Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File: bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier: zJ5PMN1F6iFgbkMpDuCqYNKxoxCiscPV9vxo/ALvRVw=
Subject key identifier: C1:D6:31:68:94:0D:D2:52:60:AA:74:7C:D8:14:95:1F:24:F8:48:84
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial: 019D9961FB602ED4169D6C5A83B52C2D5A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number: 0D42
Signing time: Fri 17 Apr 2026 03:00:28 +0000
Manifest this update: Fri 17 Apr 2026 03:00:28 +0000
Manifest next update: Sat 18 Apr 2026 03:00:28 +0000
Files and hashes: 1: XUohtGZb3yVqVDccn7q7JYHvZfA.roa (hash: S4jZTcNJ/zA2EHs+0ZhX1cbm9+U3Kq3hAPlU7YdHNF0=)
2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: iHC2tmRqf7aOJCFrRb8vWZafppDUMAp6zC+vWQmgjQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:fb:60:2e:d4:16:9d:6c:5a:83:b5:2c:2d:5a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Validity
Not Before: Apr 17 03:00:28 2026 GMT
Not After : Apr 18 03:00:28 2026 GMT
Subject: CN=c1d63168940dd25260aa747cd814951f24f84884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:b9:f9:06:fc:44:04:c8:66:b8:9b:c5:25:
83:a1:15:4f:9d:32:bf:77:39:8e:32:99:a7:4c:55:
6a:70:cb:07:d8:e1:cf:e3:f6:50:fc:16:e0:b6:71:
ba:69:62:3c:b2:af:92:a4:ae:65:86:ae:e8:00:1b:
3f:52:11:53:aa:96:67:66:32:7e:f5:33:1b:44:1b:
e9:9b:24:5e:6b:0d:e8:f4:a5:19:a2:23:53:71:3f:
d8:0f:3a:e1:c2:f0:8c:fc:e8:5c:76:66:37:78:4a:
f4:5f:dd:6d:5e:5c:d7:78:10:a8:c5:60:b6:5f:aa:
b8:75:e0:ec:f2:7c:c8:57:54:1d:ca:7f:48:b5:d6:
d8:16:80:e6:b7:0e:f1:c2:32:bc:0e:47:b0:f6:3f:
81:e0:23:31:98:c5:97:56:aa:d0:77:ec:93:7e:29:
9a:83:3a:e8:57:75:1a:34:dc:08:7b:81:f3:20:cf:
8c:f5:cc:5c:cc:ca:48:82:87:f7:ef:ff:61:ea:c9:
15:3e:d5:75:2b:30:82:ed:5d:02:3c:d9:43:fa:3f:
f5:d1:24:aa:df:57:da:06:fb:7c:3b:6d:61:69:32:
da:5c:6d:45:17:7c:ab:45:c3:4d:12:bb:50:26:88:
27:99:4a:26:8e:db:89:d4:fa:f4:fb:68:10:9c:47:
0e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D6:31:68:94:0D:D2:52:60:AA:74:7C:D8:14:95:1F:24:F8:48:84
X509v3 Authority Key Identifier:
keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0c:80:f6:c9:b7:cd:a1:07:ec:58:a8:b9:d0:10:24:74:5a:
10:60:e0:36:21:31:5c:d8:12:cb:04:e1:3a:d1:c7:8e:20:fb:
5d:35:e5:90:7d:30:2c:cd:b3:d0:c8:7e:f6:3b:e1:f7:80:77:
da:ce:0d:9e:3c:f8:ce:cf:43:ff:ad:14:cf:45:be:cf:64:e9:
31:be:51:fc:2c:2a:7d:1c:0d:c1:28:c4:2e:d7:aa:8c:b6:13:
56:39:36:23:62:df:04:06:53:c4:b6:26:4e:4f:1f:b7:06:a3:
ef:7e:25:bb:d0:2b:ed:cb:6f:06:da:b7:43:c6:1b:11:39:d4:
9a:a1:73:3e:4f:9e:52:fb:79:f8:54:44:21:28:81:12:d8:9b:
11:84:50:88:00:86:9d:43:50:ac:bc:37:9a:b3:de:1c:78:6a:
6a:93:d1:50:2d:48:1e:fe:cb:98:68:8b:c4:52:80:a8:dc:58:
1b:52:16:e8:4d:78:c9:25:3b:ca:78:51:88:61:8a:58:9b:88:
ac:c2:37:f7:a5:85:1f:db:b2:7f:15:53:7b:2b:88:71:0d:c2:
9d:b2:ab:6c:2c:75:cc:e1:7a:fb:5f:4c:bb:f5:ad:f9:5b:14:
a9:cf:ae:63:a5:70:3b:92:0f:06:46:21:32:9c:cd:83:f2:bd:
ba:f6:6d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:25:46 2026 by rpki-client