
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
File: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft (raw, json)
Hash identifier: 2xS1lpzIhnigxHj6LDGkua2zogECpuLnt7x2Hkbr8QA=
Subject key identifier: 0F:DB:93:7A:9C:4B:FE:D4:46:D9:1A:36:53:BB:BF:99:CC:4D:FB:D7
Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
Certificate issuer: /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Certificate serial: 019DA3AE9E9383A8CBCCD5B355888F9DF844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
Manifest number: 15C0
Signing time: Sun 19 Apr 2026 03:00:23 +0000
Manifest this update: Sun 19 Apr 2026 03:00:23 +0000
Manifest next update: Mon 20 Apr 2026 03:00:23 +0000
Files and hashes: 1: MEIc2bGt5e__2EYZcQgjrWD4duM.roa (hash: 9JsE0ryMFAES2iHyGEPNb9NzGX6vqAC7Vkax56Cn3Do=)
2: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl (hash: 5TBwKH5gvfAHlhojRmcSByrKPRqvL6LdWO0O14w++sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:9e:93:83:a8:cb:cc:d5:b3:55:88:8f:9d:f8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Validity
Not Before: Apr 19 03:00:23 2026 GMT
Not After : Apr 20 03:00:23 2026 GMT
Subject: CN=0fdb937a9c4bfed446d91a3653bbbf99cc4dfbd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:2a:7c:f3:ff:6d:c3:49:32:a6:2e:97:e7:
6c:89:cd:81:38:52:51:a2:9d:0b:78:f4:6f:67:5a:
b7:3e:6f:b1:a7:98:b2:8e:74:a1:81:15:e2:4e:02:
43:dc:e6:c6:26:2a:4a:cb:66:e3:1f:3a:36:80:76:
fb:58:82:39:c2:c4:42:19:bc:e2:42:01:b7:44:97:
d3:2a:b0:8f:af:f0:82:f5:e5:18:a9:94:20:c7:b8:
e9:35:53:a5:ac:e9:1b:b1:82:ac:c8:50:3a:e1:14:
0a:e5:45:35:72:03:62:f1:1a:99:ce:ee:f1:f7:b6:
ed:0d:8d:97:22:a1:ad:15:68:d4:7e:3b:50:09:1b:
6e:5a:de:e0:14:88:0c:a2:24:3b:fc:66:ab:36:eb:
6f:4b:e2:57:97:6d:da:d5:e3:4f:2c:b4:cd:c3:67:
3b:37:33:7a:6a:80:9c:db:9b:1f:f4:89:b5:0b:88:
25:f3:2e:e0:07:77:63:04:ac:f2:e1:1c:c2:46:d4:
6e:d5:6c:a0:4e:c6:47:67:cf:6f:b1:f8:af:29:c5:
53:e8:e8:78:7a:43:ed:eb:4b:89:71:da:c2:5a:8b:
6f:f2:29:a6:a2:37:80:61:ce:b9:ab:9c:71:2f:ad:
40:e7:5a:8e:6e:ba:46:d3:f7:69:dd:36:39:64:f5:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DB:93:7A:9C:4B:FE:D4:46:D9:1A:36:53:BB:BF:99:CC:4D:FB:D7
X509v3 Authority Key Identifier:
keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:62:6d:06:e4:3d:91:f0:54:5c:12:31:1c:a9:12:c3:f5:89:
51:16:77:8a:ed:a3:43:27:43:51:4a:e7:bd:78:7e:31:38:c4:
21:32:40:43:01:cd:23:15:5e:0c:59:47:d2:7d:6c:ef:04:d7:
7f:d6:b0:d6:97:8a:73:76:56:bf:b8:9f:4d:2d:8f:14:04:aa:
ca:5f:4a:00:58:b8:b6:73:1b:ca:2d:03:b1:f1:bb:de:09:3e:
cc:cb:0b:de:0c:6c:ec:35:e6:c5:27:7e:2c:4c:96:13:99:50:
76:7e:40:b4:ef:7a:19:69:e2:95:0e:c5:4d:2b:e5:38:35:e3:
37:82:9b:85:4f:55:37:59:ad:bd:e0:7c:c0:34:e6:3b:ed:fe:
ae:56:91:bd:c2:55:35:2a:6b:a4:6d:ee:0d:23:99:8a:e4:9c:
ce:3e:74:6e:e3:a8:8f:79:79:e8:8e:e0:48:f4:c6:54:ee:f7:
1f:41:c8:d5:23:00:e9:71:47:37:dd:aa:e3:2f:5d:e4:6d:39:
96:22:9a:b7:0c:7f:3d:58:e4:be:6d:85:75:ab:92:d4:e7:2b:
ba:9e:3e:23:e3:37:8f:70:15:5e:af:06:4c:d9:27:1a:f0:f0:
56:d3:de:d5:f4:c0:bf:c4:2b:4c:95:f6:9d:eb:1e:34:a7:de:
b6:38:79:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:14 2026 by rpki-client