Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
File: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft (raw, json)
Hash identifier: 66Pv4q7lOdtCqD84UxnXB4YdCi5Vmj+/k/cZ1dR0qmo=
Subject key identifier: 09:85:5B:BE:60:67:16:E0:D1:C5:96:B5:9E:81:26:56:6D:2D:54:5F
Authority key identifier: 04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
Certificate issuer: /CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Certificate serial: 019D9B50B6B26C82F096049BAF0FFB1342B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 12:00:51 +0000
Manifest this update: Fri 17 Apr 2026 12:00:51 +0000
Manifest next update: Sat 18 Apr 2026 12:00:51 +0000
Files and hashes: 1: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl (hash: MMSN25IYrHKoaeIO/0FxygWv/q2T9FuVhmzprN7G/qg=)
2: Nb75t2HmIANRhLGNXjt11cqlJUE.roa (hash: yEAQI/Ds6SqiJnioeA/4ztbYLQANaelVg2ffNspRA+U=)
3: OiEBp0GKa1Rrx271L_Ta-KgAi9g.roa (hash: lJRBkYeL9Nu/5ib2lExKbBVlayfZpUDinxzFBIQeINk=)
4: sE95hNuQAFs2bwnjWh5tS1eDbyo.roa (hash: lJLEBwFDxhpPzZc0IOmOMH9nwksk79qXsIs7n/ttFwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:b6:b2:6c:82:f0:96:04:9b:af:0f:fb:13:42:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Validity
Not Before: Apr 17 12:00:51 2026 GMT
Not After : Apr 18 12:00:51 2026 GMT
Subject: CN=09855bbe606716e0d1c596b59e8126566d2d545f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8c:da:b6:ac:8b:15:7d:d5:30:22:70:20:b6:
1f:c6:ab:d8:a7:bc:4b:cb:a3:62:b0:57:86:66:cc:
cf:0e:fb:8b:72:4f:b5:9f:30:11:6b:d5:f4:26:4d:
5f:ba:03:df:b6:10:9d:61:e0:cb:a2:20:b5:81:41:
ae:6b:9d:ae:d3:63:a9:5d:37:56:1c:f5:9c:54:e8:
8e:65:e5:71:51:d9:2d:25:67:67:ce:fa:9a:56:db:
12:25:ac:f8:e1:41:3b:dd:b1:16:b3:54:a3:26:00:
57:96:ed:d3:a1:2c:34:fc:dd:57:e5:12:a1:11:9e:
e7:16:d6:aa:9b:a5:94:e6:1f:69:a9:f7:5d:f5:5e:
88:ab:cb:74:3f:ac:ad:36:86:ea:be:d5:d5:74:d8:
bf:81:3c:cb:11:23:b0:41:18:a4:e8:56:5a:11:2f:
21:c7:ca:16:43:1b:3b:62:26:cb:50:33:59:8c:8e:
96:0a:4f:f6:da:d7:08:bd:83:8d:dd:3d:1d:08:9d:
b9:b5:c8:79:2d:4f:4a:2a:e6:ed:be:15:9d:ca:c7:
be:22:c4:a8:56:31:ba:8c:a6:83:7d:a2:19:c4:6c:
54:46:36:4d:47:c7:43:fc:c7:78:6b:22:b4:13:bf:
09:56:08:6b:70:de:5d:85:01:50:ed:71:0a:9d:dc:
b7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:85:5B:BE:60:67:16:E0:D1:C5:96:B5:9E:81:26:56:6D:2D:54:5F
X509v3 Authority Key Identifier:
keyid:04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a0:2d:54:04:da:9f:f2:e7:65:b4:72:d5:59:16:82:f9:8a:
c4:ed:8c:a2:1f:6a:1a:7e:2d:7e:5f:8c:84:fa:dd:f2:f4:87:
3e:59:e6:d7:b8:e9:2a:3e:9c:bb:54:4a:76:c7:ad:c4:39:29:
fd:e8:1c:92:1b:29:70:c5:57:c0:a9:a0:87:9c:43:42:1c:5a:
d4:73:85:fc:00:44:b2:02:79:fb:99:6e:59:16:67:10:59:1f:
3f:10:2b:f1:2c:d5:dd:6e:8f:41:a3:10:13:74:ce:fd:29:0d:
ca:a0:24:2b:67:9a:7c:77:56:f7:23:04:ee:c4:e6:45:16:c6:
92:d0:fb:be:9b:5d:e0:2d:1a:c5:3c:50:f5:d7:f5:4b:d3:09:
53:74:db:e1:24:d4:9b:3f:e8:1b:11:f1:9a:29:a6:d2:2f:23:
88:10:ab:0c:5b:c8:2f:64:c4:d2:66:38:f4:ea:94:b1:97:2a:
18:60:e5:f9:98:53:85:6a:13:73:af:56:56:02:bf:81:d4:35:
88:fd:8a:ff:f9:ec:bc:d9:ac:3e:99:50:8c:24:7e:47:05:84:
20:99:49:8a:b2:8e:7d:5d:a7:97:d3:46:f2:1a:20:49:d5:47:
bb:4d:3d:b7:90:94:c9:71:f5:b1:65:ac:b2:ea:9e:8b:e0:17:
df:0b:b8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:27:29 2026 by rpki-client