Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
File: b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft (raw, json)
Hash identifier: 6yPdxHPq+GuSTWIcmPFiejKBoiRt1jcF1VT52jQXkhU=
Subject key identifier: DF:BA:A3:C1:28:AB:5D:32:4A:D9:27:02:15:2A:5C:BB:9C:78:7D:3F
Authority key identifier: 6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
Certificate issuer: /CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Certificate serial: 019D9962F380105B726E4BF4B0A244F44EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 03:01:32 +0000
Manifest this update: Fri 17 Apr 2026 03:01:32 +0000
Manifest next update: Sat 18 Apr 2026 03:01:32 +0000
Files and hashes: 1: b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl (hash: 7qw1smUUP4HHQhLgaaXVBVV1rYt+gFIiN2Sw9cIO4nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:f3:80:10:5b:72:6e:4b:f4:b0:a2:44:f4:4e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Validity
Not Before: Apr 17 03:01:32 2026 GMT
Not After : Apr 18 03:01:32 2026 GMT
Subject: CN=dfbaa3c128ab5d324ad92702152a5cbb9c787d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:f6:42:aa:b5:ae:b9:9c:da:22:f5:20:6f:
9f:58:d9:11:a1:45:67:69:b8:0c:ad:09:88:6c:85:
82:f4:86:7e:f7:65:6c:0b:17:e6:7d:4e:40:03:22:
66:2c:00:f7:eb:76:d4:0b:44:36:9d:ec:12:57:d9:
a7:ce:98:de:9a:3b:32:01:66:4f:c1:a2:3f:c7:c7:
d1:0e:3a:aa:c7:b9:1b:14:15:cd:ab:48:79:57:44:
47:0a:83:45:6f:87:9f:e4:c3:e1:17:c7:2b:3e:11:
ee:0c:cc:74:93:b7:72:1b:0e:b1:00:66:3b:d6:be:
e3:8e:79:dc:da:8a:3d:7e:04:01:5d:b6:45:e5:54:
b9:fc:d1:87:49:13:d9:1c:5c:cb:c7:73:59:af:21:
12:97:f9:33:09:58:11:27:c2:21:6c:c6:d0:60:3e:
cc:85:50:f0:38:4e:5e:bf:ac:df:f8:70:1a:86:61:
c3:4b:79:84:11:31:6c:de:e1:93:6a:30:15:88:68:
66:56:9b:70:95:a6:41:6a:d0:61:5a:e2:e7:46:c3:
fd:df:57:99:b9:c8:40:98:3d:75:bb:5d:c0:59:9b:
d7:a6:29:1a:c7:77:7e:d6:3c:94:4b:5e:6d:90:4d:
5c:78:a0:14:93:39:58:5e:9a:7c:02:41:1e:8f:69:
23:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BA:A3:C1:28:AB:5D:32:4A:D9:27:02:15:2A:5C:BB:9C:78:7D:3F
X509v3 Authority Key Identifier:
keyid:6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:74:65:0a:12:4f:de:a5:3c:8b:8e:7d:f6:3c:89:ea:3e:43:
78:af:f0:d0:6f:4e:72:2e:6e:95:1d:c9:04:31:37:72:87:e9:
82:c1:ba:fc:f6:fa:f5:0e:4d:02:d2:ad:7f:96:8d:a8:a9:f5:
b0:1a:2b:b4:be:98:e5:ed:27:c7:a3:fc:50:2e:ec:57:1e:6a:
aa:13:38:42:d9:a0:fd:7a:98:41:57:b3:13:25:f2:8e:6f:bd:
10:35:57:2f:7c:0c:4b:e9:1d:09:24:78:98:90:1d:52:29:dc:
6c:ba:81:a4:6a:c2:9c:4d:34:39:53:e9:79:ad:5f:06:f8:59:
4a:95:4e:3c:17:05:59:ad:79:5e:ea:e8:f0:c4:7d:58:f8:1c:
a5:50:a9:a1:98:a4:9e:fb:da:46:f5:8e:d8:e8:ca:4d:fd:df:
28:15:23:bf:2e:d6:cb:59:89:17:f9:b1:55:5a:f1:51:26:46:
a9:ba:0f:d1:d7:08:a8:9d:8c:cd:5b:01:64:56:47:13:7f:d0:
05:20:fe:fd:b9:7a:06:4d:27:5a:ef:80:b7:9f:90:a9:14:e2:
a7:67:15:9c:c8:bb:19:72:01:0a:51:2f:6c:df:a4:ef:18:65:
f6:5a:1b:76:da:6f:86:02:bf:55:38:f3:80:61:b4:53:67:f9:
c4:68:c8:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYvOAEFtybkv0sKJE9E7AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODJjOGFlNzk2NzBiZmFmM2FjOGRhODg3NDg1ODFlMzk5
NzJiZWIwHhcNMjYwNDE3MDMwMTMyWhcNMjYwNDE4MDMwMTMyWjAzMTEwLwYDVQQD
EyhkZmJhYTNjMTI4YWI1ZDMyNGFkOTI3MDIxNTJhNWNiYjljNzg3ZDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7v2Qqq1rrmc2iL1IG+fWNkRoUVn
abgMrQmIbIWC9IZ+92VsCxfmfU5AAyJmLAD363bUC0Q2newSV9mnzpjemjsyAWZP
waI/x8fRDjqqx7kbFBXNq0h5V0RHCoNFb4ef5MPhF8crPhHuDMx0k7dyGw6xAGY7
1r7jjnnc2oo9fgQBXbZF5VS5/NGHSRPZHFzLx3NZryESl/kzCVgRJ8IhbMbQYD7M
hVDwOE5ev6zf+HAahmHDS3mEETFs3uGTajAViGhmVptwlaZBatBhWuLnRsP931eZ
uchAmD11u13AWZvXpikax3d+1jyUS15tkE1ceKAUkzlYXpp8AkEej2kjaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+6o8Eoq10yStknAhUqXLuceH0/MB8GA1UdIwQY
MBaAFG+CyK55Zwv686yNqIdIWB45lyvrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRMSXJubG5DX3J6ckkyb2gwaFlIam1YSy1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kNTVhY2QtZTVjNy00MzA3LWEwOGYt
YTM4NjdkNTM5MDBjLzEvYjRMSXJubG5DX3J6ckkyb2gwaFlIam1YSy1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9kNTVhY2QtZTVjNy00MzA3LWEwOGYtYTM4NjdkNTM5MDBj
LzEvYjRMSXJubG5DX3J6ckkyb2gwaFlIam1YSy1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHRlChJP
3qU8i4599jyJ6j5DeK/w0G9Oci5ulR3JBDE3cofpgsG6/Pb69Q5NAtKtf5aNqKn1
sBortL6Y5e0nx6P8UC7sVx5qqhM4Qtmg/XqYQVezEyXyjm+9EDVXL3wMS+kdCSR4
mJAdUincbLqBpGrCnE00OVPpea1fBvhZSpVOPBcFWa15Xuro8MR9WPgcpVCpoZik
nvvaRvWO2OjKTf3fKBUjvy7Wy1mJF/mxVVrxUSZGqboP0dcIqJ2MzVsBZFZHE3/Q
BSD+/bl6Bk0nWu+At5+QqRTip2cVnMi7GXIBClEvbN+k7xhl9lobdtpvhgK/VTjz
gGG0U2f5xGjI+w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:21 2026 by rpki-client