Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
File: bIkO9qiKsz-logZ2B2jdMlHCOK8.mft (raw, json)
Hash identifier: GYHkRfOUYr3dHBU/10PgxZULcBb2ZouQfzQoQm33xdI=
Subject key identifier: AF:96:F3:47:26:43:78:14:70:EC:0A:00:66:97:9E:C3:90:9A:49:63
Authority key identifier: 6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
Certificate issuer: /CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Certificate serial: 019D9A3E1C1C2C589B6B97A0D00C04290E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 07:00:54 +0000
Manifest this update: Fri 17 Apr 2026 07:00:54 +0000
Manifest next update: Sat 18 Apr 2026 07:00:54 +0000
Files and hashes: 1: bIkO9qiKsz-logZ2B2jdMlHCOK8.crl (hash: VIgCQrJ6wT3MfInAm9vqGDUTQ2zQYgKqTb88GNfyXvs=)
2: u5hJOCynJQAu4PH5D56C-AeKtEc.roa (hash: 53JyrjI2rSv7IJ0kdQIBEc2NY8BsRGlwPaWvUaVHA/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:1c:1c:2c:58:9b:6b:97:a0:d0:0c:04:29:0e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Validity
Not Before: Apr 17 07:00:54 2026 GMT
Not After : Apr 18 07:00:54 2026 GMT
Subject: CN=af96f3472643781470ec0a0066979ec3909a4963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d8:d7:a2:9d:92:2f:17:63:8b:1f:8c:8e:89:
30:fe:a4:df:e7:22:2d:14:7d:9d:3d:39:b6:ec:2d:
18:1a:f2:a9:1d:23:6b:53:2c:0d:6d:3c:9e:7c:b4:
e4:ce:46:66:a3:2d:73:13:de:0b:e6:30:9f:95:b9:
7e:07:a4:23:59:7c:a3:63:03:27:27:52:41:bc:54:
9b:4a:63:41:0d:12:40:7e:cf:6f:0d:86:2a:32:c2:
3c:22:12:aa:f6:bb:1a:51:b6:09:29:1e:81:89:d0:
d3:00:ff:49:7d:9d:5a:1a:b5:89:9d:54:52:d7:3e:
bb:8d:75:59:00:e7:67:83:7d:02:cc:67:5f:49:01:
9b:f2:fe:ec:4f:6d:ae:b5:4e:ff:f0:b3:f4:0d:a5:
1e:12:32:c7:a9:46:62:70:3b:b9:b2:9e:d9:9a:a5:
cc:52:ce:90:f9:70:7b:8b:d1:93:40:8b:c3:c5:d8:
db:5d:0f:59:86:3f:79:00:b8:8d:2d:82:b7:82:76:
b5:17:80:5f:1b:44:d5:7c:2b:70:71:87:b9:0a:8d:
23:30:dd:c9:bf:92:18:16:31:48:14:de:2c:e4:89:
ea:70:7b:a5:29:6a:85:f9:ae:23:4f:73:6c:db:d5:
54:48:3e:26:2e:e9:73:3e:fc:60:93:3d:9b:6a:d2:
fa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:96:F3:47:26:43:78:14:70:EC:0A:00:66:97:9E:C3:90:9A:49:63
X509v3 Authority Key Identifier:
keyid:6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:98:07:f2:89:cc:2b:97:d1:a0:aa:e4:81:d4:ba:9a:cd:3d:
d5:e4:53:7b:d1:19:f3:e2:c3:34:67:c3:d9:5c:c6:85:4b:b4:
3e:eb:90:3c:2c:2c:02:e2:63:57:1e:a5:ba:32:c9:38:76:ef:
e7:db:14:e6:a2:1c:79:34:40:5d:47:6b:c1:c3:eb:0d:b3:f4:
07:6a:7d:c4:7b:14:9e:16:7c:b5:eb:ae:25:25:9c:db:8f:93:
3a:3e:ae:cd:e1:70:5e:44:7a:47:58:c3:c7:a9:5d:02:bc:87:
f8:8b:69:05:91:c7:64:2d:4a:09:53:06:8e:ab:97:1d:e0:d4:
f2:f2:38:e4:83:ec:e1:4e:a3:5d:51:3c:24:64:a7:f5:dd:37:
d3:5f:6d:a6:38:73:9c:78:a9:70:1d:8a:e7:28:f8:b2:6e:73:
87:ce:10:82:fd:34:4a:2b:51:84:96:02:ef:e6:3b:2c:3d:0f:
3c:97:c3:30:b2:79:9a:45:7f:e4:05:70:ea:23:d5:40:ae:de:
01:e1:3f:8d:be:c0:9a:e2:b1:3e:26:08:83:c6:0b:d6:bc:24:
61:7a:80:f7:ad:0b:b0:a4:a8:8d:a9:0e:1c:29:65:28:b5:3d:
14:d9:c5:6c:5e:a4:67:fa:b7:90:37:a6:dc:26:ec:ab:e6:be:
35:52:d3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:12 2026 by rpki-client