Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
File: bJA8Gi6QbtjNLjYszGffAK3huCU.mft (raw, json)
Hash identifier: IybfSsZUeuPy2oi9teZszHwBMP9vL6tND7FD1AIEcnI=
Subject key identifier: 8C:0F:CE:83:39:48:52:BE:64:3F:E4:32:3F:E3:E8:13:93:1B:3F:1C
Authority key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
Certificate issuer: /CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Certificate serial: 019D984FB50A43B6D3BC0BFE772843662710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
Manifest number: 0AB8
Signing time: Thu 16 Apr 2026 22:00:53 +0000
Manifest this update: Thu 16 Apr 2026 22:00:53 +0000
Manifest next update: Fri 17 Apr 2026 22:00:53 +0000
Files and hashes: 1: bJA8Gi6QbtjNLjYszGffAK3huCU.crl (hash: gY3I5HnHstEq8hwO4fEn+yAbsNcz26LYD7CAzbvg1CI=)
2: niUV0djy4P_JQW5PwXS4h9UDq3c.roa (hash: dUR1gqSul+jZS5ya9pRLXgQp3A3g2Y76zvsEH9Fq7CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:b5:0a:43:b6:d3:bc:0b:fe:77:28:43:66:27:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Validity
Not Before: Apr 16 22:00:53 2026 GMT
Not After : Apr 17 22:00:53 2026 GMT
Subject: CN=8c0fce83394852be643fe4323fe3e813931b3f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:ff:15:9b:14:6c:d6:0e:7e:9e:4c:84:82:
cf:15:41:82:6b:12:fc:45:82:8e:19:ab:5b:f8:75:
4d:f7:7a:87:a9:08:b4:ae:70:0e:a5:69:21:d4:cc:
10:9f:e1:85:a5:93:f9:7f:25:1b:2c:35:38:1c:23:
10:3d:ef:15:4d:ff:44:87:5e:9f:a4:fa:a7:80:aa:
26:e2:ed:75:d8:d6:78:24:c8:a6:18:46:55:1e:30:
a7:c0:ae:f0:93:6c:9f:2c:f3:57:d5:9b:eb:c0:58:
f1:05:60:38:99:4d:0c:a4:1c:0d:bb:06:2e:3c:59:
94:d4:6d:bc:3a:5b:6d:cf:83:03:05:dc:24:ac:8b:
7a:9e:8d:ee:49:8c:41:cc:cf:c8:59:20:d3:b4:c3:
79:1c:a5:c3:31:35:7b:e5:2e:b3:77:ab:15:d4:3c:
6f:4c:b9:d7:84:8b:a8:64:00:d0:07:f1:cc:d2:33:
31:6a:b5:d0:62:d2:03:17:57:5c:6b:64:f0:73:ed:
17:70:f7:51:50:24:48:cc:f7:e6:22:09:8b:69:e6:
32:77:97:80:68:3b:fe:bc:90:c2:68:0c:8b:c7:06:
47:06:a5:34:31:29:a1:0a:e9:7b:e9:16:9c:d7:f1:
18:00:95:9c:a3:74:0f:7d:90:67:5d:b6:41:bd:16:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0F:CE:83:39:48:52:BE:64:3F:E4:32:3F:E3:E8:13:93:1B:3F:1C
X509v3 Authority Key Identifier:
keyid:6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ac:ff:1f:34:de:58:75:af:96:68:3a:b7:0e:19:c2:c6:14:
18:6d:4a:b6:07:9e:85:41:1c:b5:e4:7e:39:76:8b:81:d1:ae:
bb:42:bc:d4:f3:b0:ad:93:1b:2a:f5:f7:0e:25:f7:c4:90:2d:
42:de:32:ae:dd:68:a3:a8:c2:6c:85:22:68:b2:b0:fe:ce:58:
ed:64:2a:d3:8a:27:83:c1:50:16:8a:a8:f3:6a:1b:ec:17:b3:
66:e3:ec:cb:c3:ef:0d:1e:76:15:7c:6e:53:f4:1b:0c:19:b6:
c3:76:14:e6:f8:61:db:1c:4b:8f:12:ab:c2:ec:f3:78:73:d6:
69:2b:42:fd:b5:58:f6:91:0d:76:a4:a7:ed:a8:54:ca:66:29:
3e:fe:7e:c4:53:8c:05:b8:6f:47:d4:3a:5f:0a:a4:05:6e:1f:
49:4f:71:99:0e:fd:70:c8:76:47:f0:6c:7e:49:d1:b1:7c:6f:
0e:1b:aa:6c:cd:ad:8f:cf:9f:f0:67:3a:63:dd:fb:f4:9f:99:
16:87:e0:58:8a:f3:25:3f:ff:34:fe:59:26:07:54:47:56:6d:
5d:ab:8d:45:db:91:27:9e:79:0d:93:9a:ce:3d:bf:a3:c2:cf:
4b:ef:d2:4a:16:ed:5d:c6:10:48:1b:bf:d9:44:5a:56:91:fd:
37:3f:27:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:06:41 2026 by rpki-client