Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
File: BT0E5yuySceesRaM8dQ6PKVIwgY.mft (raw, json)
Hash identifier: aHX8A7ukUP0FvhxVUz7HdK3ST3gGEI7VBs3H9TuziOM=
Subject key identifier: 5E:1A:56:E7:D1:79:AF:CF:A8:D5:98:16:D8:72:6D:94:63:5C:F1:B4
Authority key identifier: 05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
Certificate issuer: /CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Certificate serial: 019D9AAB83AB4299B94DDEB69A0AD636B18F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 09:00:24 +0000
Manifest this update: Fri 17 Apr 2026 09:00:24 +0000
Manifest next update: Sat 18 Apr 2026 09:00:24 +0000
Files and hashes: 1: AwmDmb643WvdlkbYmY_2gHmqTqc.roa (hash: O5KzGeBVdBXIOC5DisowlXBHxvcBR+18w3kCmfDfci0=)
2: BT0E5yuySceesRaM8dQ6PKVIwgY.crl (hash: zxOz6y0btigruTCnNXwd/5CTh1HY2xe2HEf2crixnw4=)
3: C_AvtSnRCKwvl2SpLUtFVcIH_w8.roa (hash: Ey0Vszsa81W+PEv7/mryXgBI5kc8rCJJuGeJRL0U9AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:83:ab:42:99:b9:4d:de:b6:9a:0a:d6:36:b1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Validity
Not Before: Apr 17 09:00:24 2026 GMT
Not After : Apr 18 09:00:24 2026 GMT
Subject: CN=5e1a56e7d179afcfa8d59816d8726d94635cf1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:34:49:29:31:1d:b1:77:a4:8d:3e:ad:97:
b2:14:07:c8:e2:6b:d5:a4:f1:21:eb:21:1f:bb:08:
72:18:ee:c7:5f:69:e2:ef:0b:c4:23:ff:14:fa:86:
28:48:31:28:3b:08:1a:7d:19:85:a5:5c:93:c7:0f:
ae:72:51:31:f7:cd:b1:28:5e:9e:84:e4:dd:9f:13:
b7:e4:6c:77:4b:c1:f4:3d:e6:4e:a6:30:d2:54:6f:
20:62:b0:03:d0:4b:d4:8f:85:ff:34:b9:87:7d:b4:
b2:12:f0:d2:94:de:34:12:88:41:6b:af:f3:8a:b4:
05:c5:2b:12:ef:63:5f:ad:cb:66:58:ea:fe:7e:1c:
15:26:8c:ac:76:d8:2b:4d:bf:8a:cb:ac:c5:4c:70:
56:ca:fb:d7:d3:38:ca:7a:9d:d3:c9:fd:94:2c:c1:
17:74:50:2f:b7:3b:90:84:ca:26:0f:63:09:4e:9c:
e4:41:d7:9f:e6:65:a6:fa:60:1b:ae:90:bb:2d:1e:
06:fb:f6:0f:a9:a2:84:eb:e9:da:5d:22:46:61:96:
9e:12:af:a5:31:c4:f4:c4:21:99:79:c1:9b:50:21:
51:1d:d9:7d:b9:00:37:ff:7e:08:da:69:32:2e:a6:
93:df:12:f9:38:8b:fc:6f:a3:24:df:8d:5d:73:34:
3a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1A:56:E7:D1:79:AF:CF:A8:D5:98:16:D8:72:6D:94:63:5C:F1:B4
X509v3 Authority Key Identifier:
keyid:05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:40:1f:8a:bf:c6:98:5f:d6:3d:70:cc:0e:f4:1b:80:68:9c:
8f:a0:d3:b1:56:a8:cd:27:92:a4:e6:d1:44:64:2e:e1:05:e0:
f7:3b:95:45:13:c5:ce:51:e8:db:d1:74:e9:81:da:97:9f:75:
08:6a:80:4c:b9:a9:58:9c:0a:4a:f4:3b:d1:05:9e:86:6e:d7:
21:b3:05:45:98:08:08:86:6f:db:80:b4:00:ab:b9:62:e7:0a:
7c:86:3d:d0:f1:8e:2c:96:3c:9a:45:21:05:46:76:e5:91:82:
1f:21:0b:0a:ef:23:ed:35:5f:9f:fa:49:ac:a4:e4:88:c7:c7:
3f:3b:01:48:1c:34:4c:aa:9a:3e:fa:78:98:83:59:05:05:90:
9d:a0:9f:27:3a:2f:11:e4:aa:f4:29:a5:32:d2:66:cd:28:99:
60:b5:61:11:65:74:47:f8:12:6e:2b:85:18:37:44:43:0d:8b:
5b:be:ff:30:3f:9a:e0:dc:bd:67:a0:bf:dc:e6:a3:66:24:3d:
ce:1e:2c:02:68:bf:4f:07:06:90:e1:c7:43:e0:a5:bf:82:a3:
08:da:bb:c0:1f:27:22:40:43:33:5d:d0:f3:a7:95:27:85:29:
97:12:36:84:98:86:d3:26:8f:8f:c2:00:fe:cd:c6:83:6f:05:
79:b6:36:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:46:07 2026 by rpki-client