Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
File: bF4zDPom_UTUKU_Nvd-9iVEMakg.mft (raw, json)
Hash identifier: Xw9crbdENLc01bde/Og0bX3S1HPdSfDxGB85v3W2lDw=
Subject key identifier: 24:27:AC:A4:C5:8C:27:52:F0:2C:B7:48:51:CB:86:A3:17:66:C8:2A
Authority key identifier: 6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
Certificate issuer: /CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Certificate serial: 019D9A751E01459CC42F053D17B36B15E9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
Manifest number: 0F5B
Signing time: Fri 17 Apr 2026 08:00:59 +0000
Manifest this update: Fri 17 Apr 2026 08:00:59 +0000
Manifest next update: Sat 18 Apr 2026 08:00:59 +0000
Files and hashes: 1: bF4zDPom_UTUKU_Nvd-9iVEMakg.crl (hash: 8CiecccVLaEVDhi9q2zscIFVnHCRq2wO+hTpbZL2i6Q=)
2: dxP5s46cfdGtCEKUTwZwMAVD5-o.roa (hash: bdBmbDABGKMk3f6j5ouSrfAperYeR4KSkhr2BdJOd/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:1e:01:45:9c:c4:2f:05:3d:17:b3:6b:15:e9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Validity
Not Before: Apr 17 08:00:59 2026 GMT
Not After : Apr 18 08:00:59 2026 GMT
Subject: CN=2427aca4c58c2752f02cb74851cb86a31766c82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:23:be:d6:89:ee:f8:b4:6b:3f:87:a5:25:
b5:b4:5a:7e:5a:3c:b8:93:85:7e:5d:04:c4:78:89:
4a:b7:b5:34:39:db:28:a9:f6:24:45:5d:fc:45:59:
e3:9a:16:70:c3:0c:a5:60:47:78:c4:e3:da:9d:ed:
95:67:e0:25:27:28:d0:81:62:bf:0a:79:34:8d:20:
d1:50:60:bf:c8:98:26:ff:5a:67:5b:10:35:b5:dc:
53:71:52:29:84:bf:9b:d4:db:76:99:43:44:0c:72:
5a:47:7d:9b:d6:aa:c4:08:d4:2f:b3:6d:1b:13:4b:
2a:a8:f0:2f:ed:46:23:84:91:87:de:97:40:f6:ca:
3f:c0:3a:c3:2c:02:91:7f:76:8b:e1:ed:22:c8:ca:
77:e5:99:72:c6:0e:d4:63:79:96:6f:d8:22:27:dd:
5b:bf:2a:35:65:55:40:09:35:8a:49:4b:88:cc:41:
3f:a7:14:11:d6:90:34:99:fb:cd:42:d9:eb:10:5f:
20:59:4c:a2:e0:b9:e9:3d:3c:2e:46:5e:11:20:c2:
61:4d:f2:4a:f2:a6:ae:cf:d5:96:fa:c7:f6:cb:07:
c2:82:a2:82:57:e0:71:ba:91:02:d1:25:d6:e6:a4:
38:e7:78:54:24:ab:ee:91:db:a0:55:6f:a6:31:42:
6b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:27:AC:A4:C5:8C:27:52:F0:2C:B7:48:51:CB:86:A3:17:66:C8:2A
X509v3 Authority Key Identifier:
keyid:6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6f:dc:cb:2a:0a:16:91:d6:27:2e:da:96:0c:2e:2a:47:03:
ff:68:8b:9d:5b:b3:a2:23:91:37:27:9f:59:ec:b2:d7:17:3e:
f8:a3:0b:1a:69:bc:75:6c:7e:0d:6d:bb:c0:9a:91:cc:18:0a:
92:36:33:2b:84:46:a0:a4:d7:84:82:a8:91:b2:c8:8a:54:ba:
64:b9:26:1c:fd:bd:b1:ce:43:9c:36:ac:87:10:21:28:71:0e:
af:19:05:80:63:c1:17:33:83:98:85:24:9d:15:d0:fa:ee:fd:
ce:b8:66:69:60:ca:3e:c2:c1:a3:26:24:8b:a7:71:02:f9:bc:
ae:ee:f2:10:83:ab:37:89:99:1e:af:ac:d0:4b:b5:e1:19:26:
bc:d0:e2:48:67:17:75:a3:76:68:df:3e:11:08:97:1f:1c:d7:
ed:13:4e:e8:7a:fa:72:18:f7:60:de:ae:76:1d:49:71:bc:77:
10:c8:98:0b:a5:82:81:01:30:2b:fe:43:a1:44:f1:d9:f9:4c:
4b:cc:b8:22:aa:1b:1e:1f:62:82:58:e5:a4:27:be:16:de:20:
72:bc:16:24:1c:fc:e2:54:da:11:39:0b:77:8c:20:7f:96:dc:
82:20:06:e9:fb:e9:d3:7b:a8:d5:4c:bb:e8:c9:04:ef:96:8d:
b6:81:f4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:11 2026 by rpki-client