Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
File: bq0LWp5EY4gC_LRukPqjrbUWv4g.mft (raw, json)
Hash identifier: zFRlx2/q1S85gERV+OaYxt+ocWUHW5yiDPfJbh7VDac=
Subject key identifier: 22:CD:43:75:D9:F2:EB:44:0F:59:F8:30:72:2F:B5:EB:88:FD:6F:07
Authority key identifier: 6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
Certificate issuer: /CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Certificate serial: 019D98F4EDE7507CBD37631927E5F67298E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 01:01:21 +0000
Manifest this update: Fri 17 Apr 2026 01:01:21 +0000
Manifest next update: Sat 18 Apr 2026 01:01:21 +0000
Files and hashes: 1: bq0LWp5EY4gC_LRukPqjrbUWv4g.crl (hash: yffhv7mmuan4rY5QkShRL70Jf4pNzfZbM3+ctIW/nR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:ed:e7:50:7c:bd:37:63:19:27:e5:f6:72:98:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Validity
Not Before: Apr 17 01:01:21 2026 GMT
Not After : Apr 18 01:01:21 2026 GMT
Subject: CN=22cd4375d9f2eb440f59f830722fb5eb88fd6f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:8a:26:ce:5b:34:b1:0a:e7:68:e7:21:8f:
62:81:25:a4:49:5f:43:ef:73:da:d8:1e:89:c2:26:
04:ac:95:34:f8:9e:b8:01:ff:86:df:d4:96:5d:a6:
37:73:5c:5b:7f:58:df:44:9c:81:a2:ff:e9:7a:48:
01:84:51:b7:08:44:a8:94:5f:fb:e0:ae:f9:c2:87:
31:cb:2d:a7:56:cb:db:90:1b:97:a4:43:fd:bd:79:
c2:a2:dc:d8:94:c7:92:fd:e9:f9:4d:df:3d:50:86:
7e:e5:cf:60:d7:b1:b5:2c:48:d8:c7:2b:81:e7:71:
98:b6:2f:e1:93:57:d1:ac:8c:ef:fb:1d:89:75:13:
f8:9c:b4:4d:16:ac:72:f9:70:00:7d:6e:05:e6:10:
60:63:be:31:06:c6:04:8f:cb:6c:65:b6:7c:4e:ca:
d8:b2:d5:b8:1a:5d:ef:4a:a3:48:5c:84:d5:b9:a9:
d5:c3:e4:95:4d:29:ef:d8:98:c3:45:5a:ab:a8:48:
9c:96:49:e6:60:a8:75:16:f8:73:e6:25:f4:87:a6:
e4:58:ca:76:76:68:29:41:c0:ba:b8:46:b8:d0:81:
1d:4c:be:0b:d1:b2:00:03:04:3d:3d:a2:1a:fe:e4:
e3:53:0f:72:51:f8:4b:d9:a2:92:5b:20:db:d1:48:
ef:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CD:43:75:D9:F2:EB:44:0F:59:F8:30:72:2F:B5:EB:88:FD:6F:07
X509v3 Authority Key Identifier:
keyid:6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:17:a9:3f:bc:3b:38:c9:67:0e:a4:a8:51:c0:87:ee:fd:8d:
ff:6f:9b:cf:f9:11:6f:2d:c7:82:89:35:54:5b:8c:07:5a:de:
f8:81:ae:8d:d1:36:76:b5:13:81:1b:fe:ac:e0:73:e2:e1:00:
27:2d:6c:86:9d:57:6b:36:33:cd:ff:be:7a:94:bc:12:d3:eb:
e5:5a:60:11:b7:dd:9e:af:a4:55:0f:ea:f9:8c:82:0c:6e:2a:
3e:b0:03:72:d9:9d:8f:05:f0:02:b0:ec:df:cf:3e:d6:96:a2:
0e:70:1d:ba:53:64:8b:69:21:17:c9:56:74:eb:49:9e:cd:9e:
ec:7e:af:48:ed:96:7c:e2:2e:d8:1a:41:8d:7a:13:ff:55:c8:
be:30:73:0a:36:70:5e:77:7f:58:51:5b:10:fc:2b:b4:80:57:
90:95:1a:be:bd:0c:b6:46:67:40:6f:d0:08:8f:6b:c2:29:bf:
fc:a0:a0:2d:f2:97:6c:60:f7:f9:58:a8:d5:67:09:94:38:ce:
65:b9:53:2e:37:8c:48:90:04:77:31:4f:4c:2c:e0:6d:b4:84:
83:db:a1:d6:1f:59:ee:a8:7b:f1:c6:86:98:14:56:e9:74:9b:
bc:cf:78:49:4d:d5:b4:64:22:20:13:33:75:00:80:96:a5:2d:
8c:af:5e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:04:51 2026 by rpki-client