Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
File: bkif4cfiCgsMY4QsRcFsV2MXhdM.mft (raw, json)
Hash identifier: qw8uHjlja+nI4Xl4S8G7/o2pCkWalwK8++kaZnRdx8k=
Subject key identifier: 36:92:C5:5A:16:C6:97:CC:4E:A0:BA:06:0C:D7:70:10:E3:65:AC:4C
Authority key identifier: 6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
Certificate issuer: /CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Certificate serial: 019DA2D307066841BDEAB2027339DD7463BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
Manifest number: 18C8
Signing time: Sat 18 Apr 2026 23:00:32 +0000
Manifest this update: Sat 18 Apr 2026 23:00:32 +0000
Manifest next update: Sun 19 Apr 2026 23:00:32 +0000
Files and hashes: 1: 7y9hj1vi8evyxMWsiJIGH1_53AM.roa (hash: Q69uQTzaOq7UQxdu+Czlq7rx75YhJrEs8hTR3Ul9WN0=)
2: bkif4cfiCgsMY4QsRcFsV2MXhdM.crl (hash: niXj0xZD3gZSWa5WA1qjsRurBZvjLV3zuVRh8iVP4+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:07:06:68:41:bd:ea:b2:02:73:39:dd:74:63:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Validity
Not Before: Apr 18 23:00:32 2026 GMT
Not After : Apr 19 23:00:32 2026 GMT
Subject: CN=3692c55a16c697cc4ea0ba060cd77010e365ac4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:a3:8a:3d:67:86:8c:c1:f7:12:eb:e3:4e:
e3:3f:77:81:66:08:5c:65:22:3c:32:db:af:b2:16:
f0:3e:65:8e:f0:00:34:a5:74:26:62:ee:af:c1:14:
33:21:cd:b9:1c:0e:73:fd:cd:d3:bf:65:d1:a5:6b:
a0:38:06:e2:4e:81:4a:63:88:a9:18:9b:70:17:23:
b5:f2:f0:d5:81:69:77:92:4c:b3:d0:6b:a3:14:01:
64:5b:d4:3d:76:51:18:13:19:64:35:0f:0b:f1:aa:
4a:42:e4:2b:d8:94:39:e8:40:64:85:dc:33:1b:26:
87:4f:78:4e:83:e6:d5:dc:9b:56:8a:b6:00:df:39:
12:84:a5:6d:67:3a:24:24:e4:91:e7:e8:f5:b4:33:
aa:48:4b:f9:f9:3a:23:29:83:48:f2:e6:50:09:13:
df:ad:2b:61:ed:31:6d:25:9c:61:e8:5e:33:95:c6:
b1:fd:13:c8:dd:2f:07:bc:c1:31:86:bc:d6:22:42:
e6:a7:95:0c:93:98:77:bf:cb:5e:c1:ef:67:53:ec:
ec:a2:ad:a3:9b:98:96:37:02:6c:b4:c9:3c:27:54:
25:b3:4a:a3:0a:f9:1b:8f:25:49:a0:d0:a7:4b:07:
2a:51:b5:56:d8:22:39:bb:a2:6b:d0:d7:3f:d2:a1:
cf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:92:C5:5A:16:C6:97:CC:4E:A0:BA:06:0C:D7:70:10:E3:65:AC:4C
X509v3 Authority Key Identifier:
keyid:6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b2:a7:37:94:df:a2:fd:22:7d:40:c8:2c:90:c3:3e:a0:8c:
8c:c9:83:90:93:38:b9:61:ed:5c:e8:4c:b7:6c:40:7f:e3:a9:
21:21:1c:db:05:f2:f1:cf:0f:3d:0e:39:a0:1f:8d:31:c7:2d:
cd:52:df:ed:ae:8c:7b:2b:28:ec:70:45:37:7a:b3:dc:53:9c:
a7:05:46:f0:94:b4:42:70:37:0e:9f:97:7e:c2:b5:62:5e:22:
ca:2a:f7:c0:19:fd:99:ea:84:9a:4d:50:5e:62:df:14:30:f3:
d7:b2:6d:f0:0c:f9:46:d0:90:39:55:79:b9:0e:0e:35:f2:cc:
4f:db:ef:b6:5b:36:62:53:7e:fa:7a:f6:ed:6f:70:08:53:ce:
e3:d0:5c:ce:86:71:5a:8a:92:71:75:7e:03:3b:77:8e:05:e2:
e3:90:80:74:bf:e8:c6:00:a7:99:ae:21:7c:5c:69:6f:ab:16:
fd:8a:9f:64:58:cf:ad:97:3d:a7:77:26:07:b2:87:bd:dd:78:
05:b0:1c:b9:0b:31:f8:7a:83:56:f1:4c:c5:84:32:ff:9c:57:
b3:65:e5:a8:99:fa:92:bd:bc:01:6a:15:7a:5a:c2:ea:4e:6f:
b4:ac:0c:34:22:de:a0:5c:f1:e3:c0:90:fa:e4:fc:61:95:43:
17:dd:55:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:19 2026 by rpki-client