Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
File: bc0iYSmgbEho-hD-gtImFrsvZps.mft (raw, json)
Hash identifier: ppIpY1xU5gEQhQAxty0pxPULfdqifaQKnR11q5g4ox8=
Subject key identifier: 53:99:D6:7B:88:B2:53:3C:A1:BE:7A:37:48:F6:78:A3:85:F0:30:68
Authority key identifier: 6D:CD:22:61:29:A0:6C:48:68:FA:10:FE:82:D2:26:16:BB:2F:66:9B
Certificate issuer: /CN=6dcd226129a06c4868fa10fe82d22616bb2f669b
Certificate serial: 019D9D0802DADF53EE22632A19455144D1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
Manifest number: 8E
Signing time: Fri 17 Apr 2026 20:00:41 +0000
Manifest this update: Fri 17 Apr 2026 20:00:41 +0000
Manifest next update: Sat 18 Apr 2026 20:00:41 +0000
Files and hashes: 1: 1CzgwJKpK4Y-ytE3Jk75BVJFCaw.asa (hash: kqjlBAFenkfED4XnrpwrUl0VNz5Mjci/dgiqz07rJas=)
2: bc0iYSmgbEho-hD-gtImFrsvZps.crl (hash: MfiTQKV5uqMRNOApO+8cr3dvXam87ohvbNczmwqVgy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:02:da:df:53:ee:22:63:2a:19:45:51:44:d1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dcd226129a06c4868fa10fe82d22616bb2f669b
Validity
Not Before: Apr 17 20:00:41 2026 GMT
Not After : Apr 18 20:00:41 2026 GMT
Subject: CN=5399d67b88b2533ca1be7a3748f678a385f03068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:20:7d:24:3c:c9:f5:63:a0:f1:b5:9a:96:
1e:44:c3:75:9c:33:87:d0:54:78:f0:5c:38:f5:46:
ba:34:04:24:9a:e3:80:37:d5:bd:ae:8b:05:ac:84:
12:a5:96:72:4a:04:cb:4f:15:00:0c:12:3b:74:57:
8d:3c:d9:92:8d:3b:07:10:7e:77:d1:d0:46:81:c7:
59:50:63:96:58:01:d2:42:2d:c2:8c:4a:71:a9:96:
5d:50:b6:9c:42:5c:79:ee:f6:cc:1b:8f:56:be:54:
7a:6d:5c:85:d0:85:f3:01:0c:06:05:95:d8:10:ad:
50:2b:fc:66:e8:6c:61:11:31:f4:db:84:b9:13:d8:
51:66:30:7b:b3:ac:1d:94:ea:33:18:f5:4b:90:9d:
74:4b:d6:02:3d:23:38:6f:12:4f:36:c0:f8:b0:f6:
a0:2c:27:87:05:2b:6e:db:96:bf:a2:7d:d8:a5:c2:
a1:fa:f8:36:47:dc:25:8a:7e:28:e8:35:c8:ee:51:
32:e5:27:f3:9e:02:e6:4a:dd:10:99:13:ae:4b:3d:
95:42:88:88:ac:1e:8e:33:53:7c:8e:ee:51:41:e8:
99:e6:7a:dd:40:c6:93:d6:66:9e:b5:9a:c4:a7:fa:
2d:c9:a8:9a:7b:02:80:f1:47:90:64:7b:cd:52:f4:
b4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:99:D6:7B:88:B2:53:3C:A1:BE:7A:37:48:F6:78:A3:85:F0:30:68
X509v3 Authority Key Identifier:
keyid:6D:CD:22:61:29:A0:6C:48:68:FA:10:FE:82:D2:26:16:BB:2F:66:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ec:6c:da:46:5c:03:de:63:4b:66:81:21:08:2c:fc:50:8a:
99:cf:30:1a:3f:82:34:d8:d3:26:6d:6c:ba:7c:79:ca:76:3b:
94:e1:61:3b:68:6e:ae:9f:f7:8d:b4:3e:fd:12:61:bd:cd:95:
e4:71:02:bf:3a:11:d6:bb:51:51:2c:63:98:22:eb:89:a2:72:
75:20:74:7d:98:ee:27:e4:b8:b4:b5:4c:7d:7c:89:17:26:82:
91:34:66:fd:2a:8a:fc:ee:b8:d2:52:ca:69:9d:76:d7:28:82:
39:62:96:a2:e4:f6:ce:b0:ff:c6:8c:00:5c:01:4b:27:39:f0:
b8:b1:5b:1f:58:b2:0f:17:ed:d8:7d:fd:74:10:83:02:c2:95:
f2:8a:d3:54:2e:16:49:9a:a5:a9:4b:68:97:cb:94:56:79:5e:
b6:ce:17:e2:30:fe:01:89:8f:d7:dd:6f:2f:0e:4e:45:52:2d:
dc:77:24:13:29:50:a5:db:37:d9:fc:2d:0c:3a:98:59:a7:ad:
e3:fc:ef:1e:e0:ac:7a:8d:79:c3:e2:8f:6a:14:18:d4:fe:11:
93:9e:02:19:38:ae:9c:ac:38:20:5b:64:f7:c5:d9:b5:06:48:
17:ba:71:ed:82:1a:38:c3:f3:ad:91:d4:b4:20:02:4f:ef:c6:
1a:9f:e0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:43:06 2026 by rpki-client