Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
File: BZ-mprHseubqi0STTPfD1PpQjvI.mft (raw, json)
Hash identifier: oxsZzWYdV9E4f5vq7jdjhGxwjTyMt0aOYU2vjvEjEG0=
Subject key identifier: EE:7F:6F:3F:D5:31:44:6D:8F:A2:87:C0:6A:5B:88:44:C5:8B:DE:04
Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
Certificate issuer: /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Certificate serial: 019D9818C7B00E14DBA839E26E32B015EE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 21:00:53 +0000
Manifest this update: Thu 16 Apr 2026 21:00:53 +0000
Manifest next update: Fri 17 Apr 2026 21:00:53 +0000
Files and hashes: 1: BZ-mprHseubqi0STTPfD1PpQjvI.crl (hash: RWqfIwUnmLKb3UDugaA8pUOi/G7TvUAIc8/CPkGJF6A=)
2: IWqOv6y-FG5f7yp9nH6xdgnpv8E.roa (hash: gkV9ez5h044OMkSTspKV9neDGkCTAKH1+BcOktle2ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:c7:b0:0e:14:db:a8:39:e2:6e:32:b0:15:ee:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Validity
Not Before: Apr 16 21:00:53 2026 GMT
Not After : Apr 17 21:00:53 2026 GMT
Subject: CN=ee7f6f3fd531446d8fa287c06a5b8844c58bde04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:d4:8a:6b:3c:91:d3:a5:b7:65:1c:72:7d:
f5:60:77:fd:b2:29:48:e9:5d:af:1e:35:de:5b:44:
5d:3d:0f:83:63:32:ed:6b:77:68:c1:0e:e4:04:79:
c5:e8:65:8b:0b:b1:c1:ee:14:8e:1a:3a:d6:84:d3:
6e:b4:b7:8d:be:a7:8a:90:1d:a6:80:89:7e:99:77:
f3:98:fb:23:17:8d:62:61:bc:47:02:89:fa:61:7d:
24:a3:08:b2:f0:4b:06:c6:38:be:c7:f1:f3:f3:35:
a4:bd:b9:da:2f:cc:9c:c8:5f:25:98:4f:b4:cd:29:
f6:9a:99:92:a3:bb:c0:e1:1b:c2:72:e5:0a:d1:aa:
2f:58:aa:9f:b7:2e:b9:14:9c:1e:b2:29:a2:94:cb:
80:da:ec:d9:5a:bb:4a:5b:c2:4a:0b:21:5a:f8:a4:
8e:2b:9f:1c:18:09:a1:54:a4:74:23:1a:5c:7f:23:
4c:f3:e3:cf:ae:d2:47:b1:df:4c:de:9c:a8:c7:20:
fd:80:78:53:78:86:d6:8e:d5:04:6b:ff:8d:2e:46:
3c:dc:8f:64:60:b4:a6:3d:29:2c:57:d2:43:6b:4d:
c3:db:10:5c:0d:6f:3f:31:2d:9d:36:fb:c9:c2:b4:
ab:d0:27:df:dd:17:de:6c:a5:d7:18:a4:00:a1:a1:
02:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7F:6F:3F:D5:31:44:6D:8F:A2:87:C0:6A:5B:88:44:C5:8B:DE:04
X509v3 Authority Key Identifier:
keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:69:d7:a3:dc:45:e8:e1:54:48:76:2c:70:4d:74:8a:0a:cf:
f3:5f:9e:f6:08:ea:66:af:06:a4:4e:9f:d9:71:ab:57:62:45:
aa:6f:80:68:7d:7a:93:f9:c0:d8:d5:5d:2a:d3:c0:20:e5:f7:
c1:94:2b:e6:33:7a:96:06:9b:4c:3d:4d:fa:ef:8c:f2:86:c4:
a3:89:54:8b:46:f1:28:26:82:ca:69:38:d8:af:ff:44:4a:91:
1f:87:13:cf:d7:7a:24:89:02:93:aa:31:27:15:8c:89:95:7f:
e4:7e:62:59:49:a3:97:05:03:31:64:5f:b8:50:76:eb:99:66:
db:9c:df:55:a7:8c:a1:a2:1d:84:f6:a2:d2:c0:e8:51:1a:63:
37:cb:f8:25:b5:f9:5c:a7:59:c7:c9:f1:4b:43:17:7f:11:48:
9d:46:53:b1:23:8f:82:ba:d9:50:67:37:51:58:2f:75:d0:72:
80:dd:52:df:54:28:fc:13:10:38:05:1d:ac:bc:3a:3c:41:ec:
b5:80:54:55:5f:9e:cc:bc:05:40:fa:82:b8:27:81:c8:85:d9:
87:ab:08:46:34:00:91:dc:cd:e0:9e:8f:86:c9:6e:4e:6c:b2:
a4:b8:55:06:51:b0:55:d0:1c:80:35:fa:79:3b:5d:fc:c7:21:
7f:da:5d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:30:56 2026 by rpki-client