Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
File: bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft (raw, json)
Hash identifier: w/VMXP5F1jZH/nX7AmzghcBXMAazKYpn8PQ5VNKuJrQ=
Subject key identifier: 3F:4B:70:DA:2F:EC:33:C4:F7:CE:EF:E3:01:30:04:74:C0:CA:15:EB
Authority key identifier: 6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
Certificate issuer: /CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Certificate serial: 019D9F9BF9CAD67477A4C43629E9C0078BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
Manifest number: 0330
Signing time: Sat 18 Apr 2026 08:01:32 +0000
Manifest this update: Sat 18 Apr 2026 08:01:32 +0000
Manifest next update: Sun 19 Apr 2026 08:01:32 +0000
Files and hashes: 1: 5keHs3ZF32HHKjKjaH3sZPymTNw.roa (hash: gQldWta3BCOowcdKdH4KVhP0tTXoPexAJ5F4Iq4GDNs=)
2: bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl (hash: Yd1z+YwCxO7kNjFpWIGe6vCUfm2WRZNz7SCox/qEAtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 08:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9f:9b:f9:ca:d6:74:77:a4:c4:36:29:e9:c0:07:8b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Validity
Not Before: Apr 18 08:01:32 2026 GMT
Not After : Apr 19 08:01:32 2026 GMT
Subject: CN=3f4b70da2fec33c4f7ceefe301300474c0ca15eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:e1:b5:cb:b9:0f:aa:9a:5c:5d:0d:ed:c1:
aa:68:e5:6b:f6:2c:02:06:d5:a1:30:2c:28:3a:cc:
5d:74:13:0c:72:a0:58:91:37:84:28:66:67:71:50:
56:9e:45:5f:ce:8b:ed:50:d0:87:cd:18:7a:ff:ed:
a8:b1:1c:a8:bf:6a:f2:ff:3f:2b:bc:86:26:b2:66:
a6:b6:c6:7a:72:fa:7a:2b:a4:e1:ab:89:fb:0d:6d:
8d:37:3c:26:87:d9:d6:32:fa:c2:77:8f:6b:a0:00:
c8:eb:3c:ee:24:7a:c0:73:12:37:74:ff:4d:ee:89:
be:13:53:e6:7b:f4:6f:cb:f3:54:6b:3c:ec:88:45:
0f:f2:75:6c:cd:92:7f:68:ff:7d:d3:91:5e:4e:3a:
c1:88:2b:10:89:0e:dd:eb:f7:2a:d2:8f:3a:26:74:
0f:32:b3:af:67:1a:b5:52:ee:1c:ef:2c:ae:89:99:
74:e1:72:9c:5b:b8:f9:b6:cf:c9:a8:3f:20:be:9d:
07:79:30:99:93:30:0e:28:28:c2:ea:1c:1f:4c:a4:
73:27:2c:6a:69:0b:49:58:d3:87:11:87:ce:6e:31:
5a:a1:64:ad:18:c1:41:08:b6:33:b5:20:02:7c:28:
4e:4b:c3:17:9e:0c:0b:6e:72:81:d6:3e:3e:db:c2:
0f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4B:70:DA:2F:EC:33:C4:F7:CE:EF:E3:01:30:04:74:C0:CA:15:EB
X509v3 Authority Key Identifier:
keyid:6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:24:d4:dd:1c:6a:98:e4:62:f2:d1:0d:7c:62:f0:1d:5e:9e:
78:26:21:76:99:52:74:0f:67:18:3e:79:5a:fb:22:31:54:cd:
b0:1f:44:3e:36:8b:74:9b:b3:99:3b:60:2c:97:73:27:ca:04:
a9:e3:f6:b6:19:cd:6e:d9:b7:55:39:aa:5c:ea:d9:c5:54:d9:
33:2d:f0:53:50:6e:3d:42:bf:f3:73:05:67:ea:9b:07:70:fe:
98:af:30:ad:3b:43:dc:da:89:b8:52:5f:4e:cd:4f:fa:38:26:
7d:02:dc:ad:3b:79:9b:4f:04:e2:f7:e8:fe:49:c0:a4:5d:fb:
41:c7:0b:3f:4b:9b:f4:d1:bd:89:f0:d2:0e:0a:72:22:54:c9:
97:ce:5b:80:b4:01:b7:f1:5b:7a:c3:d5:33:6a:e3:03:5d:2c:
78:3e:b0:50:9f:68:54:62:94:f1:cc:b0:7c:58:20:dd:ec:57:
6d:53:36:c0:66:71:c3:6a:80:a4:e8:3e:eb:77:f5:ce:13:a1:
bb:2b:10:70:45:34:9e:fb:17:f9:7f:ff:d2:f1:2e:a2:9d:ba:
d8:75:0a:8b:d7:14:f1:37:4b:d6:c0:fe:d7:fe:25:54:cd:e4:
2c:42:92:11:ea:bc:ec:c1:e8:14:dd:4a:1e:75:11:ec:f7:dc:
f9:ff:d4:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2fm/nK1nR3pMQ2KenAB4uwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlN2ViMTMxOGEzY2M4ODM0ZjVjMDY4NTRiZWMxNGY1ODM3
NzQ2ZDkwHhcNMjYwNDE4MDgwMTMyWhcNMjYwNDE5MDgwMTMyWjAzMTEwLwYDVQQD
EygzZjRiNzBkYTJmZWMzM2M0ZjdjZWVmZTMwMTMwMDQ3NGMwY2ExNWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf/htcu5D6qaXF0N7cGqaOVr9iwC
BtWhMCwoOsxddBMMcqBYkTeEKGZncVBWnkVfzovtUNCHzRh6/+2osRyov2ry/z8r
vIYmsmamtsZ6cvp6K6Thq4n7DW2NNzwmh9nWMvrCd49roADI6zzuJHrAcxI3dP9N
7om+E1Pme/Rvy/NUazzsiEUP8nVszZJ/aP9905FeTjrBiCsQiQ7d6/cq0o86JnQP
MrOvZxq1Uu4c7yyuiZl04XKcW7j5ts/JqD8gvp0HeTCZkzAOKCjC6hwfTKRzJyxq
aQtJWNOHEYfObjFaoWStGMFBCLYztSACfChOS8MXngwLbnKB1j4+28IPeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9LcNov7DPE987v4wEwBHTAyhXrMB8GA1UdIwQY
MBaAFG5+sTGKPMiDT1wGhUvsFPWDd0bZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm42eE1Zbzh5SU5QWEFhRlMtd1U5WU4zUnRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMjhjNDgtMGNjZS00YjgyLThhZDkt
OTlhODA3MDBhNTViLzEvYm42eE1Zbzh5SU5QWEFhRlMtd1U5WU4zUnRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yMjhjNDgtMGNjZS00YjgyLThhZDktOTlhODA3MDBhNTVi
LzEvYm42eE1Zbzh5SU5QWEFhRlMtd1U5WU4zUnRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSTU3Rxq
mORi8tENfGLwHV6eeCYhdplSdA9nGD55WvsiMVTNsB9EPjaLdJuzmTtgLJdzJ8oE
qeP2thnNbtm3VTmqXOrZxVTZMy3wU1BuPUK/83MFZ+qbB3D+mK8wrTtD3NqJuFJf
Ts1P+jgmfQLcrTt5m08E4vfo/knApF37QccLP0ub9NG9ifDSDgpyIlTJl85bgLQB
t/FbesPVM2rjA10seD6wUJ9oVGKU8cywfFgg3exXbVM2wGZxw2qApOg+63f1zhOh
uysQcEU0nvsX+X//0vEuop262HUKi9cU8TdL1sD+1/4lVM3kLEKSEeq87MHoFN1K
HnUR7Pfc+f/UsQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 12:13:00 2026 by rpki-client