Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
File: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft (raw, json)
Hash identifier: vrA7Ezz1fDGVsW6rSElfhGiXkRHEaWO1dqaIHumq0nU=
Subject key identifier: 40:05:B0:73:01:08:B5:85:7F:D0:95:C6:20:13:6A:77:67:5C:6C:AE
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial: 019D9C2CA7146B9DCE72DA226A231727B7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 16:01:05 +0000
Manifest this update: Fri 17 Apr 2026 16:01:05 +0000
Manifest next update: Sat 18 Apr 2026 16:01:05 +0000
Files and hashes: 1: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl (hash: 0/bw0JObKU26BnDIpeZjm/8dKiRkVIDF6tZ0qyGNkUQ=)
2: 8pAxGBtMIYfsfvto8lp_BYfRQDY.roa (hash: +JsvqV3b78G3djyCkktC2twpOWnCewuiBinhCejbzrY=)
3: qgwM28zCMsMYstsZZspf-r4p7tc.roa (hash: ZC8uQNkGcALsZhl+yLEhxpCuDedOkoY7XXctytlr424=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:a7:14:6b:9d:ce:72:da:22:6a:23:17:27:b7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
Validity
Not Before: Apr 17 16:01:05 2026 GMT
Not After : Apr 18 16:01:05 2026 GMT
Subject: CN=4005b0730108b5857fd095c620136a77675c6cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d3:0f:e6:0e:90:c7:0a:87:ff:2e:91:55:f1:
06:5c:e2:b7:2d:99:d8:46:be:29:e9:a7:60:3e:fb:
05:61:89:ad:30:fe:ad:7d:78:99:a6:16:09:ad:8f:
f1:ec:ff:52:78:67:d7:9e:65:af:b6:55:f6:5e:62:
51:36:1d:97:df:c4:6d:da:47:fe:53:af:48:ae:05:
0a:9b:ac:11:b2:4b:88:a6:13:11:22:2c:01:4a:17:
01:1c:ab:00:a5:f3:ff:f6:5f:13:6e:54:66:e7:21:
03:35:c3:7e:c1:f7:82:d4:54:0e:43:1b:bb:59:92:
05:e8:f5:c9:f6:60:07:4c:55:c9:80:4b:02:d8:d5:
3f:fb:70:43:03:15:63:4d:18:0a:0e:6f:3c:e0:2c:
20:4e:57:26:66:8b:d9:aa:f2:57:10:0c:12:5c:ab:
a0:d5:e9:da:a5:68:ed:42:7f:4e:9b:db:43:b7:47:
80:13:f4:fc:4f:9f:15:30:b9:3f:08:7b:fe:53:c4:
3c:0c:37:dc:ab:aa:80:87:08:57:64:f3:b0:86:92:
20:04:84:30:2b:fb:cd:1b:74:e5:32:7b:1a:b2:59:
de:2b:4e:b7:37:3e:f4:c4:84:5c:d8:df:ae:6d:1e:
10:0b:9a:8f:0c:47:51:ca:0b:07:3d:54:78:37:fa:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:05:B0:73:01:08:B5:85:7F:D0:95:C6:20:13:6A:77:67:5C:6C:AE
X509v3 Authority Key Identifier:
keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ad:dd:e4:85:be:c0:4c:d8:bd:0c:3b:64:05:c9:72:07:ab:
0c:a6:9d:5c:c0:b1:87:15:bd:45:06:14:de:0b:86:23:37:cb:
b9:82:2d:e7:4b:8c:00:7b:ec:3c:d5:6c:c3:17:f4:7c:42:a8:
fd:4d:aa:5b:d9:8d:62:c0:84:12:36:86:6e:d7:1b:eb:ae:2f:
54:0a:79:1f:d1:9c:01:11:92:94:a9:44:38:d9:93:ed:b2:44:
66:e9:2b:60:4b:cc:31:39:d8:5f:67:1e:58:75:ad:df:62:1c:
f1:ae:38:6c:2a:de:a4:e5:60:28:c0:d3:98:15:c8:2e:60:be:
bd:f9:6e:2d:ea:63:4c:8d:53:66:12:1a:b9:25:75:ba:37:eb:
7f:68:22:91:fb:f2:7a:7b:d6:4e:d3:08:95:0f:67:32:48:26:
7a:ce:58:9a:81:8d:69:87:2a:e4:26:d4:51:64:3e:7c:82:a9:
35:f1:f5:12:38:bd:e4:e2:83:a4:3e:e6:ce:bb:0b:e2:2b:07:
ba:41:61:6a:f1:85:d2:0d:e6:dd:b4:4c:8b:28:a2:01:24:fd:
a0:d9:ac:09:c6:c5:44:46:58:e3:70:9c:1c:25:db:b8:48:e2:
e1:25:c8:97:28:6a:0f:4c:12:cd:bd:1c:bb:38:22:1c:1b:56:
33:0a:08:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:49:03 2026 by rpki-client