Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
File: bCynx_AN7ET0jEnyKldylIaaqbo.mft (raw, json)
Hash identifier: 4bwnTOGC1L798zKU/zH3C+UtTGWiCnygdSjkgCD66ts=
Subject key identifier: 49:1D:DC:31:78:F2:A9:92:52:42:84:F5:CD:51:6D:50:49:21:13:70
Authority key identifier: 6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
Certificate issuer: /CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Certificate serial: 019D9A748E7B212E328DBFAAE60F4FCB67A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 08:00:22 +0000
Manifest this update: Fri 17 Apr 2026 08:00:22 +0000
Manifest next update: Sat 18 Apr 2026 08:00:22 +0000
Files and hashes: 1: JfKoDtrhJ-i-G9aVy_3EyZTHhdQ.roa (hash: YvPO7VlYOdBTaEg9nBYo6BImKnaR242b+DsMusahNWM=)
2: bCynx_AN7ET0jEnyKldylIaaqbo.crl (hash: cmXuh6Uo6rTJNBCWr4yri1ng0O/D9Z8v5XBWjZ7De5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:8e:7b:21:2e:32:8d:bf:aa:e6:0f:4f:cb:67:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Validity
Not Before: Apr 17 08:00:22 2026 GMT
Not After : Apr 18 08:00:22 2026 GMT
Subject: CN=491ddc3178f2a992524284f5cd516d5049211370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:c6:2d:0c:e2:43:99:85:14:4d:db:a4:30:
e4:05:a6:5c:0c:9c:ef:43:fe:d5:25:11:c1:a1:6d:
dc:bf:c9:db:26:ae:f1:9b:94:25:a3:6b:36:9b:c6:
b5:7d:74:d5:ee:58:8e:80:05:a6:19:0d:34:6b:37:
a4:fd:37:67:54:68:7c:8c:29:fe:a7:ee:43:5e:94:
af:c9:4a:65:97:21:33:9c:a9:73:b4:20:68:ed:99:
f0:98:4d:9e:d6:78:cf:75:54:0b:ea:27:79:d0:5a:
9b:c4:0c:51:6d:a2:34:26:d6:ea:96:f8:9b:b1:d8:
3b:24:cf:7a:fe:2e:96:23:4a:92:ad:be:98:b8:50:
20:d8:da:28:c1:34:28:09:ad:d3:91:de:ed:e3:67:
5a:73:9e:8e:a7:1f:d5:50:d1:3e:75:fd:82:b3:30:
6c:df:0f:be:51:20:0f:47:89:48:59:34:69:a8:f0:
cb:23:b4:db:fc:bd:ed:a6:38:2b:9a:ea:c6:eb:78:
63:a4:6e:9d:8a:d5:1c:19:69:17:0e:b6:66:4e:9f:
4d:2a:b1:05:7f:d4:f4:3d:69:64:06:cc:8a:ef:4a:
4c:e2:4c:22:7a:32:41:3f:b9:3c:32:d8:c6:07:2d:
6d:43:d9:86:d6:b0:8a:83:cc:5e:9e:96:b6:88:51:
18:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1D:DC:31:78:F2:A9:92:52:42:84:F5:CD:51:6D:50:49:21:13:70
X509v3 Authority Key Identifier:
keyid:6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0a:00:01:88:e5:4b:08:2c:bf:ea:fd:ae:ad:11:94:84:97:
a2:5f:f6:0b:0d:16:e4:17:8a:45:04:b8:9b:2d:78:05:97:49:
6e:b2:81:85:4a:69:2a:74:4c:61:2c:5b:f7:3b:d2:68:ff:9d:
79:7d:73:b0:d2:a9:f5:f2:f0:05:a1:8d:be:a2:6c:5b:b6:c8:
b0:1c:cb:23:34:e5:fa:62:e4:2c:06:e4:4d:c5:05:52:d4:f9:
35:71:a0:b8:6e:50:b7:27:41:20:7c:87:00:81:4a:2f:56:6f:
d0:1a:b5:7a:8e:a1:51:8a:6c:43:00:91:e1:39:f5:ae:ac:3b:
6c:1c:c9:94:54:db:31:6b:26:5a:ac:75:77:50:a4:a1:8a:ed:
de:39:76:c4:b4:4f:14:ed:a6:27:8a:33:71:00:1d:8b:76:1d:
2a:da:5e:e7:ab:1c:b2:cd:b5:f1:96:ea:f4:55:96:8a:30:99:
be:87:91:12:ca:65:68:53:30:5d:53:ff:23:12:64:f4:a7:9f:
54:d9:0d:20:fd:0a:61:dd:24:bc:99:f6:a8:34:c1:94:7c:e9:
2e:e0:fe:d0:76:21:9e:e4:11:04:4b:98:8e:3c:38:2b:47:51:
28:fd:ed:39:20:8c:69:dd:22:27:64:81:65:58:55:41:86:7d:
e5:0a:ac:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:29:14 2026 by rpki-client