Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
File: bAPSJHjshrhUTfuYrd6sIm-PB-A.mft (raw, json)
Hash identifier: MtDFFqzmt3EzDLI6yzCSdWGIJIZuDcHsvYqYYVyzVOI=
Subject key identifier: E7:4D:58:56:11:07:7D:61:57:3A:A3:57:85:D5:14:4A:06:AD:07:81
Authority key identifier: 6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0
Certificate issuer: /CN=6c03d22478ec86b8544dfb98addeac226f8f07e0
Certificate serial: 019D9A748C3B47F9FEF66A47FDF0BAA9DFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
Manifest number: 01EC
Signing time: Fri 17 Apr 2026 08:00:22 +0000
Manifest this update: Fri 17 Apr 2026 08:00:22 +0000
Manifest next update: Sat 18 Apr 2026 08:00:22 +0000
Files and hashes: 1: bAPSJHjshrhUTfuYrd6sIm-PB-A.crl (hash: flg/EwZj2iY1MusSpY5j/gyb3rRtH34STAvgg3Ga7Lg=)
2: nL_aguQpzIBZS3kFzk0GEh4Kv14.roa (hash: gVKNRs2PmMSobccBYIWx5t0HLiyk7RnkUIOuOgpaP2A=)
3: rtWwTl9MBmDLdQSKYIL-yECsxyQ.roa (hash: +411KUF7k/iuzsKKk7k0b7Q2qWA88IGJo6IfbnCC2V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:8c:3b:47:f9:fe:f6:6a:47:fd:f0:ba:a9:df:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03d22478ec86b8544dfb98addeac226f8f07e0
Validity
Not Before: Apr 17 08:00:22 2026 GMT
Not After : Apr 18 08:00:22 2026 GMT
Subject: CN=e74d585611077d61573aa35785d5144a06ad0781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:77:93:a7:af:0a:47:b9:71:e8:19:0d:05:
80:0f:f4:00:59:c0:f4:b1:8f:ca:72:06:2f:c4:0e:
84:e1:ed:8c:d7:1e:fe:8a:bd:b7:cb:a2:cc:d4:c9:
b2:73:0e:23:2a:8e:13:44:c8:69:36:d2:ae:59:d0:
5c:ed:1d:1b:ea:04:92:7c:a2:cf:d4:bf:bc:66:30:
e1:4b:88:95:6e:3a:5c:49:2b:44:f4:bf:ae:28:1e:
99:99:b2:94:7d:6f:43:90:46:4c:da:dc:f3:3f:51:
d0:dd:a6:f9:79:08:cd:0a:cd:cc:57:56:44:22:3d:
93:8c:50:e3:05:f6:a9:1c:e1:86:e8:cb:91:47:3d:
7d:af:c0:f2:03:09:8c:b7:8a:4f:f0:35:0e:38:ed:
1b:d4:92:4a:b5:d8:d8:2c:61:b1:e1:7a:de:c4:cd:
a5:c9:68:43:ca:84:0c:1e:6a:23:f9:ac:c3:dc:f6:
8d:be:61:10:2f:e5:35:e1:c3:89:b1:c8:28:de:cb:
72:e0:38:89:89:15:6a:99:de:7c:71:64:73:d5:a1:
66:f1:39:d0:86:c2:12:c9:9f:ba:dd:2a:86:3b:85:
22:70:df:9a:e2:6d:79:8b:82:5b:2a:59:27:96:ed:
68:6f:c8:cb:d2:80:34:16:39:10:df:87:9c:a9:f2:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4D:58:56:11:07:7D:61:57:3A:A3:57:85:D5:14:4A:06:AD:07:81
X509v3 Authority Key Identifier:
keyid:6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d8:60:fe:b5:a2:1c:ed:dd:95:24:38:7c:19:b1:84:c6:04:
ad:1a:72:27:5e:64:3d:f1:e9:2b:75:8c:6c:fc:41:1c:2f:a4:
c4:4c:4c:fb:8c:3d:17:50:7f:38:1e:10:03:d6:97:d9:14:21:
c2:bc:d6:8f:f4:70:d2:12:8a:d1:6f:bd:ae:1a:79:3e:2a:c9:
23:0f:e7:be:4e:5c:af:07:6b:ac:8d:ea:90:78:60:0b:8f:65:
e7:f1:ca:eb:e4:ec:18:fc:98:82:f8:d3:85:85:1c:36:44:d4:
15:54:4f:70:8e:ba:33:d5:a4:28:d4:4c:37:f6:10:02:fe:a0:
9d:d9:a8:be:93:1c:df:c2:ab:80:4a:b8:ff:3c:44:25:ae:53:
79:c9:eb:99:d0:d4:b4:1a:44:d8:d4:a2:c6:2d:04:07:bc:d9:
de:7b:d9:ff:cb:2e:82:3e:8a:ef:93:ed:00:60:e0:ae:4e:bc:
05:69:01:98:2a:43:36:8e:6b:0e:91:fc:1c:11:76:54:7c:d4:
9b:3c:cb:29:7b:a4:0b:cb:9f:aa:0f:b7:f4:2b:c0:f2:64:ef:
41:ea:57:42:b9:06:5e:9a:12:0d:f1:b6:24:5a:fc:bc:1a:20:
38:37:51:d2:87:c7:7a:b7:e8:d8:06:5d:20:f5:67:72:46:01:
f4:bd:ef:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adIw7R/n+9mpH/fC6qd/6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMDNkMjI0NzhlYzg2Yjg1NDRkZmI5OGFkZGVhYzIyNmY4
ZjA3ZTAwHhcNMjYwNDE3MDgwMDIyWhcNMjYwNDE4MDgwMDIyWjAzMTEwLwYDVQQD
EyhlNzRkNTg1NjExMDc3ZDYxNTczYWEzNTc4NWQ1MTQ0YTA2YWQwNzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv53k6evCke5cegZDQWAD/QAWcD0
sY/KcgYvxA6E4e2M1x7+ir23y6LM1Mmycw4jKo4TRMhpNtKuWdBc7R0b6gSSfKLP
1L+8ZjDhS4iVbjpcSStE9L+uKB6ZmbKUfW9DkEZM2tzzP1HQ3ab5eQjNCs3MV1ZE
Ij2TjFDjBfapHOGG6MuRRz19r8DyAwmMt4pP8DUOOO0b1JJKtdjYLGGx4XrexM2l
yWhDyoQMHmoj+azD3PaNvmEQL+U14cOJscgo3sty4DiJiRVqmd58cWRz1aFm8TnQ
hsISyZ+63SqGO4UicN+a4m15i4JbKlknlu1ob8jL0oA0FjkQ34ecqfJ57QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdNWFYRB31hVzqjV4XVFEoGrQeBMB8GA1UdIwQY
MBaAFGwD0iR47Ia4VE37mK3erCJvjwfgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkFQU0pIanNocmhVVGZ1WXJkNnNJbS1QQi1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iODQ0ZjYtOWQxOC00ODQzLThhYTIt
ZWI2ZWU1MzU2NjEzLzEvYkFQU0pIanNocmhVVGZ1WXJkNnNJbS1QQi1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9iODQ0ZjYtOWQxOC00ODQzLThhYTItZWI2ZWU1MzU2NjEz
LzEvYkFQU0pIanNocmhVVGZ1WXJkNnNJbS1QQi1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNhg/rWi
HO3dlSQ4fBmxhMYErRpyJ15kPfHpK3WMbPxBHC+kxExM+4w9F1B/OB4QA9aX2RQh
wrzWj/Rw0hKK0W+9rhp5PirJIw/nvk5crwdrrI3qkHhgC49l5/HK6+TsGPyYgvjT
hYUcNkTUFVRPcI66M9WkKNRMN/YQAv6gndmovpMc38KrgEq4/zxEJa5TecnrmdDU
tBpE2NSixi0EB7zZ3nvZ/8sugj6K75PtAGDgrk68BWkBmCpDNo5rDpH8HBF2VHzU
mzzLKXukC8ufqg+39CvA8mTvQepXQrkGXpoSDfG2JFr8vBogODdR0ofHerfo2AZd
IPVnckYB9L3vqw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:47:27 2026 by rpki-client