Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
File: bdtHI7M7T3LSCoxqi8xkakeAFwU.mft (raw, json)
Hash identifier: dEwHZcEEk6sd3StrX9wicDEk4w+BUMIB6ofgD6dft7A=
Subject key identifier: C3:00:1A:35:42:BF:AD:13:8C:BB:F9:48:AC:A6:F1:DB:18:D4:1E:CC
Authority key identifier: 6D:DB:47:23:B3:3B:4F:72:D2:0A:8C:6A:8B:CC:64:6A:47:80:17:05
Certificate issuer: /CN=6ddb4723b33b4f72d20a8c6a8bcc646a47801705
Certificate serial: 019D9B50F9205B2CAF2103D2EA0B67649E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
Manifest number: DA
Signing time: Fri 17 Apr 2026 12:01:08 +0000
Manifest this update: Fri 17 Apr 2026 12:01:08 +0000
Manifest next update: Sat 18 Apr 2026 12:01:08 +0000
Files and hashes: 1: bdtHI7M7T3LSCoxqi8xkakeAFwU.crl (hash: 294gSqLkpU+2km49L/i86YQiQpjF8wRFW1qgtFbdECI=)
2: eHp3RyfgNuQHsHsh65tMdSg96kw.roa (hash: Iz+ORoiDtNl1WNlxhQ85YUq+HSrXSAnu/AXImybgG6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:f9:20:5b:2c:af:21:03:d2:ea:0b:67:64:9e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb4723b33b4f72d20a8c6a8bcc646a47801705
Validity
Not Before: Apr 17 12:01:08 2026 GMT
Not After : Apr 18 12:01:08 2026 GMT
Subject: CN=c3001a3542bfad138cbbf948aca6f1db18d41ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:15:a2:e1:ca:a0:b1:a1:71:02:50:6f:fe:7b:
03:8b:b0:55:06:db:3c:92:0d:8f:78:d8:eb:05:a1:
f6:22:ae:cc:b3:02:a5:fc:8f:2e:8d:6d:eb:98:67:
1c:e6:38:60:00:f5:af:08:7e:76:fc:0f:59:37:01:
77:89:91:2b:a6:9d:22:6f:4b:e7:39:c2:a2:8c:31:
b2:d5:de:94:64:96:53:4f:90:82:59:9d:74:4b:73:
fb:1a:0c:2f:f8:c0:20:c3:02:b0:9c:e7:a3:e0:19:
f9:e0:e3:46:30:e2:70:52:72:e0:2c:0c:a3:df:d0:
4d:2a:f1:fb:68:4b:90:d0:e5:d4:ef:1a:58:bb:40:
53:8c:69:d3:35:0e:c4:9e:a0:0f:1f:ec:f0:c8:6a:
4f:4b:e7:c9:49:c5:e7:a9:5e:65:dc:8c:15:72:53:
c0:ef:17:04:1c:65:6f:06:54:3e:87:d8:e0:59:4f:
33:a9:62:2c:11:ec:75:a3:34:73:15:a5:df:ef:ba:
31:29:7b:2d:bc:b4:b4:c7:8f:17:93:96:52:02:e8:
0f:c3:fd:7f:2a:84:29:2a:c8:e0:f7:c5:a5:78:8e:
53:4d:f8:0d:e8:86:a4:d5:ca:ac:3f:45:60:1c:51:
a6:0a:84:57:86:99:48:f4:5f:7f:0a:cf:6e:05:fc:
26:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:00:1A:35:42:BF:AD:13:8C:BB:F9:48:AC:A6:F1:DB:18:D4:1E:CC
X509v3 Authority Key Identifier:
keyid:6D:DB:47:23:B3:3B:4F:72:D2:0A:8C:6A:8B:CC:64:6A:47:80:17:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f9:72:a9:ae:b0:3f:74:ed:3f:06:fb:4c:f7:18:b1:d4:0d:
90:c2:57:3b:e3:a4:26:42:38:49:82:a3:eb:a9:dd:eb:24:13:
e9:3f:02:6b:eb:1c:13:d8:bc:9c:b0:97:81:5a:ac:78:37:24:
6b:32:81:dd:e7:c7:86:b8:8b:87:e6:02:a9:d6:67:e1:d0:fe:
58:a4:72:1c:d0:dd:27:57:1b:da:7c:f0:1d:1b:75:6b:93:cf:
b6:fe:06:2e:32:c3:03:c7:7e:6e:f8:0d:3a:f9:11:3f:d2:69:
90:99:5d:e1:e6:cd:ec:0c:a2:85:aa:7c:4f:4a:eb:82:17:a7:
c6:39:68:4a:a9:75:c4:bf:21:7d:e5:cb:db:2d:59:ea:4a:d8:
57:1a:47:a5:bc:64:bc:fd:55:bd:a9:10:c2:de:19:fe:38:f4:
3b:0e:84:3e:ed:8a:ef:ad:84:66:20:ab:71:8a:3f:d3:69:de:
be:1f:6a:ad:0e:18:97:cd:09:df:74:fd:67:0e:5b:b4:9f:ab:
a1:32:47:6b:d8:71:61:42:63:47:05:8c:08:59:6e:78:a3:3a:
e0:84:5d:c5:c1:57:7f:f3:da:4f:87:df:42:03:88:f5:12:f5:
4c:a4:23:68:e6:dd:25:f1:c3:7f:6c:d1:7b:45:8b:7d:41:36:
15:f6:92:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:38:52 2026 by rpki-client