Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier: k0dnlnKTr+tkrA6blFwAic368/o7FDe/Grk3HGr3yQA=
Subject key identifier: BD:60:DF:94:2A:C4:4B:1E:D0:7B:26:29:81:56:49:4A:7F:6D:13:87
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial: 019D992B0C79E05C0E83581E0F475840645D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number: 17BC
Signing time: Fri 17 Apr 2026 02:00:28 +0000
Manifest this update: Fri 17 Apr 2026 02:00:28 +0000
Manifest next update: Sat 18 Apr 2026 02:00:28 +0000
Files and hashes: 1: CaMOrAz-3VjPqu-gbyeJ5_Cx7NM.roa (hash: rD2u98MLb0jiD+OOiIWSkvqJ6RlBaZKAcES5KA3b+A4=)
2: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: XDBH4ZX6iwL2GUasuzraWuVVw/+ddyz/xqTXjVcRna0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:0c:79:e0:5c:0e:83:58:1e:0f:47:58:40:64:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Validity
Not Before: Apr 17 02:00:28 2026 GMT
Not After : Apr 18 02:00:28 2026 GMT
Subject: CN=bd60df942ac44b1ed07b26298156494a7f6d1387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:73:8d:6d:97:96:e6:33:cf:9c:4c:37:8f:b3:
5c:88:bd:ee:64:e5:cb:c3:f5:6e:36:93:81:2c:60:
49:6c:52:5a:ac:b3:94:ea:30:ec:0a:f2:8f:dd:87:
d5:75:dd:e1:9c:c6:cb:69:a2:2f:e8:d0:c8:62:62:
13:59:57:5b:e5:5b:30:f2:79:88:f2:15:b2:ec:e8:
1a:aa:68:25:88:a4:54:ba:04:85:70:99:fb:98:76:
42:8c:83:9b:67:19:59:ef:c6:cf:45:db:29:04:00:
35:e1:f1:7a:c0:94:e4:29:af:aa:88:3c:c9:27:f8:
d2:29:19:3e:f8:e1:f7:46:de:f2:17:ed:27:f0:50:
a6:ab:b6:bd:26:1d:08:d6:6a:92:24:9f:30:9f:55:
da:f0:4d:4c:6d:6a:ff:2c:78:9e:63:d1:2f:13:89:
35:fa:33:5a:a4:c2:76:cc:eb:5e:5d:e7:31:35:8a:
a6:8e:ee:3f:5d:4e:19:19:4e:ec:95:11:13:23:0e:
78:cb:2d:4d:41:54:94:d9:fc:ea:5e:b0:e2:57:49:
c9:60:31:9e:60:31:8b:58:10:f8:35:33:38:45:e0:
d4:71:33:f6:6d:de:30:13:23:54:af:d6:f0:67:2b:
6a:36:02:b2:a5:06:bd:fd:62:0a:cc:81:c2:cc:aa:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:60:DF:94:2A:C4:4B:1E:D0:7B:26:29:81:56:49:4A:7F:6D:13:87
X509v3 Authority Key Identifier:
keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ee:10:a1:54:d2:40:71:55:34:7b:b4:7e:59:c8:ec:33:1a:
25:a3:9c:9a:18:a5:76:1f:d1:62:ec:06:60:32:84:0d:18:48:
7f:c8:e4:60:af:36:4a:4a:66:68:a7:51:ce:1b:15:6f:10:a0:
4f:75:1e:4c:df:76:b3:e2:2b:fe:d0:32:f0:03:22:4d:e2:07:
e9:dd:ce:40:0a:a5:37:a4:fc:90:8a:92:c2:45:10:55:51:25:
9a:9c:77:5c:05:ec:a8:9b:29:de:08:2b:05:6d:ec:2f:76:a2:
97:31:8c:1c:f7:16:9b:51:b5:83:9b:d3:2a:94:36:aa:59:44:
da:65:df:26:06:0b:94:21:ad:4f:8f:2a:e2:cb:82:12:d9:d0:
76:f9:fa:dd:10:1c:08:dd:1a:c8:a4:19:3c:b4:c2:29:07:87:
e6:b5:16:b1:9c:e4:bb:bd:a9:23:26:74:d1:df:af:c1:85:7b:
8b:72:ba:0a:a5:d9:7f:e9:01:4f:00:3c:09:08:8f:ef:ed:34:
cb:6d:0a:8c:a2:85:12:f2:c2:38:0b:29:9e:c8:f5:94:03:ee:
5d:96:f0:c4:8d:e1:8f:a9:db:2a:b8:01:b7:48:ab:c5:92:3e:
32:f0:00:12:58:8d:fe:0a:a8:49:53:7b:cb:0c:de:5e:0d:00:
5a:c0:2e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:15:01 2026 by rpki-client