Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
File: BdTUnaPhSFWnuINgP_FIwbsh9pA.mft (raw, json)
Hash identifier: Jv9vVfRS0wL2i1ZMTUe/Py0kU12gOwCdAY4Q5HnRd48=
Subject key identifier: 46:BE:83:7C:1A:9B:7C:6C:13:69:87:3B:83:ED:5B:FD:6B:F4:07:7B
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 019D9A74B2817A4D1A14ACEBAE10E6BF21B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
Manifest number: 03C1
Signing time: Fri 17 Apr 2026 08:00:32 +0000
Manifest this update: Fri 17 Apr 2026 08:00:32 +0000
Manifest next update: Sat 18 Apr 2026 08:00:32 +0000
Files and hashes: 1: 0ZYnGlB1sX-tIT-_McEHbMjcHh8.roa (hash: 2qWVIKYHaVj8bsZAAH+azzAq9wcQ/nQgKKzUX3Hr+1A=)
2: 4F9KCelkBdaW6adR2HbwfE6Qa50.roa (hash: 28y0uJhPlCZ576LDD9F3Bdf7MivZvFfgd38Ys6VSm5M=)
3: Af11MVP6VhwPCZW4GvxhTV3l2Qw.roa (hash: 0zTqrzFvszKEBTsjbfLGhc0G5gFEU942DbGfKhHwTtQ=)
4: BdTUnaPhSFWnuINgP_FIwbsh9pA.crl (hash: 30VDoukU+C8QYu8WVG2oZAc2kW94knLGVXx7BRDcP1M=)
5: HgKDk1kuAHkL3yy_TXl0qxP-7Ps.roa (hash: EYBlGLzCjhMCJqevk0Sz3CYuuG7NvC8a6JulLnYLrvQ=)
6: b9tPgBNgYh6iOkrY-UQLj_LcNYI.roa (hash: XWqLKaSvCAdhll8JN//U7vrVfAkkRKjwGPOfF08R7Io=)
7: g2dtR6UU6YbyOvJ87zvLD53mIJA.roa (hash: OjJY/mSN+MIiT4fZ4kWjc3+KYFQldFou7Yv+HnbjSaQ=)
8: h6YKC3XtERD2VCMyNiRftB7wCuk.roa (hash: MN0yYx9HV02KqbAFLm8yDd6oSKi7xPvjzFqT6fvBP6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:b2:81:7a:4d:1a:14:ac:eb:ae:10:e6:bf:21:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Apr 17 08:00:32 2026 GMT
Not After : Apr 18 08:00:32 2026 GMT
Subject: CN=46be837c1a9b7c6c1369873b83ed5bfd6bf4077b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:be:c0:91:af:d7:bc:43:3d:04:5d:0c:45:
f5:f9:06:09:76:6e:fc:64:4d:57:1f:39:fa:21:df:
ec:c2:91:73:37:46:6a:4b:2c:f1:54:2e:fb:bf:b9:
96:a6:ad:dd:2b:f5:2f:9e:5f:d6:9b:a0:66:92:12:
5b:80:94:8f:59:a0:55:e7:72:ce:a9:7a:c4:e2:c2:
d1:03:fe:19:e7:69:43:50:65:7b:f7:8b:9b:71:60:
7e:80:e0:f0:ac:de:4e:4b:15:81:a0:6f:d3:47:6c:
6f:19:39:11:54:22:17:1b:bc:2b:c1:1e:86:44:f7:
31:25:ee:70:cd:8a:ad:58:3c:f8:25:b3:1b:5a:18:
b0:a3:41:58:3f:5d:53:98:e3:6b:47:ba:2d:12:3a:
91:9e:b2:76:b8:09:32:33:1c:44:3f:5b:18:5d:d1:
9f:21:01:f1:d9:78:10:61:13:ea:53:a3:cd:76:37:
d7:c1:e7:36:ff:c4:77:92:7b:78:5b:da:09:9b:7b:
98:69:d3:48:2b:18:d2:35:3e:d2:6c:37:cd:5c:a7:
39:18:65:fc:f4:6b:30:28:2c:90:2f:1e:6f:ac:9a:
b0:4c:38:95:b1:4a:e7:b6:45:ef:6c:50:3a:95:32:
bc:8d:12:21:29:8c:00:1d:ee:eb:97:2f:8d:1a:2e:
90:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BE:83:7C:1A:9B:7C:6C:13:69:87:3B:83:ED:5B:FD:6B:F4:07:7B
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8c:cb:53:79:78:88:62:06:aa:a7:0c:cd:69:03:cb:1d:6e:
07:b5:c5:e0:80:c3:d8:06:8b:54:b9:90:e5:3f:68:8b:a2:8e:
0d:6c:2a:a4:80:c1:90:1c:82:a0:73:d6:aa:86:97:89:dd:04:
b0:aa:0b:5a:47:53:1d:38:bf:73:ec:04:92:02:74:8a:d9:f7:
e7:f2:55:4e:7f:08:e8:5b:2a:be:96:c3:7d:e8:c1:e1:96:cc:
15:06:66:c8:43:62:32:e3:ed:db:0f:4d:b9:6d:8a:db:33:f0:
f1:4d:62:46:a7:48:a0:f1:32:df:4c:b2:e1:2f:57:5f:3e:98:
c8:02:4b:76:a5:9d:25:fa:eb:16:4e:ed:24:bc:37:09:2e:92:
6f:bd:0c:a5:66:ab:a8:6c:20:74:37:f9:c6:99:b0:6b:2a:4d:
6e:22:0d:f5:b4:01:8a:c9:72:4b:0a:67:75:ac:dc:09:4d:48:
8e:97:e0:77:e8:0b:c6:a6:38:e4:7f:ed:91:c7:a0:6b:90:c1:
5c:62:37:0c:98:da:ad:c9:3a:31:0c:bb:36:64:87:f5:e7:05:
40:7e:47:e3:18:41:e7:80:04:ac:e7:6d:cd:78:52:89:d9:ff:
8f:5c:c0:9f:e5:92:c1:94:69:07:9f:92:d5:ba:8b:37:ee:eb:
c5:76:ea:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:48 2026 by rpki-client