5:d8:c1:b7:e2:
3d:d2:de:40:f7:ce:5d:01:7d:4f:05:c3:8c:76:b3:
1f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A4:C2:D4:46:3E:A5:F3:0C:A0:0B:F1:04:39:48:05:8E:95:86:BE
X509v3 Authority Key Identifier:
keyid:6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:85:9a:e6:b8:33:94:0f:dd:29:ff:e9:64:c3:77:20:e8:ee:
04:75:0b:f3:3d:f0:fa:61:5f:cc:4f:b1:36:ac:61:28:bd:88:
fe:a9:cf:de:88:32:24:1d:9f:16:0a:aa:b4:48:4d:52:dc:d3:
9f:34:21:6b:fc:bf:db:54:72:14:7c:93:91:b2:19:ab:0d:69:
8a:2c:cc:61:ca:f7:c3:dc:b3:3b:4c:0c:91:a5:dc:5c:21:3d:
08:99:a9:05:07:3c:77:5b:14:b5:cf:d3:80:62:17:7e:de:f5:
70:bf:4d:27:6e:82:e9:ac:ac:a7:c8:9a:50:7b:53:65:38:39:
66:29:19:16:2c:18:72:8f:3c:8c:9d:8d:56:24:a4:65:d7:b0:
a1:ed:1a:94:13:2c:ea:63:57:96:9b:03:c8:dc:c8:79:a2:7f:
00:b8:e7:45:67:4a:c8:5f:a8:06:46:e6:58:73:a1:26:18:34:
93:e5:c2:ed:3b:c9:51:74:2d:b0:69:ab:d8:1c:5a:e1:09:51:
c6:08:f8:5d:17:a6:42:de:89:80:f9:6b:f4:e5:be:a3:37:03:
b3:47:e3:32:36:33:91:9d:02:4a:46:8b:01:17:f9:69:53:41:
b0:95:0c:ef:c7:8d:fd:00:2a:5b:ff:de:77:ba:1b:3a:99:25:
fa:e9:7b:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XdBhTr5ZsSXFwqjfQBJCRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOWIzZTE5ZmQxZjQzMGY1MTQ1ZDZkYjkyNDFhNTA1N2Vk
OTZjYjMwHhcNMjYwNDE2MTgwMTAwWhcNMjYwNDE3MTgwMTAwWjAzMTEwLwYDVQQD
EygyYmE0YzJkNDQ2M2VhNWYzMGNhMDBiZjEwNDM5NDgwNThlOTU4NmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6ADrVvs1gNb1o2gwPG8r+szuH/d
cHUlxq/klQzNCG1WIA1ItcGT7qb3g4FIguRh1/dpnSbq815RuKUwQ3P+UEeeYu49
EfTCnzcQSHFyEXQ3s1DgM4/SNrjvgZ6hdmoXG+ZJ/3uMsWCdrD2k+/Diz614VX8U
GFuHA711IhzCd2DrstnDovedvjnYzeX5OXHmVyqXPRvKmYXZKYZM3phYPcJHxpD2
8pPP9lOQeDwVdTp83pHR3QUWF9zTdwjUJTTnztLmnR1sEUVGuTIcGvAFeBcfFiKY
CB4yUkXfPJBLwGqriMea5oZI25QxxdjBt+I90t5A985dAX1PBcOMdrMf7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCukwtRGPqXzDKAL8QQ5SAWOlYa+MB8GA1UdIwQY
MBaAFGybPhn9H0MPUUXW25JBpQV+2WyzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkpzLUdmMGZRdzlSUmRiYmtrR2xCWDdaYkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lYTRiMWYtM2Q5MC00MGYyLThmOTgt
MGJhYTc3NzhhY2U3LzEvYkpzLUdmMGZRdzlSUmRiYmtrR2xCWDdaYkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lYTRiMWYtM2Q5MC00MGYyLThmOTgtMGJhYTc3NzhhY2U3
LzEvYkpzLUdmMGZRdzlSUmRiYmtrR2xCWDdaYkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIWa5rgz
lA/dKf/pZMN3IOjuBHUL8z3w+mFfzE+xNqxhKL2I/qnP3ogyJB2fFgqqtEhNUtzT
nzQha/y/21RyFHyTkbIZqw1piizMYcr3w9yzO0wMkaXcXCE9CJmpBQc8d1sUtc/T
gGIXft71cL9NJ26C6aysp8iaUHtTZTg5ZikZFiwYco88jJ2NViSkZdewoe0alBMs
6mNXlpsDyNzIeaJ/ALjnRWdKyF+oBkbmWHOhJhg0k+XC7TvJUXQtsGmr2Bxa4QlR
xgj4XRemQt6JgPlr9OW+ozcDs0fjMjYzkZ0CSkaLARf5aVNBsJUM78eN/QAqW//e
d7obOpkl+ul7XA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:11:47 2026 by rpki-client