Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File: bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier: 9cZxDpc45h45c1bVjo3A3DtONTXX74sTfQc0IWySQJ0=
Subject key identifier: CA:0F:3B:58:38:CC:55:00:61:03:53:69:88:ED:AF:5F:66:DC:97:C1
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer: /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial: 019D9A7495FA3B0E23575B4B8DB5E0085424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 08:00:25 +0000
Manifest this update: Fri 17 Apr 2026 08:00:25 +0000
Manifest next update: Sat 18 Apr 2026 08:00:25 +0000
Files and hashes: 1: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: KPUvcKheLZSVs7qOECh0SPEe1F5GA7901ZLAvsOQn6Q=)
2: oetUUkO4cZ8XU4zZUrbGoYOdszE.roa (hash: wn2OyJ+kz4z5ywBpw9YbEq0aRUfcFISzvLJUM7TfkuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:95:fa:3b:0e:23:57:5b:4b:8d:b5:e0:08:54:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
Validity
Not Before: Apr 17 08:00:25 2026 GMT
Not After : Apr 18 08:00:25 2026 GMT
Subject: CN=ca0f3b5838cc55006103536988edaf5f66dc97c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b4:16:98:65:4b:13:6f:04:20:07:d9:13:49:
ab:be:a4:8f:cd:41:ef:06:15:b6:18:93:ad:5c:21:
7c:8d:6b:08:93:79:d0:d9:91:7a:57:45:cd:a8:15:
55:18:9e:84:6d:5c:b9:82:d1:61:f2:ab:3b:ca:b2:
12:7c:e6:24:6a:17:35:2e:64:66:20:63:ac:a2:8d:
e4:35:29:9c:ff:2c:f3:a2:5b:71:38:fb:e6:4c:f2:
56:37:2e:47:20:4b:f0:e6:db:14:7e:e5:5a:74:7a:
bb:78:73:7b:23:56:12:7e:a8:a2:b6:d8:b8:5f:9c:
c9:fc:d3:54:42:fb:c2:1d:a5:6b:c1:21:a8:77:d1:
fa:c7:d8:92:5b:56:f5:c9:f5:ce:a7:9d:64:d7:4c:
b8:80:c4:6d:b1:47:92:fd:ac:bc:10:8a:44:e3:ff:
d5:df:13:2a:0a:ec:72:3e:0f:a9:ec:e6:47:6b:f6:
42:e7:1b:f5:2e:e5:69:a4:58:51:2a:43:ea:9f:14:
76:31:01:05:86:f6:ce:e2:4d:70:0d:33:75:47:f7:
ba:a3:66:ad:2f:82:d4:ce:63:14:07:06:69:e9:10:
27:43:57:dd:13:f7:9e:2f:e5:0f:b6:9a:79:e9:a6:
df:11:6f:a2:60:f6:96:1a:38:f6:6b:08:72:48:e8:
e5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0F:3B:58:38:CC:55:00:61:03:53:69:88:ED:AF:5F:66:DC:97:C1
X509v3 Authority Key Identifier:
keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7b:5e:f8:de:d4:04:f0:d9:3a:5b:3b:7d:f5:73:40:b8:7b:
ed:34:d5:f9:45:17:6a:21:bd:f5:30:0e:60:8b:ec:2c:0a:cb:
b3:c2:4f:a1:1c:c5:8e:9e:d4:0a:51:f3:8a:9b:73:3b:1e:c2:
ca:ce:d2:e8:98:66:ff:9c:ff:62:95:8e:df:e6:96:0c:d5:f9:
05:50:d8:49:3d:a2:f2:77:d4:59:2c:13:a5:4f:7d:f4:f2:28:
cc:58:f0:2d:d9:73:57:96:11:90:9c:5a:f4:da:16:67:c8:7f:
a3:00:e2:03:78:a7:ce:4f:fc:eb:12:6c:a9:01:19:fd:9e:13:
28:50:64:46:06:f4:53:cd:25:3d:b0:15:a3:e2:7b:f3:7d:30:
b0:64:25:f2:15:de:12:ea:56:14:c8:d8:d8:25:ed:c6:68:d3:
70:df:68:63:c3:78:8a:f4:5c:c5:d7:43:f8:de:36:b1:68:fa:
77:8f:87:6d:be:62:df:86:76:ab:8e:06:ea:1d:9d:52:ae:ec:
4e:f6:54:ee:7a:66:21:1f:17:ae:c5:c7:ec:95:3f:e6:22:b7:
4f:de:4b:74:8f:8d:99:8e:05:2a:dc:cc:51:d5:86:58:c0:ff:
d5:e5:f2:59:0e:fb:61:f6:9c:84:68:17:85:f6:d8:a8:68:5c:
16:e3:a5:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adJX6Ow4jV1tLjbXgCFQkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYzU3NjkxYzE1YzllYjNhMzc5OTE3ODA2ZDI5NGZkMzkx
NzVlMDcwHhcNMjYwNDE3MDgwMDI1WhcNMjYwNDE4MDgwMDI1WjAzMTEwLwYDVQQD
EyhjYTBmM2I1ODM4Y2M1NTAwNjEwMzUzNjk4OGVkYWY1ZjY2ZGM5N2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bQWmGVLE28EIAfZE0mrvqSPzUHv
BhW2GJOtXCF8jWsIk3nQ2ZF6V0XNqBVVGJ6EbVy5gtFh8qs7yrISfOYkahc1LmRm
IGOsoo3kNSmc/yzzoltxOPvmTPJWNy5HIEvw5tsUfuVadHq7eHN7I1YSfqiitti4
X5zJ/NNUQvvCHaVrwSGod9H6x9iSW1b1yfXOp51k10y4gMRtsUeS/ay8EIpE4//V
3xMqCuxyPg+p7OZHa/ZC5xv1LuVppFhRKkPqnxR2MQEFhvbO4k1wDTN1R/e6o2at
L4LUzmMUBwZp6RAnQ1fdE/eeL+UPtpp56abfEW+iYPaWGjj2awhySOjlbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoPO1g4zFUAYQNTaYjtr19m3JfBMB8GA1UdIwQY
MBaAFGzFdpHBXJ6zo3mReAbSlP05F14HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMt
ZmRkYjk2ZTZkYWQxLzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMtZmRkYjk2ZTZkYWQx
LzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnte+N7U
BPDZOls7ffVzQLh77TTV+UUXaiG99TAOYIvsLArLs8JPoRzFjp7UClHziptzOx7C
ys7S6Jhm/5z/YpWO3+aWDNX5BVDYST2i8nfUWSwTpU999PIozFjwLdlzV5YRkJxa
9NoWZ8h/owDiA3inzk/86xJsqQEZ/Z4TKFBkRgb0U80lPbAVo+J7830wsGQl8hXe
EupWFMjY2CXtxmjTcN9oY8N4ivRcxddD+N42sWj6d4+Hbb5i34Z2q44G6h2dUq7s
TvZU7npmIR8XrsXH7JU/5iK3T95LdI+NmY4FKtzMUdWGWMD/1eXyWQ77YfachGgX
hfbYqGhcFuOl1Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:31:05 2026 by rpki-client