Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
File: bd2PHjjJH1sXw9GnI05JyccNwyQ.mft (raw, json)
Hash identifier: AOED94MCxqx0McKSWcE2nqdDTf/uGdb1gRlQhaQlxUc=
Subject key identifier: 35:43:DA:9F:CB:5E:3F:A5:43:58:4C:AF:E1:B8:E7:29:62:EE:85:E5
Authority key identifier: 6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
Certificate issuer: /CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Certificate serial: 019D9B1A000168157CE98596FB661AB184E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 11:01:05 +0000
Manifest this update: Fri 17 Apr 2026 11:01:05 +0000
Manifest next update: Sat 18 Apr 2026 11:01:05 +0000
Files and hashes: 1: GbafPr-nz6jETA4H3wKy_jppcV4.roa (hash: GL7nF8v33Tb4evsXGeNMyUBxyv4eJPoUXT5+dY5suko=)
2: bd2PHjjJH1sXw9GnI05JyccNwyQ.crl (hash: LQZh70QWKCGhpodDeezJ8v7a75rmTHZrDGRl56FjPLI=)
3: cFG914qlPQB4YDvh08j7jEMTfx4.roa (hash: 1oFDI2LGaWGL7rDxIaArFNWC7E0yI6jeFwwPeHOnfC4=)
4: esWqFZA6YGUlmlFQv207YFzQliM.roa (hash: SiLfsGKvYKpDqpwOejtKUBiKs266PQZB0yILqSdDMeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:00:01:68:15:7c:e9:85:96:fb:66:1a:b1:84:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Validity
Not Before: Apr 17 11:01:05 2026 GMT
Not After : Apr 18 11:01:05 2026 GMT
Subject: CN=3543da9fcb5e3fa543584cafe1b8e72962ee85e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:09:85:c1:c3:99:35:a6:f4:6b:e4:d7:c9:5c:
08:a8:d2:8a:84:0f:de:68:99:c5:b7:f9:f7:8c:6f:
64:01:38:98:e9:aa:4d:d8:e1:d4:76:2d:5f:8b:c7:
9e:17:0a:ac:fa:5c:3c:ff:46:34:3d:44:f8:85:71:
3d:80:49:75:57:58:0d:bb:aa:f4:58:df:10:6f:fd:
e2:4a:12:6a:ea:9e:6c:b9:13:f4:24:f2:28:08:aa:
ac:86:25:92:7b:0b:75:0d:7a:bd:8f:97:1c:7a:ff:
69:3d:b0:99:5a:14:fd:a7:3b:65:55:de:0d:17:9f:
4d:d4:2d:4d:a3:fe:0b:2f:1d:a5:c0:ac:9d:6d:c5:
a9:1b:56:70:36:69:2e:b8:b2:33:22:0b:ff:7d:5d:
71:da:29:fb:81:a9:1d:f3:e0:d1:46:60:21:34:24:
d3:a0:ec:a4:c2:e3:08:a8:eb:0e:2d:a8:e9:2f:b3:
0f:11:89:eb:01:3a:ce:90:54:19:a2:0a:ce:b8:43:
8e:18:15:eb:9a:51:fb:c5:5c:d8:45:6e:9a:c7:ad:
30:35:f6:3b:0d:6a:3c:d5:41:a2:98:12:6c:18:5e:
36:2a:64:d3:58:9e:3e:00:a0:fb:2d:40:94:5a:ad:
14:3b:67:7a:07:14:c5:11:da:9e:6a:64:ca:8d:5e:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:43:DA:9F:CB:5E:3F:A5:43:58:4C:AF:E1:B8:E7:29:62:EE:85:E5
X509v3 Authority Key Identifier:
keyid:6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e7:09:0a:14:ec:e1:8d:18:aa:4b:85:31:64:3b:b7:a6:fd:
95:a7:02:f8:40:20:54:ad:23:f2:f4:f5:a2:19:50:88:72:4b:
18:f0:08:b3:a1:98:0f:e5:5c:a5:bc:b5:54:a5:0b:43:e1:9a:
94:a0:fd:f2:9c:f3:69:64:de:1a:1a:8b:8d:2c:4c:8a:be:de:
27:e0:b8:48:9d:c4:a7:2d:1d:d6:00:a1:f7:9a:69:60:61:08:
9d:60:1d:f5:9d:15:ce:ce:b7:b3:a6:9c:f7:37:9c:4c:22:89:
fe:55:6e:5b:47:9e:05:24:4c:13:a6:d0:75:f6:84:19:b1:08:
92:7f:f4:3e:4d:5d:a0:d6:1f:1e:66:b1:76:bb:1b:aa:02:16:
04:ad:cc:7e:fb:50:9b:d6:6c:8a:55:ef:4e:e4:23:67:3c:b3:
f0:f5:c2:cc:3f:90:29:8d:b5:aa:c0:45:5b:84:10:e4:0e:8c:
06:7d:c4:2d:6d:65:35:c9:a7:37:cf:9d:49:74:13:1e:01:79:
0d:f8:ec:0b:27:f2:37:8b:04:fb:86:55:c7:2d:9e:4c:16:67:
f0:76:f7:1c:03:c5:64:df:a8:46:24:b9:27:fe:cb:d9:1c:eb:
e9:75:fe:44:f3:9d:cf:f7:e5:99:11:1b:6c:d6:ce:a2:e7:c5:
b0:4d:b0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:57:53 2026 by rpki-client