Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
File: bd1AUuD8dlNjYcu9x3UId93zYK0.mft (raw, json)
Hash identifier: LYaYozuewPJsnmxs6gOnree6rSyQX/FwbgD0cwta7TQ=
Subject key identifier: CD:31:A5:9E:4D:D9:A1:47:2A:FA:12:4D:62:A3:12:D9:32:25:7C:F8
Authority key identifier: 6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
Certificate issuer: /CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Certificate serial: 019D9C9A50A0D2FF5D207AD45E8957B0E68A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
Manifest number: 11D3
Signing time: Fri 17 Apr 2026 18:00:51 +0000
Manifest this update: Fri 17 Apr 2026 18:00:51 +0000
Manifest next update: Sat 18 Apr 2026 18:00:51 +0000
Files and hashes: 1: bd1AUuD8dlNjYcu9x3UId93zYK0.crl (hash: OYsUiNbGMtMm+ffRrRJaq4Hk1sxJ5nvcjrVvMj2syic=)
2: v-QuOOYMf4HsWM21RDZIDik1F8Y.roa (hash: tkB5JnPvXNK8KkYHS1hN95y7jCOIV01txTm1VSy3JoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:50:a0:d2:ff:5d:20:7a:d4:5e:89:57:b0:e6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Validity
Not Before: Apr 17 18:00:51 2026 GMT
Not After : Apr 18 18:00:51 2026 GMT
Subject: CN=cd31a59e4dd9a1472afa124d62a312d932257cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:39:de:bc:d9:f5:24:3d:21:0e:3c:53:4f:76:
d8:9e:ae:01:4b:14:9a:62:e5:13:6e:00:9c:a9:33:
45:fb:7e:58:64:c4:54:14:18:af:cc:b7:fa:d2:70:
80:6f:35:bd:82:e1:9b:02:c6:68:c1:6f:ee:3d:f2:
99:52:c2:e5:e1:90:a9:df:cc:18:76:86:5b:f2:70:
20:8f:23:5d:94:9f:c4:9b:df:b7:29:a9:e9:61:e0:
a5:41:c5:0c:f0:8f:22:39:8d:de:99:53:49:10:cc:
67:38:6c:a2:32:fb:90:9d:1e:29:d2:df:c0:f6:9d:
0e:65:0c:c9:71:89:ac:86:8f:46:83:16:f9:42:a4:
db:68:e6:10:33:c6:1a:87:cf:ee:24:b5:7f:96:bf:
9d:ff:25:10:a2:be:9c:64:f9:dd:b2:2a:b2:1d:20:
a5:64:34:34:90:8a:27:18:fd:36:8a:ef:2c:7c:53:
19:b4:7c:fd:51:69:47:95:1f:7f:5a:90:18:69:78:
1f:c7:27:45:6e:3b:53:f3:88:f5:18:0b:ed:80:5b:
66:07:e3:e3:ef:bf:09:b6:bb:0e:da:cd:2f:5d:ac:
30:be:fd:6f:bd:47:5c:64:61:ff:b1:b7:9f:a3:d9:
d5:3f:9d:a0:f2:1d:ab:f5:1b:56:69:88:3b:da:ff:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:31:A5:9E:4D:D9:A1:47:2A:FA:12:4D:62:A3:12:D9:32:25:7C:F8
X509v3 Authority Key Identifier:
keyid:6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b3:c1:99:0d:13:a6:36:34:6d:6d:20:b4:cf:e8:6b:70:19:
e4:ce:e3:3f:12:7b:f5:a2:ad:3d:bb:6d:28:a1:63:6e:8b:06:
d8:63:8d:e4:70:21:61:3b:31:0e:1c:0b:75:e2:bd:59:65:b6:
de:8d:07:4b:2e:a6:da:28:b9:6e:03:1b:9f:bd:91:9e:1f:d1:
ac:98:e7:1d:57:f4:f3:d2:42:63:ed:58:6c:bc:26:5b:bd:0e:
32:70:ff:a5:07:17:9b:b9:99:32:33:30:22:3a:93:5e:6e:81:
0b:7d:ed:8e:a9:5a:85:1f:71:9d:92:79:dc:38:d6:c7:ff:f0:
87:48:6e:1f:ec:f6:51:59:1f:9f:1c:01:b9:22:e9:fe:b4:58:
c9:4e:76:4f:bb:7f:87:ff:7f:14:e4:a6:bf:e6:4c:75:aa:5e:
7b:77:15:db:ce:d6:2f:d1:08:03:ca:f5:ad:c5:26:ca:5a:35:
56:81:c2:d3:ad:62:2e:be:82:95:a6:ac:f5:db:b4:28:94:0b:
65:9d:d5:76:ca:03:c9:8a:86:43:8f:5a:ce:12:0d:58:cd:c6:
15:1f:66:54:ef:6a:50:0f:62:dc:bb:ce:86:62:62:06:c6:1e:
4e:ec:a8:c1:85:d4:e6:e9:7b:7c:3e:e6:42:c6:39:a3:51:4f:
32:f1:5a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:36:17 2026 by rpki-client