Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
File: bmvNHuBBUxK6utqWpbTHNRu8pr8.mft (raw, json)
Hash identifier: tzPTF6YNaZ2MCcbXP9AGKIhTKZbY9IuYzoSsG83ynQg=
Subject key identifier: 84:A6:2D:80:8F:DA:F2:AE:BE:29:30:25:6D:8D:CD:04:6D:04:71:64
Authority key identifier: 6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
Certificate issuer: /CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Certificate serial: 019D9D07D4DD37B9864553912BC36C24D459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 20:00:29 +0000
Manifest this update: Fri 17 Apr 2026 20:00:29 +0000
Manifest next update: Sat 18 Apr 2026 20:00:29 +0000
Files and hashes: 1: 0Q2ZDhlYXlhZ-Frxgj-xgW0EHa0.roa (hash: 0gmvw8A6bQZ9ir/CJYmtz3ioddyiOq8E5vJFtCG6T3c=)
2: bmvNHuBBUxK6utqWpbTHNRu8pr8.crl (hash: y8T2LzQh/1YxJaZgxEZYZt+h6qr46GEo4q8L7N90CQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:07:d4:dd:37:b9:86:45:53:91:2b:c3:6c:24:d4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Validity
Not Before: Apr 17 20:00:29 2026 GMT
Not After : Apr 18 20:00:29 2026 GMT
Subject: CN=84a62d808fdaf2aebe2930256d8dcd046d047164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:81:1b:52:9f:d8:0d:a1:e1:42:90:6a:37:
e1:45:bf:8a:6e:23:b4:ea:a7:69:10:4b:50:f9:ef:
b3:ed:7a:20:56:4c:d7:ee:68:75:f1:4c:02:0a:76:
ef:98:c4:40:c4:52:41:65:65:c9:ff:b8:1f:02:d3:
b3:65:de:48:35:20:ba:b9:0d:0c:41:a5:fd:96:1f:
ce:cf:a5:c5:97:dd:1f:c0:c1:94:7a:ad:41:0b:39:
35:b4:25:8b:68:bf:9e:36:8d:58:88:c5:3e:17:f6:
eb:a8:2c:b4:60:2e:99:15:f4:24:ee:9e:98:41:85:
1c:ea:4c:6f:85:3a:ab:6f:a7:7e:07:36:61:03:62:
31:b2:71:58:a4:e8:1b:ad:06:0b:94:47:01:35:88:
97:f9:9b:77:04:f3:18:55:ab:85:ae:ca:12:bf:8c:
b6:60:ec:6b:ee:a4:95:23:37:48:fb:3b:ea:ef:5f:
47:cf:02:6b:cd:d9:e7:cd:f9:6d:8c:3d:4e:a7:ae:
db:b3:2d:5d:52:2a:96:65:b9:40:da:21:2e:97:84:
e5:b3:38:c2:54:d5:ce:d5:2c:e1:b3:fe:6e:6e:dd:
5e:7b:ec:5c:92:9b:f5:16:9f:e3:0e:08:2e:2c:9d:
61:cf:56:3d:3e:10:d2:52:e2:10:0b:a9:5f:21:66:
42:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A6:2D:80:8F:DA:F2:AE:BE:29:30:25:6D:8D:CD:04:6D:04:71:64
X509v3 Authority Key Identifier:
keyid:6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:1d:ba:2d:6f:90:f1:1d:5a:c1:ab:67:59:e9:82:f6:67:18:
67:5b:21:e2:d7:c6:f8:36:d1:8a:c7:fd:55:97:e5:e4:d9:37:
ff:7b:6a:de:06:15:89:89:26:18:4b:84:43:27:66:52:3b:e5:
e6:db:e4:ca:0d:47:6e:85:34:4a:f9:a7:21:c2:26:c5:82:6c:
bb:74:6d:fc:82:68:6c:ce:a0:fa:b9:20:46:fc:03:d4:5d:46:
20:18:a9:61:d7:03:d4:15:65:f3:f8:a1:d9:b4:db:2c:05:66:
c4:9b:85:3c:00:1b:fc:25:0a:0e:21:dd:92:76:e9:e8:f0:6e:
d8:8b:45:2a:ee:83:94:72:00:14:4d:b8:b2:ca:b6:a8:95:8b:
c2:21:d4:52:6a:e5:1b:fc:da:d1:a4:1b:05:2f:9e:91:fd:92:
71:3f:0f:37:74:a4:f8:71:65:e5:5e:4f:16:ea:17:b0:73:59:
9c:16:11:72:72:af:81:7e:85:13:c6:27:fb:be:3e:bb:c2:3a:
72:50:31:7d:ec:7d:8b:f6:cb:a3:f3:15:de:09:b3:dd:57:31:
dc:4a:8f:61:49:7e:a0:dc:56:a0:5f:87:5a:61:10:42:b3:16:
ec:84:93:0b:36:7e:a2:59:ae:dc:f3:70:f7:f8:3f:c1:4e:00:
c6:05:bd:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dB9TdN7mGRVORK8NsJNRZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNmJjZDFlZTA0MTUzMTJiYWJhZGE5NmE1YjRjNzM1MWJi
Y2E2YmYwHhcNMjYwNDE3MjAwMDI5WhcNMjYwNDE4MjAwMDI5WjAzMTEwLwYDVQQD
Eyg4NGE2MmQ4MDhmZGFmMmFlYmUyOTMwMjU2ZDhkY2QwNDZkMDQ3MTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqOBG1Kf2A2h4UKQajfhRb+KbiO0
6qdpEEtQ+e+z7XogVkzX7mh18UwCCnbvmMRAxFJBZWXJ/7gfAtOzZd5INSC6uQ0M
QaX9lh/Oz6XFl90fwMGUeq1BCzk1tCWLaL+eNo1YiMU+F/brqCy0YC6ZFfQk7p6Y
QYUc6kxvhTqrb6d+BzZhA2IxsnFYpOgbrQYLlEcBNYiX+Zt3BPMYVauFrsoSv4y2
YOxr7qSVIzdI+zvq719HzwJrzdnnzfltjD1Op67bsy1dUiqWZblA2iEul4TlszjC
VNXO1Szhs/5ubt1ee+xckpv1Fp/jDgguLJ1hz1Y9PhDSUuIQC6lfIWZCwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISmLYCP2vKuvikwJW2NzQRtBHFkMB8GA1UdIwQY
MBaAFG5rzR7gQVMSurralqW0xzUbvKa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm12Tkh1QkJVeEs2dXRxV3BiVEhOUnU4cHI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84MjczMzItMGEwMi00MjNmLWIwN2Yt
MDUyOTBiZWNkYzYxLzEvYm12Tkh1QkJVeEs2dXRxV3BiVEhOUnU4cHI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy84MjczMzItMGEwMi00MjNmLWIwN2YtMDUyOTBiZWNkYzYx
LzEvYm12Tkh1QkJVeEs2dXRxV3BiVEhOUnU4cHI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABR26LW+Q
8R1awatnWemC9mcYZ1sh4tfG+DbRisf9VZfl5Nk3/3tq3gYViYkmGEuEQydmUjvl
5tvkyg1HboU0SvmnIcImxYJsu3Rt/IJobM6g+rkgRvwD1F1GIBipYdcD1BVl8/ih
2bTbLAVmxJuFPAAb/CUKDiHdknbp6PBu2ItFKu6DlHIAFE24ssq2qJWLwiHUUmrl
G/za0aQbBS+ekf2ScT8PN3Sk+HFl5V5PFuoXsHNZnBYRcnKvgX6FE8Yn+74+u8I6
clAxfex9i/bLo/MV3gmz3Vcx3EqPYUl+oNxWoF+HWmEQQrMW7ISTCzZ+olmu3PNw
9/g/wU4AxgW9qg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:02:26 2026 by rpki-client