Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier: +sdYGbQBEKX85/H4+yC8ea6+g9KKEvIHTP+5A+6XMNI=
Subject key identifier: 9D:21:F4:2D:0B:D0:C4:16:6F:62:BF:4B:70:97:0F:8E:34:BB:8A:DC
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial: 019D996259145F418B7479544B7888F86437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:00:52 +0000
Manifest this update: Fri 17 Apr 2026 03:00:52 +0000
Manifest next update: Sat 18 Apr 2026 03:00:52 +0000
Files and hashes: 1: 8GCiWcx8mqq89-eKSSRHyEp78Jk.roa (hash: 1VoDgs3kjOrw6G1rdHG1fmbKleZRoSt+eF4wHzGq/bs=)
2: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: DOJrxLvgxliBE1APoos1dpkTMn0PbgewJ09mGkds/cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:59:14:5f:41:8b:74:79:54:4b:78:88:f8:64:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Validity
Not Before: Apr 17 03:00:52 2026 GMT
Not After : Apr 18 03:00:52 2026 GMT
Subject: CN=9d21f42d0bd0c4166f62bf4b70970f8e34bb8adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:a6:07:84:45:f8:fa:3d:c4:28:5a:af:bb:
fe:94:ec:09:da:17:bf:4b:45:dd:fa:7a:31:93:3a:
2a:e7:17:07:c0:f4:72:74:13:70:35:a3:b3:6c:dd:
72:f4:84:8d:a7:97:e7:4a:6b:b8:84:22:7d:c6:e0:
bb:25:e2:cb:19:30:85:56:af:0c:2c:9c:59:5d:ff:
2a:f3:51:2c:01:e4:e4:c7:e8:6f:f6:99:d6:ae:d2:
59:67:87:34:08:f9:1a:d8:49:f8:4c:2b:c2:35:2c:
1b:73:6a:e8:6d:40:27:b2:e8:ae:21:ef:85:aa:72:
88:3d:28:a8:b8:df:05:48:bc:9b:b3:37:c9:0c:a5:
89:ae:b9:07:0c:6c:67:96:0e:38:f8:3f:da:20:88:
45:e3:8c:b5:63:be:b0:42:be:c2:7c:b7:87:df:fa:
5a:00:48:4f:27:05:aa:7c:2b:28:cd:8f:e2:14:4a:
f1:fe:4a:57:e5:ad:2e:a7:72:70:48:5b:0e:49:26:
a9:ee:00:bc:4e:c9:11:98:3d:cd:97:84:c1:e9:3d:
b8:f9:3a:eb:46:a8:90:52:f1:1b:d6:d4:21:b3:29:
63:40:10:c3:ca:b3:4b:d8:20:3a:5c:01:8e:67:ed:
2f:7e:4a:73:04:1f:b0:7f:a6:52:d6:49:a5:b3:e1:
7d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:21:F4:2D:0B:D0:C4:16:6F:62:BF:4B:70:97:0F:8E:34:BB:8A:DC
X509v3 Authority Key Identifier:
keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:94:d2:a7:ee:19:1e:c9:b1:11:d0:0f:23:96:c7:f0:64:fd:
ca:f5:dc:51:ed:35:c9:8b:ca:96:1b:81:f4:7e:e2:3f:3a:85:
ef:1c:71:e1:b0:e8:c7:5a:8b:8d:ed:ba:ca:d8:ab:a6:7d:67:
48:8b:21:bc:5d:c2:af:80:a4:18:ce:f0:4a:b2:52:1a:a8:51:
01:26:c7:29:62:2d:b0:2e:03:b7:e6:71:3e:fa:41:8e:9c:dc:
65:ca:e9:e1:d6:76:21:63:2f:21:06:38:4e:61:95:13:5a:3f:
aa:77:10:4e:14:dd:34:91:44:1f:84:81:b2:7f:56:fe:e0:7b:
e3:da:06:89:91:1a:77:f0:1b:70:df:c2:4a:72:40:aa:19:c8:
68:1c:6e:a9:ae:00:20:d7:48:33:9b:46:ed:14:28:5a:5b:fe:
15:40:1d:93:6b:ed:77:46:48:91:be:0d:24:ea:6d:b4:68:38:
3e:89:6f:33:00:0a:20:a8:d8:42:de:73:77:19:eb:92:36:6e:
9b:a8:cc:7f:1a:73:19:68:5a:de:a3:8a:1e:98:9f:78:dc:ec:
f6:c3:7c:72:8b:69:7a:c8:35:04:62:6f:92:75:91:25:ee:8f:
e0:4f:4b:a7:e7:be:a0:60:c5:ba:a9:0c:cc:78:3a:b6:76:67:
d5:01:1b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:07 2026 by rpki-client