Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
File: bBzlMVpD1WYc3NzBudfarPppkPc.mft (raw, json)
Hash identifier: gq/Qd0/B04edqfuGltEii8KpN7szIqYlJTbt3d1+1UI=
Subject key identifier: 1D:E4:8A:7A:CF:14:06:33:04:8F:06:75:32:77:22:7C:9E:EA:19:C9
Authority key identifier: 6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
Certificate issuer: /CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Certificate serial: 019D98BD89FDC294DA855FBEE8421511CBE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:00:51 +0000
Manifest this update: Fri 17 Apr 2026 00:00:51 +0000
Manifest next update: Sat 18 Apr 2026 00:00:51 +0000
Files and hashes: 1: 9p7v24IWi54XMfmEVEZZq-XhIaM.roa (hash: JdpVpLfE7UnbhdOWMCYVFP9oCgWbgMDDUO/p12HpSSw=)
2: bBzlMVpD1WYc3NzBudfarPppkPc.crl (hash: aWibZ1G4hR7ng4/2PseTskQPjVvFRdB3jFT7dMKD7z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:89:fd:c2:94:da:85:5f:be:e8:42:15:11:cb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Validity
Not Before: Apr 17 00:00:51 2026 GMT
Not After : Apr 18 00:00:51 2026 GMT
Subject: CN=1de48a7acf140633048f06753277227c9eea19c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:42:2f:8f:82:db:ce:57:78:56:1a:35:c3:3f:
ea:21:01:12:15:aa:05:fc:13:b0:37:87:f8:ee:77:
01:01:42:d2:bd:75:47:64:e2:eb:69:b5:25:75:5d:
d2:96:92:0a:0c:9c:cc:05:c9:69:62:43:0b:03:68:
40:2a:60:43:d0:cb:ca:74:da:69:a4:0d:d2:2a:47:
1e:63:ed:0e:58:3c:4d:51:1c:0e:6e:97:9c:2a:ff:
4f:ca:92:00:1e:07:5f:4f:9b:40:7c:5e:41:f9:e6:
73:8a:9c:20:23:d8:fc:5d:80:5a:ca:54:15:14:9a:
28:f1:e2:58:03:89:22:b3:94:49:10:f9:7d:45:ef:
25:fa:e7:c1:34:7d:c6:73:28:e8:b3:cc:cb:78:dd:
06:78:08:0b:da:8a:a3:ea:61:c7:fa:a7:db:c1:86:
97:fb:08:57:8a:7d:39:30:46:57:07:4a:07:23:26:
2d:0d:07:dc:a3:5c:a4:58:ae:a4:55:eb:35:84:ee:
22:8c:75:f9:9f:a5:64:91:e1:67:16:5e:87:48:1d:
12:1f:eb:d5:95:d1:7b:a4:7c:81:39:0a:97:c8:7f:
fb:9c:a4:78:34:2c:42:3f:21:21:c2:22:72:fe:e4:
85:57:7f:89:e8:41:4b:39:19:fe:4f:c6:c5:4f:c3:
e6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E4:8A:7A:CF:14:06:33:04:8F:06:75:32:77:22:7C:9E:EA:19:C9
X509v3 Authority Key Identifier:
keyid:6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b8:75:03:16:bb:dc:0d:da:61:c9:8b:46:f1:16:7b:18:1b:
f8:70:3c:c0:6e:14:16:ed:0c:46:e6:48:e3:95:ce:96:06:ca:
a8:f7:6c:b0:44:3d:6c:36:8f:8b:9d:37:af:54:a1:35:2d:81:
69:db:18:fa:73:46:f4:45:c4:25:7c:dc:4d:2b:97:0c:9f:5b:
33:8f:ec:92:82:e8:c7:20:7a:4f:bb:00:ff:c0:3d:ad:0c:c5:
55:63:ac:60:ef:54:2b:d5:78:36:a0:28:03:3e:2a:ac:16:0d:
42:a7:b1:49:b0:bc:05:53:cb:1f:ae:34:db:5b:96:97:6c:79:
83:6e:22:f7:9c:f7:ba:2c:4d:68:ca:e6:f5:9a:07:a8:c8:ec:
9e:ab:cc:a5:51:af:d1:8f:4d:0d:ac:30:3d:4d:2a:40:ee:26:
14:04:42:d3:2d:df:2e:11:76:11:2d:a0:9a:b1:fc:74:02:02:
fa:2e:9e:bc:4d:e4:2f:5e:48:f6:b3:ad:99:65:e8:da:e3:6f:
9d:d6:8d:c2:58:9f:c3:c2:86:68:14:91:14:db:a6:67:2c:ad:
19:bc:ad:60:82:af:13:d0:11:0b:12:04:62:26:fd:8c:da:dc:
00:0b:e6:58:4d:8f:6a:a8:a2:b3:73:ac:21:1d:1a:46:96:64:
84:20:34:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:07 2026 by rpki-client