Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
File: BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft (raw, json)
Hash identifier: JxWCY1FfESvYEMXcUqx89TiV41xX/QoD8wCFTIZlCOQ=
Subject key identifier: B9:CC:A8:E5:DE:D7:1B:7B:9B:55:27:CF:53:F8:C1:EA:F0:2B:F8:93
Authority key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
Certificate issuer: /CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Certificate serial: 019D9A749D36200C80728A783C205AC4ACCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 08:00:26 +0000
Manifest this update: Fri 17 Apr 2026 08:00:26 +0000
Manifest next update: Sat 18 Apr 2026 08:00:26 +0000
Files and hashes: 1: BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl (hash: yFzZ39iM/t1VkA2Zez/S2MCpKVjTUczvhgefqD01NHo=)
2: p22i5NlXphpjpdeMcOJN9-jvrCA.roa (hash: QDB1Dxkmg+JHCcUldIxoeyJYQCEAZzbZFwoEItJyux4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:9d:36:20:0c:80:72:8a:78:3c:20:5a:c4:ac:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Validity
Not Before: Apr 17 08:00:26 2026 GMT
Not After : Apr 18 08:00:26 2026 GMT
Subject: CN=b9cca8e5ded71b7b9b5527cf53f8c1eaf02bf893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:e0:38:86:41:87:e4:0f:b7:36:c9:53:ac:
36:3d:00:c5:e0:fe:06:83:a1:b6:d2:3f:35:7b:17:
6f:df:62:c9:44:73:1a:c9:e1:b0:b3:33:67:75:aa:
c8:9d:20:45:ca:94:13:21:1a:61:33:8c:da:9f:c7:
f9:44:c6:cc:f5:a0:58:ff:e8:39:04:e3:31:80:59:
32:fc:94:64:98:83:2d:26:a0:96:fe:a9:53:13:73:
ed:5a:d3:5a:80:18:39:c3:ac:42:9a:8b:59:43:ca:
73:90:3f:c3:61:d7:b3:e7:c0:21:de:6c:76:d5:13:
0d:14:83:60:ca:20:ea:13:a2:73:93:cf:14:05:81:
2b:4f:9b:8d:da:d5:e6:f5:2f:29:5d:b3:e7:fc:55:
78:cf:19:b4:cf:d4:27:81:35:72:00:ae:f3:37:53:
39:e1:e6:ca:36:36:f1:98:90:75:39:70:dc:4b:39:
75:36:c8:c9:03:1e:39:cb:d8:df:8e:b5:55:af:91:
3c:07:11:52:ed:96:95:51:d9:6f:35:f1:b8:f4:dc:
97:b8:70:44:b4:9d:33:6f:dd:d9:b0:7e:0d:82:22:
a7:8c:db:03:03:bc:27:c6:c6:a3:36:07:6b:2f:69:
82:6c:7d:d9:a4:3c:2f:17:63:d2:b0:5a:9f:cc:3a:
09:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CC:A8:E5:DE:D7:1B:7B:9B:55:27:CF:53:F8:C1:EA:F0:2B:F8:93
X509v3 Authority Key Identifier:
keyid:05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:42:3e:e9:ba:44:a5:12:de:34:f5:d1:2b:b6:5b:75:80:2b:
65:0c:94:3a:8f:8f:6f:83:6f:c5:f9:e6:91:55:24:f7:14:8a:
12:6d:f8:02:35:c6:4c:ae:77:5b:71:18:74:9f:75:7e:80:e2:
15:e4:8e:cb:99:a8:a1:66:6a:ae:96:5f:e9:91:0a:a3:c3:7f:
2f:2e:ff:72:d7:a0:dd:5b:0d:4d:34:89:72:c6:a7:e0:15:93:
53:5e:a1:47:ca:a5:98:1c:cf:24:50:77:33:94:7b:ef:03:23:
1e:8b:f2:37:66:87:ae:b1:ac:d8:6e:12:89:33:45:9d:ea:d0:
b3:d6:78:83:5f:33:79:a5:5b:a9:5e:bf:e5:f9:03:8a:bb:e2:
de:54:11:57:c1:05:4b:fe:1a:a0:4b:ad:3c:89:c5:a9:ce:ce:
db:13:4e:23:1f:03:14:93:02:3b:7f:44:6d:0b:5c:05:24:0d:
73:97:94:85:b6:1b:f4:ed:9f:cc:0a:6d:9c:e4:bb:09:83:6d:
c5:8d:c9:58:86:a4:b1:3a:35:c0:77:5b:bf:95:8a:d3:4f:06:
16:69:9d:66:a5:6b:18:7f:52:8e:37:d4:62:a5:de:22:d7:d3:
9a:1b:b0:2c:8c:b7:05:fd:d6:9a:83:d0:25:4e:e2:65:3e:88:
7e:c5:a0:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adJ02IAyAcop4PCBaxKzLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NzQwN2QyZTdiMmZmNGJjZWU2ZWExMGQ0MDg1MmVjZGNi
YzY5YjgwHhcNMjYwNDE3MDgwMDI2WhcNMjYwNDE4MDgwMDI2WjAzMTEwLwYDVQQD
EyhiOWNjYThlNWRlZDcxYjdiOWI1NTI3Y2Y1M2Y4YzFlYWYwMmJmODkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAbgOIZBh+QPtzbJU6w2PQDF4P4G
g6G20j81exdv32LJRHMayeGwszNndarInSBFypQTIRphM4zan8f5RMbM9aBY/+g5
BOMxgFky/JRkmIMtJqCW/qlTE3PtWtNagBg5w6xCmotZQ8pzkD/DYdez58Ah3mx2
1RMNFINgyiDqE6Jzk88UBYErT5uN2tXm9S8pXbPn/FV4zxm0z9QngTVyAK7zN1M5
4ebKNjbxmJB1OXDcSzl1NsjJAx45y9jfjrVVr5E8BxFS7ZaVUdlvNfG49NyXuHBE
tJ0zb93ZsH4NgiKnjNsDA7wnxsajNgdrL2mCbH3ZpDwvF2PSsFqfzDoJGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnMqOXe1xt7m1Unz1P4werwK/iTMB8GA1UdIwQY
MBaAFAV0B9Lnsv9LzubqENQIUuzcvGm4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlhRSDB1ZXlfMHZPNXVvUTFBaFM3Tnk4YWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85MjlmMWItYjA0Ny00OGJmLWE4ZjEt
MWJlZDJlZTA2NWYwLzEvQlhRSDB1ZXlfMHZPNXVvUTFBaFM3Tnk4YWJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85MjlmMWItYjA0Ny00OGJmLWE4ZjEtMWJlZDJlZTA2NWYw
LzEvQlhRSDB1ZXlfMHZPNXVvUTFBaFM3Tnk4YWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkI+6bpE
pRLeNPXRK7ZbdYArZQyUOo+Pb4NvxfnmkVUk9xSKEm34AjXGTK53W3EYdJ91foDi
FeSOy5mooWZqrpZf6ZEKo8N/Ly7/cteg3VsNTTSJcsan4BWTU16hR8qlmBzPJFB3
M5R77wMjHovyN2aHrrGs2G4SiTNFnerQs9Z4g18zeaVbqV6/5fkDirvi3lQRV8EF
S/4aoEutPInFqc7O2xNOIx8DFJMCO39EbQtcBSQNc5eUhbYb9O2fzAptnOS7CYNt
xY3JWIaksTo1wHdbv5WK008GFmmdZqVrGH9SjjfUYqXeItfTmhuwLIy3Bf3WmoPQ
JU7iZT6IfsWgFg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:08 2026 by rpki-client