Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
File: bV-D7gKxc3SL5d47O5wlMXmSaOg.mft (raw, json)
Hash identifier: WDggfUVZtKMqvsCj/V7e+aKa3QSu+WoJebSBK7s+AU8=
Subject key identifier: 36:48:FF:D3:43:08:E1:65:94:F8:61:ED:06:F4:1E:5D:39:33:08:A3
Authority key identifier: 6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8
Certificate issuer: /CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
Certificate serial: 019D992BAB882D38937776A5CF8A23F775BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 02:01:09 +0000
Manifest this update: Fri 17 Apr 2026 02:01:09 +0000
Manifest next update: Sat 18 Apr 2026 02:01:09 +0000
Files and hashes: 1: bV-D7gKxc3SL5d47O5wlMXmSaOg.crl (hash: aB+z2PV85HTKXbxTUdjfQUSBIkOw7w5PdlwZf8xaWBc=)
2: owEvoaLYmAtt2x6Ldrjk9RRIZAk.roa (hash: 9TpRwQpuHtfrhW+ZMSGdpj4DGSlbRkJ1Rg7NyhKguk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:ab:88:2d:38:93:77:76:a5:cf:8a:23:f7:75:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
Validity
Not Before: Apr 17 02:01:09 2026 GMT
Not After : Apr 18 02:01:09 2026 GMT
Subject: CN=3648ffd34308e16594f861ed06f41e5d393308a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:e2:e3:47:9e:4f:9f:6c:da:bc:ef:3c:1d:
30:5f:88:ec:ba:5d:77:d1:39:65:2d:27:65:b9:b5:
de:e9:7f:ff:da:87:75:80:4d:51:b3:d6:04:32:a3:
c3:91:ec:7b:44:b3:31:2a:4c:32:f0:ab:f4:9d:f9:
b6:57:a9:5a:32:31:51:76:29:69:0a:4a:74:b6:b9:
7e:d4:7d:01:3f:98:b1:bf:f7:bd:3b:51:93:41:ba:
de:8f:4f:bd:fc:23:53:5a:c1:28:8b:e5:35:88:8f:
d9:94:b8:26:ef:52:fc:de:8e:2e:7d:2e:6b:6f:8e:
d8:82:3a:1d:0c:90:86:05:09:2f:ea:16:e2:65:42:
e6:ea:ec:21:8b:9d:00:ab:b5:da:92:10:0a:de:c4:
2c:fd:57:e8:5b:82:39:c0:81:aa:f3:5e:66:11:04:
14:47:5e:92:0c:ee:3b:37:32:3d:84:34:90:7b:47:
83:99:8d:87:b5:f1:d8:79:7b:0a:7c:ac:90:dc:a6:
ec:6d:5c:e2:e8:5b:9f:4f:db:7b:f9:1d:2e:ce:ad:
b5:43:de:f7:31:f0:50:de:0b:1b:aa:f5:0e:bc:bb:
4d:ab:f3:f1:86:a7:38:ce:57:cc:fd:12:08:dc:bc:
a4:6c:4e:cb:d6:3c:56:b2:da:c4:b8:3a:48:7d:a1:
75:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:48:FF:D3:43:08:E1:65:94:F8:61:ED:06:F4:1E:5D:39:33:08:A3
X509v3 Authority Key Identifier:
keyid:6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e8:7a:3b:70:16:c8:bf:72:25:6c:89:ab:54:55:cf:b4:59:
6f:a9:0f:9c:4a:ae:45:45:8c:31:22:ce:88:52:f0:4a:97:15:
51:6f:6f:f7:b2:c4:73:38:38:53:3a:9a:74:30:ea:ac:10:0a:
5e:7c:02:3f:d6:8f:b4:e6:42:1c:ea:b3:7f:ef:d7:53:19:cd:
be:d0:0f:87:88:26:9f:43:ad:08:c1:3f:11:d9:c7:33:6e:0b:
05:68:2a:84:83:0b:7c:37:7b:1c:06:f7:0d:f6:b6:2b:30:f5:
5d:47:e4:4d:37:56:fb:69:a7:b6:5f:9a:74:f8:c4:87:a4:d6:
0e:8d:64:3a:b6:04:5a:8e:57:2b:ea:c1:f8:cc:36:c4:7e:fa:
a1:25:9b:7c:99:cd:22:81:66:f0:85:6a:2f:9d:49:8b:cd:3e:
ae:53:a8:8c:a2:cd:97:05:60:c0:43:34:db:67:9b:75:06:d9:
38:03:45:6a:7f:23:13:b8:4f:f9:ac:36:a7:7f:bd:37:b2:97:
af:e2:6f:c2:16:9a:a0:e7:1d:06:aa:56:6a:0a:99:d8:5a:d3:
8b:54:85:1c:56:d0:f2:3d:b1:cc:cb:bd:df:86:c9:ef:5d:c5:
5d:c0:14:c5:32:09:05:3d:36:0a:98:af:95:c8:1c:0d:95:8f:
9d:36:91:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:20:42 2026 by rpki-client