Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft
File: bG9jkROWOM74MYEUEyzPJuFn06Q.mft (raw, json)
Hash identifier: zLRYcUvWymUs5ePmQ8V9q8bxLs5ua91mkdq1QEUzDQo=
Subject key identifier: FE:3C:BE:33:77:F4:C3:BF:25:18:5C:FE:64:C7:A1:E8:89:49:25:50
Authority key identifier: 6C:6F:63:91:13:96:38:CE:F8:31:81:14:13:2C:CF:26:E1:67:D3:A4
Certificate issuer: /CN=6c6f6391139638cef8318114132ccf26e167d3a4
Certificate serial: 019D99CFC6A44A7D74ED4DF47B3ACD565617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft
Manifest number: 159B
Signing time: Fri 17 Apr 2026 05:00:23 +0000
Manifest this update: Fri 17 Apr 2026 05:00:23 +0000
Manifest next update: Sat 18 Apr 2026 05:00:23 +0000
Files and hashes: 1: aCRE3gLyqKdnvA-j-2aLcuCjRwM.roa (hash: ynx5tfnKZJH99nxW03XgpU3cYgXZihD5CZxo4tNLmhI=)
2: bG9jkROWOM74MYEUEyzPJuFn06Q.crl (hash: TE9OV/wkRRW56HEyvT/06M3xM11wCqVKzVjAE6luP20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:c6:a4:4a:7d:74:ed:4d:f4:7b:3a:cd:56:56:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6f6391139638cef8318114132ccf26e167d3a4
Validity
Not Before: Apr 17 05:00:23 2026 GMT
Not After : Apr 18 05:00:23 2026 GMT
Subject: CN=fe3cbe3377f4c3bf25185cfe64c7a1e889492550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f0:5f:93:29:51:08:36:86:da:a8:68:4f:a8:
96:a2:ec:f7:69:ed:a9:f4:3b:b4:f4:60:67:57:d2:
7b:6a:21:e8:80:93:8c:97:e7:e0:0a:d3:c1:76:e8:
c2:3e:91:1d:8e:6e:4a:de:84:aa:ab:da:cf:75:01:
a3:b3:8a:d5:dd:8c:10:6d:60:2b:1f:40:90:b8:1d:
9b:1d:ff:cf:c4:47:9e:a9:de:d1:7e:8d:01:40:e3:
6e:ee:86:26:5c:44:c9:b4:74:ba:a3:fb:ab:ae:2b:
12:73:c1:e8:91:6f:d3:2a:d0:3b:66:fd:b6:3e:fb:
a2:15:48:49:6d:d0:87:23:5c:62:46:0c:f4:5f:4f:
6f:36:9c:57:72:7f:3c:b7:73:c3:c4:01:d6:e8:18:
57:8b:a2:b5:25:5d:d3:01:a4:4e:75:69:11:ff:a3:
26:fd:68:96:00:f1:c2:c2:1e:ce:29:10:15:c2:08:
bc:52:31:78:a4:63:1f:2b:eb:64:88:1c:b6:4f:ca:
90:14:f0:2e:3b:7e:99:3b:20:e8:87:77:3e:13:39:
21:13:d0:18:67:c1:6f:8e:b8:9a:7c:74:a9:3b:ff:
a9:d2:cf:24:ac:ad:31:24:b9:02:0e:35:9c:67:9d:
5f:2c:21:c4:9e:91:4f:ec:44:97:49:33:f9:5a:1f:
cc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3C:BE:33:77:F4:C3:BF:25:18:5C:FE:64:C7:A1:E8:89:49:25:50
X509v3 Authority Key Identifier:
keyid:6C:6F:63:91:13:96:38:CE:F8:31:81:14:13:2C:CF:26:E1:67:D3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:85:e5:9b:31:05:69:bc:ec:18:00:98:b6:59:f2:c2:0b:66:
6d:f9:d0:69:2a:65:78:88:f1:d7:e4:68:41:6a:e6:08:73:ec:
45:4b:6c:2b:86:87:5c:51:28:35:80:89:6f:83:7c:30:e1:50:
80:c2:c1:36:c9:ea:65:2d:4a:88:57:45:64:a3:48:66:ea:cc:
d2:23:f9:07:b0:d7:0d:c1:d9:d4:41:b0:a7:18:60:42:36:30:
3b:54:f2:da:b0:e2:1f:d3:79:00:39:e8:8c:46:2b:a7:8c:5a:
3d:96:72:ff:ec:f3:59:b1:ba:40:d7:48:3d:56:db:5c:de:05:
e3:1b:ef:d4:03:f2:48:14:85:e0:3e:61:50:30:66:0b:4e:dc:
44:23:5a:07:74:a6:7b:73:da:39:f7:a7:27:74:d8:a5:74:b6:
96:4e:38:d8:84:c4:fe:63:4d:ca:d9:b3:33:c0:b5:d4:a2:ee:
84:60:e9:e1:df:0e:8b:de:30:54:7a:7a:c8:6d:68:0f:e7:42:
ed:5c:31:58:76:f3:c0:67:ac:f4:26:c8:dc:b2:bc:48:35:5b:
f1:10:05:c0:71:a2:98:b5:4a:ad:92:aa:12:d7:c4:04:1e:b6:
8d:90:c6:a0:0e:a0:8a:e5:b3:3e:6c:4e:23:1e:03:99:e6:49:
8b:20:65:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:21:28 2026 by rpki-client