Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier: +SSd5h4RJ2LJirxTAYxPotxEZhYpEI7BbYQ38bQZy5I=
Subject key identifier: F5:FA:C2:D6:5F:61:76:CA:26:81:91:16:33:A5:2D:62:11:50:08:BC
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 019D992B932DCF0B959C95F1D3603E5CCF60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 02:01:02 +0000
Manifest this update: Fri 17 Apr 2026 02:01:02 +0000
Manifest next update: Sat 18 Apr 2026 02:01:02 +0000
Files and hashes: 1: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: AmJv8ZaFniAFkZI/8m1HoY5iCATf4sOfzSRRpRMl/ss=)
2: RJ1EJaa3qjJZWuBwlQqSmwso1jg.roa (hash: bTJPrA6ymzwXdRMFik+l8zaHSMgQpaxNnOp2N0dHINQ=)
3: bLQis5XKFb9ePmaCn3Xde03b5ww.roa (hash: 7sPEt/kWbqDqCi2RTlX06DSMHs8kABLOqQ1zmeVq5Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:93:2d:cf:0b:95:9c:95:f1:d3:60:3e:5c:cf:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: Apr 17 02:01:02 2026 GMT
Not After : Apr 18 02:01:02 2026 GMT
Subject: CN=f5fac2d65f6176ca2681911633a52d62115008bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:02:f3:5a:42:ea:c7:e7:50:fa:09:ac:46:ee:
a9:6c:eb:98:e7:2d:42:23:87:f1:75:a6:75:4a:3d:
8c:3b:92:d6:df:fd:a0:db:85:68:06:48:81:b1:c7:
d4:c1:1d:92:38:20:63:a7:32:53:ff:a6:dd:4f:ec:
56:0c:71:5b:ef:9e:80:9b:f6:5b:34:2e:4a:14:69:
60:47:97:38:c4:d9:57:4b:4a:16:7b:06:60:a3:aa:
58:88:63:b3:1b:9c:aa:c7:b5:d4:fa:f6:99:31:80:
8b:e0:b6:9a:64:1c:a3:43:42:ba:8f:13:fe:fe:f1:
dd:3d:ce:3b:cc:98:cf:db:a6:2e:d6:85:c5:60:94:
4e:ea:26:22:52:5e:5b:8c:ed:2a:43:5d:99:9d:6f:
b2:36:89:d5:6b:29:ad:d6:c3:6c:e1:e6:93:57:ac:
c8:7f:ce:16:01:0b:42:cc:15:b4:26:22:f5:10:9d:
58:44:91:f0:9f:b7:3c:6b:f9:c2:c5:4b:8d:aa:2a:
29:43:11:a6:9e:50:95:e1:c2:78:2b:49:64:c5:85:
1c:a7:7d:4e:96:de:e3:ec:25:47:da:8d:a1:f2:87:
6e:dc:6c:11:7b:c1:6c:7c:d9:53:f4:5a:e9:bd:4f:
9f:78:c0:e0:fb:f1:81:70:24:32:2c:12:07:5f:2a:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FA:C2:D6:5F:61:76:CA:26:81:91:16:33:A5:2D:62:11:50:08:BC
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f6:65:02:1f:b6:ad:b8:95:ae:90:97:12:5f:ff:74:ec:da:
d1:f2:84:bc:0d:fc:4e:7f:67:63:c0:8a:f8:58:8a:f8:d6:8c:
76:51:f4:a9:e3:84:3c:4d:a9:17:e5:73:b4:5d:ea:57:01:50:
e2:a0:d6:ab:da:b0:31:fe:45:81:ed:d0:bf:60:b4:a3:25:e2:
6c:0b:9d:6b:37:87:42:1c:f0:0b:57:34:fa:09:74:0f:9e:c9:
5c:d6:08:5f:f1:51:43:12:9c:a0:4f:e0:10:5b:0a:81:62:5d:
05:bf:41:ab:71:5b:b7:1a:1e:1d:e6:86:cd:ab:77:72:78:37:
7a:dd:18:04:b7:d0:ba:f8:91:3b:95:14:26:01:0e:2e:8f:e1:
da:74:97:84:32:09:a6:4b:ee:12:41:26:9a:9d:79:68:a0:d8:
de:b8:da:c9:29:4b:74:74:82:5d:d0:61:fa:9e:98:7f:13:73:
b4:1b:4d:0a:2e:38:89:9c:65:91:ad:2d:55:1b:e7:9c:e1:99:
34:c7:48:ba:95:6d:fb:7a:fe:fb:b8:a3:87:d8:00:13:d6:56:
d4:8d:60:2f:c9:8b:b3:ca:e7:ca:9c:43:01:0c:89:54:e9:42:
ea:72:ca:e4:2f:b4:02:2f:18:80:af:d0:78:b3:e6:46:5e:b8:
12:76:25:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:54 2026 by rpki-client