Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
File: bxOPLgM_lCu5TnMf9FJEjGgCroI.mft (raw, json)
Hash identifier: laWW2raMly2yeESTSQ64wLX9rePQwQSRrV6/dfMXK7k=
Subject key identifier: FE:5C:69:B5:A2:D0:DE:25:A0:6D:F0:FB:17:AC:3F:96:88:4A:65:0D
Authority key identifier: 6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
Certificate issuer: /CN=6f138f2e033f942bb94e731ff452448c6802ae82
Certificate serial: 019D992B9A1A951C8944202ED1ECA724173F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 02:01:04 +0000
Manifest this update: Fri 17 Apr 2026 02:01:04 +0000
Manifest next update: Sat 18 Apr 2026 02:01:04 +0000
Files and hashes: 1: YQR-M13FITu11JiiH0aP1_gjSMk.roa (hash: NMePy6MATxLOKWKo4OhLjfjmDVEUev8l7cfH0WAc4I8=)
2: bxOPLgM_lCu5TnMf9FJEjGgCroI.crl (hash: 2xZwscKrR8bqjnxUVW8yHCMkQTokdQOXZj5NtJZ4TCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:9a:1a:95:1c:89:44:20:2e:d1:ec:a7:24:17:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f138f2e033f942bb94e731ff452448c6802ae82
Validity
Not Before: Apr 17 02:01:04 2026 GMT
Not After : Apr 18 02:01:04 2026 GMT
Subject: CN=fe5c69b5a2d0de25a06df0fb17ac3f96884a650d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:d4:05:7e:27:7d:d6:1e:f2:4f:79:2c:50:
fe:7c:08:3a:0b:f8:35:ec:56:0d:70:d5:d3:0e:78:
d1:35:a5:c6:07:e7:7a:de:d4:c9:3a:1d:9c:d7:44:
94:26:4f:40:f7:00:e8:bb:ef:31:31:33:ff:1d:29:
82:f0:c1:70:3f:ba:75:06:e5:a9:8a:e1:05:cb:bd:
27:ca:c1:b0:19:60:17:f3:8c:de:5b:bd:f3:33:4f:
46:d7:d9:05:91:f1:6b:18:8f:dc:bd:42:fb:b1:84:
7a:f3:31:f3:ed:b8:66:e8:fe:65:8d:bb:93:2f:3c:
1d:ab:32:bb:1f:3b:68:24:ec:c6:15:49:5e:1b:23:
2a:2e:fb:60:03:bc:a1:8a:5f:52:e8:23:19:1f:6e:
89:e2:24:b9:6c:e5:c3:f0:07:c8:bc:90:89:77:65:
e1:b6:ac:64:84:7c:ed:e7:80:0a:fe:44:99:e2:9b:
63:c5:00:28:6a:80:c9:cc:16:0a:54:32:d7:01:02:
ae:24:45:65:f1:a3:dc:77:67:12:41:97:68:4d:10:
7b:72:10:7c:4d:c6:90:66:d4:e7:d7:36:f2:05:5f:
5a:88:9f:ef:97:dc:59:e1:a7:0f:4b:3f:36:36:2b:
1d:a9:76:2c:be:f5:b5:85:00:c1:ce:25:fa:3d:24:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5C:69:B5:A2:D0:DE:25:A0:6D:F0:FB:17:AC:3F:96:88:4A:65:0D
X509v3 Authority Key Identifier:
keyid:6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e3:1d:59:a6:c3:01:31:fc:3a:c5:b6:73:fa:24:32:b1:05:
82:ae:ae:97:26:a4:c8:2b:5a:04:24:ec:b7:31:88:d6:48:51:
b1:94:67:7d:4b:85:c7:42:b6:8e:29:b9:d5:77:14:90:77:b8:
90:59:71:cb:b5:1c:c4:88:be:ad:59:54:94:a6:e2:c4:ed:e2:
0b:94:00:fb:bd:40:ce:ea:37:79:c9:0f:54:18:77:e8:bc:b3:
c1:ed:6a:3e:71:c5:4e:15:29:41:f9:b8:5c:0c:6c:81:9b:ac:
51:f4:6d:d2:53:50:40:f0:69:6f:57:57:58:8f:3d:c3:9d:fc:
94:60:8c:6f:26:45:7d:56:18:28:eb:5a:fa:fa:39:4f:cb:1c:
0d:84:0d:f8:c5:52:d0:4a:b8:5f:7e:e8:6c:fa:e4:29:b7:2d:
81:97:00:7f:ac:f4:c4:27:ce:a1:e0:87:21:ef:d5:4f:f5:bc:
27:74:b0:05:9c:f9:eb:76:ad:30:3f:99:dc:f1:a4:b1:30:de:
ec:09:8e:d6:e8:08:ca:62:0c:3b:d3:8f:af:2a:5b:1a:2d:99:
3b:d9:fd:90:ba:31:89:48:2c:d3:e6:73:7d:bd:2d:52:07:b1:
81:14:79:c9:45:b2:1a:a6:36:7a:dc:b7:31:0b:24:35:d4:65:
a8:cc:65:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:57 2026 by rpki-client