Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
File: bXt5YErx85CPSBeVZiY1Pub_wfQ.mft (raw, json)
Hash identifier: aHrNxdzoQTMJwyk25LhdBgUkyPm7iGy7O+AekCUO8A0=
Subject key identifier: 5F:B1:36:DD:93:E3:0B:29:ED:8F:66:E7:4F:9D:27:18:6A:D5:DE:00
Authority key identifier: 6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
Certificate issuer: /CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Certificate serial: 019DA3AEB9D6133BC7FF387094CD6BFBEB19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 03:00:29 +0000
Manifest this update: Sun 19 Apr 2026 03:00:29 +0000
Manifest next update: Mon 20 Apr 2026 03:00:29 +0000
Files and hashes: 1: MJtCVVy7xxJhXUWGWWZ2lNCGj1k.roa (hash: HdvJHKbNcNPfl/JOSdnPb5pLI2El/VPr+80cW88sPD4=)
2: bXt5YErx85CPSBeVZiY1Pub_wfQ.crl (hash: BGGdXioPzGnMmNnZyEw39tDsMBI2ysRQ/8eaoMnBWYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:b9:d6:13:3b:c7:ff:38:70:94:cd:6b:fb:eb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Validity
Not Before: Apr 19 03:00:29 2026 GMT
Not After : Apr 20 03:00:29 2026 GMT
Subject: CN=5fb136dd93e30b29ed8f66e74f9d27186ad5de00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:93:45:87:11:59:e0:ac:49:f6:45:81:69:c6:
3c:2b:19:52:4e:f4:00:07:ea:8f:7a:68:e9:dd:fc:
6b:3d:6b:c9:28:21:76:33:52:86:b0:52:ad:06:bc:
be:89:b7:88:b7:1e:b4:83:3e:33:48:23:fc:1d:ac:
54:fb:f1:27:1f:ad:b8:ce:3b:7c:4d:7a:4d:06:12:
25:c4:7e:c8:db:11:cc:f3:c6:51:cc:cd:0c:01:f4:
cf:8d:ae:ef:00:74:49:95:e4:98:d1:e7:6f:74:8d:
86:b3:d6:2b:c0:7e:fc:e1:50:a0:e5:49:f0:84:59:
39:37:54:1a:c4:59:8b:48:91:71:76:8b:8b:45:c0:
36:8b:73:d8:6f:b0:df:22:14:59:67:b3:66:4d:63:
ec:2d:ef:84:5d:1f:d9:fc:9d:de:91:26:77:19:d4:
be:af:c8:57:e9:09:63:96:4d:83:31:97:12:4b:d1:
74:ea:b3:7a:07:a2:0e:6a:fa:fa:be:19:e1:4e:04:
3d:16:b8:55:3f:04:b0:61:96:58:78:63:eb:66:60:
8b:20:06:54:33:fe:49:4e:5a:57:ab:10:04:bb:85:
8e:69:e6:74:30:a3:7e:63:2b:51:d2:b9:33:96:d4:
0a:37:5a:7e:8b:81:3d:78:e3:cf:32:c8:0c:9b:3d:
6b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B1:36:DD:93:E3:0B:29:ED:8F:66:E7:4F:9D:27:18:6A:D5:DE:00
X509v3 Authority Key Identifier:
keyid:6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d0:4c:e5:33:7c:3f:95:cf:f0:a5:c4:57:78:16:d7:cd:80:
75:10:ca:99:0c:89:84:63:5d:73:6a:7b:bd:8c:20:41:f2:bd:
42:08:8c:fd:aa:8f:7a:b4:df:87:44:74:06:d7:82:e8:82:b1:
a7:b4:b3:ce:18:a5:79:20:e2:de:b3:ee:04:f5:8e:0f:82:8d:
a1:78:11:37:47:09:5c:5d:3d:da:7d:84:6e:ce:f4:7d:8e:3f:
9f:ec:d4:a8:41:52:a6:01:59:85:af:85:94:1b:bf:1a:7a:f4:
2c:6c:25:82:1a:0e:92:9f:c4:dd:d4:27:35:d8:aa:d0:5f:d5:
e8:11:4c:64:18:ab:38:1a:f0:51:f4:b6:31:a7:6d:99:e6:06:
b1:e6:9c:59:0f:c0:b7:eb:9a:c9:2f:ef:ca:b2:4a:90:b3:f1:
45:9f:00:a7:9b:11:e5:ec:53:5e:22:55:96:5f:1e:3b:ec:f0:
d1:6c:b4:5e:88:61:d6:a6:48:3f:c1:95:8d:74:15:91:00:23:
af:b2:71:8c:94:d8:8e:8c:ce:81:57:3e:3e:31:2b:a9:a9:73:
28:f0:e3:0e:ad:72:a2:e2:ba:f5:73:ba:d0:e7:25:4b:f9:d2:
45:6b:9b:f8:76:2a:75:b3:ae:77:f9:9f:76:48:1c:07:72:95:
74:cc:32:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:36 2026 by rpki-client