Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
File: bJHX1fXOV5JskDlz7L8RK_rhUw0.mft (raw, json)
Hash identifier: 1aPMlwIk8p44U4Rt4gjgJAh4vQNrfv5AXQ2hyHw4Whs=
Subject key identifier: F7:72:DF:E5:D2:CC:A6:E0:81:90:59:52:A7:AC:02:39:CF:2D:27:94
Authority key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
Certificate issuer: /CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Certificate serial: 019D99D093F707FDEA9EA46C43A7B6597B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:01:16 +0000
Manifest this update: Fri 17 Apr 2026 05:01:16 +0000
Manifest next update: Sat 18 Apr 2026 05:01:16 +0000
Files and hashes: 1: bJHX1fXOV5JskDlz7L8RK_rhUw0.crl (hash: al2sXgNhMXoM4lbK1nZaVFDGi7C09fztWzNO+vcOnoM=)
2: gAFSZzKTjEVRf47WvbPQw9RuhoM.roa (hash: jPokL5/z/e0Il4m/WG56yEQQsrUzjo4pjF7u6A/T3a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:93:f7:07:fd:ea:9e:a4:6c:43:a7:b6:59:7b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Validity
Not Before: Apr 17 05:01:16 2026 GMT
Not After : Apr 18 05:01:16 2026 GMT
Subject: CN=f772dfe5d2cca6e081905952a7ac0239cf2d2794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:ec:e4:ee:7c:9a:d0:fa:32:1c:89:0c:cd:d0:
b4:16:ad:68:c8:1f:29:4d:4f:e1:06:89:71:90:97:
59:ad:f5:a4:a9:04:a3:04:3e:58:57:07:b6:8f:b1:
5e:e5:93:0a:1a:87:a5:b8:95:8f:f3:4f:b6:0d:9e:
e3:ee:03:1d:fe:e3:3b:95:70:2f:ed:71:3c:49:d9:
4b:55:fb:a0:99:d3:43:95:5a:35:4b:0c:4b:31:73:
16:e1:40:0b:01:05:2f:82:ce:41:2f:8b:4d:88:83:
a5:22:43:65:a7:89:69:dd:29:f9:ea:7f:69:0a:ae:
2e:43:3d:fa:ef:f0:15:9d:cb:e8:b2:6c:39:78:5d:
0c:ea:24:21:5b:24:81:11:b4:94:63:0d:4c:da:fa:
ce:30:07:75:fd:10:09:37:d4:ec:eb:46:cc:e3:47:
32:8a:13:1e:94:83:9a:55:53:47:15:c8:42:12:c9:
06:a9:ff:cf:13:d6:e9:6e:43:99:3f:75:1c:7a:83:
10:6b:fe:44:8b:43:50:59:ad:fb:53:d5:f5:39:13:
0b:af:01:7f:44:1b:7a:d4:40:ee:07:f0:7d:10:29:
50:8f:56:57:b7:ec:1a:ce:df:2e:ca:3f:66:2a:ce:
1e:7f:ce:e2:a8:a0:b1:31:25:16:86:b7:9f:45:6c:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:72:DF:E5:D2:CC:A6:E0:81:90:59:52:A7:AC:02:39:CF:2D:27:94
X509v3 Authority Key Identifier:
keyid:6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ec:99:56:42:68:6c:7b:e0:db:8c:18:d0:7e:9a:a2:d6:7f:
7e:38:df:67:5e:f4:45:8b:74:e2:cb:26:87:54:ff:64:d2:ca:
33:36:a1:b4:72:73:c7:91:79:3c:c6:1d:93:b1:d3:ee:48:81:
90:68:1e:7c:08:cd:f5:49:b2:19:b1:f9:53:c3:d7:97:06:8f:
da:2e:24:a2:07:0e:2d:c0:8c:50:61:88:2f:34:ad:93:c3:e1:
df:29:c6:f1:0f:d1:f7:02:65:54:ee:2a:89:33:1f:6a:43:75:
df:be:c3:de:cf:37:d2:b8:3b:76:d1:64:23:78:a9:a9:01:c4:
5d:88:4f:18:98:d3:59:8a:00:fa:e0:78:49:54:aa:94:58:44:
71:24:01:85:0c:08:e6:6b:d8:80:c1:5d:5d:40:dd:21:ff:37:
58:a9:69:c2:1f:7a:cb:d3:87:fd:6d:9e:f5:37:f3:d3:5a:33:
65:02:07:24:bb:95:00:fe:7a:c5:6c:62:63:28:83:80:d1:d9:
b7:92:08:72:6b:d4:cc:67:f8:58:63:b6:46:c4:38:01:70:da:
9a:ff:1c:cb:4d:82:64:78:e8:fb:92:c2:75:3a:b1:68:e9:25:
8e:b1:39:11:f7:a6:ba:66:b7:70:f8:ab:b3:38:2a:5c:f8:cf:
61:79:14:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:01:34 2026 by rpki-client