Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
File: bFklNs4G_apawu5IEXz1eqO0yNA.mft (raw, json)
Hash identifier: UTWXWpY9wu+AIma5EPZCbRNyWmzHgr8YxoGe/hRGC+M=
Subject key identifier: 4D:30:8C:FC:D0:34:29:CF:57:83:6F:93:20:B1:E1:D0:01:FA:81:59
Authority key identifier: 6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
Certificate issuer: /CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Certificate serial: 019D9962A573A3608544F9DD35124E4F83AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
Manifest number: 09B2
Signing time: Fri 17 Apr 2026 03:01:12 +0000
Manifest this update: Fri 17 Apr 2026 03:01:12 +0000
Manifest next update: Sat 18 Apr 2026 03:01:12 +0000
Files and hashes: 1: bFklNs4G_apawu5IEXz1eqO0yNA.crl (hash: 1uSrHhvsHecCGpaps3FJKT6C/tqGdQiDleL958h2shc=)
2: sdWMapYuUdr6p3SLmsRyhc96bjk.roa (hash: Ej5qnbmLumHZ7hyS+j2EcBw0ec4/rqTjBeF1pn/Pv/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:a5:73:a3:60:85:44:f9:dd:35:12:4e:4f:83:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Validity
Not Before: Apr 17 03:01:12 2026 GMT
Not After : Apr 18 03:01:12 2026 GMT
Subject: CN=4d308cfcd03429cf57836f9320b1e1d001fa8159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:9c:a6:39:11:c1:b6:f2:eb:37:b8:e7:a3:
27:eb:eb:45:9b:b8:f3:61:7e:87:c1:f2:cb:46:97:
cb:db:28:fa:eb:d0:34:3a:ba:1f:b5:1f:c8:f5:b5:
e2:40:a8:b6:0f:ec:79:20:a4:ca:b5:49:94:c7:64:
62:00:de:63:01:4d:6c:bf:a3:24:18:47:ff:68:53:
b1:32:be:1f:a8:62:45:3c:83:43:6c:5f:53:b5:1c:
18:dd:23:62:0d:80:de:d0:d4:f7:73:0a:cf:51:8c:
a6:41:29:04:0c:8d:c1:cb:e3:b0:71:08:87:86:ae:
c5:3b:34:b0:6a:ca:24:ad:f8:10:c8:08:d8:e4:d3:
00:7f:46:48:4b:27:2e:66:66:e4:a0:a2:4a:7e:09:
87:d0:36:37:7b:8b:8f:03:04:48:57:b1:c9:17:16:
ae:9c:04:e0:c0:33:56:41:1d:82:ba:fb:9e:98:31:
52:ab:bc:b0:2b:49:4d:80:26:c3:32:db:ff:69:6b:
15:39:9f:e4:ba:20:56:4b:e4:13:92:5c:3a:eb:6a:
37:b7:56:ee:30:50:96:42:a7:a0:65:87:c8:1d:fd:
72:e3:eb:f4:33:5f:90:1a:1b:90:9d:f2:ce:37:49:
e4:4f:4d:14:22:1d:de:20:e6:e4:c6:39:03:6a:20:
cc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:30:8C:FC:D0:34:29:CF:57:83:6F:93:20:B1:E1:D0:01:FA:81:59
X509v3 Authority Key Identifier:
keyid:6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8d:83:dd:f0:7e:76:bc:d8:fc:14:55:fa:63:0b:42:e4:2d:
43:68:93:a8:de:80:48:51:cd:e4:4b:43:79:ae:8d:50:6c:18:
8f:a0:ae:f2:78:e2:dd:2e:ef:b1:4b:62:08:32:fc:dc:f6:32:
0a:34:02:00:85:98:ba:20:b2:14:6c:1b:44:67:4a:09:21:4d:
31:d1:f7:d0:01:31:dd:2c:47:ce:78:3d:2f:d1:5b:c6:b9:3b:
ce:ee:47:e4:d9:30:00:22:15:83:bb:f2:78:59:42:3e:b6:b7:
46:5b:1b:dd:a3:07:4e:e7:ae:71:af:30:08:e4:82:59:83:cd:
6d:d5:f9:66:b9:91:47:e6:fe:1a:94:f2:e9:dd:1d:40:f7:ea:
f6:e6:c8:79:4a:3c:d5:6a:32:99:22:d9:e4:9d:bb:32:0a:10:
28:65:56:25:6b:6b:6d:b6:b4:98:3e:22:dc:e4:8e:7d:d7:30:
21:99:59:26:ea:6e:8b:c4:64:93:0c:dc:1c:48:32:6f:97:5f:
b5:97:ba:5d:83:89:ac:42:54:82:18:af:69:a4:de:dc:fc:83:
70:b3:fd:52:ac:cc:9d:ef:4a:b7:19:87:ce:97:70:04:81:20:
00:bc:f1:2c:fd:fe:93:ad:da:bd:fc:ee:37:fe:1b:e6:32:08:
10:53:0c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:24 2026 by rpki-client