Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
File: B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft (raw, json)
Hash identifier: aToeyrZuNa1vK2UzZD4DSM5QGZfKEy/V0L7wTVkRBvU=
Subject key identifier: F5:BC:DA:0A:CB:AA:6C:A0:29:FC:B9:A9:BF:C0:D1:7F:CD:73:90:27
Authority key identifier: 07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
Certificate issuer: /CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Certificate serial: 019D9A75168E402200482C451E0E476BDC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 08:00:57 +0000
Manifest this update: Fri 17 Apr 2026 08:00:57 +0000
Manifest next update: Sat 18 Apr 2026 08:00:57 +0000
Files and hashes: 1: B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl (hash: 5O6BnqxBj8BDsZP6gEVQ9G1K1z39oOVVZjXquh6CF30=)
2: D_VQ3qcRrE1RcGz3L2hiZ5fs0q0.roa (hash: 3nNJVROdH+6QiOLIHdge07W05M5mKR5oevvpsKwNQMQ=)
3: R2U_cQMFZM4-GXgQbDyShKrCAGA.roa (hash: Ag9S/vdQiIdyQgvSbtnRDnW1NQNHuWeD+J3+pdenpE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:16:8e:40:22:00:48:2c:45:1e:0e:47:6b:dc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Validity
Not Before: Apr 17 08:00:57 2026 GMT
Not After : Apr 18 08:00:57 2026 GMT
Subject: CN=f5bcda0acbaa6ca029fcb9a9bfc0d17fcd739027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:dd:de:a1:3c:8f:c1:74:e9:9d:2c:8e:3b:
7b:a0:f2:dd:0e:eb:a8:28:24:d0:2d:5a:eb:ca:3f:
14:67:c5:a5:4d:c7:8f:53:95:86:3c:50:6f:6c:1d:
2f:bd:cc:bb:37:36:32:a5:e8:8b:91:95:9a:61:de:
e0:f4:9c:ad:01:ac:92:82:b2:18:98:cb:41:ee:c8:
e8:b4:96:e8:b1:9a:b8:65:17:03:cd:98:0d:cc:08:
b3:94:c2:d8:c9:68:11:38:ab:d5:f8:02:9d:f4:01:
6a:e4:72:7a:04:b0:3e:36:15:9c:24:8a:b4:c0:a0:
2f:54:1a:fd:fd:06:9d:fa:da:bf:42:29:d5:e3:4d:
14:d8:c2:e9:1d:34:67:c2:f4:ed:d1:90:c3:39:6b:
e8:b6:05:5c:9e:40:45:4d:68:cf:24:06:b1:2b:87:
72:33:c2:3a:7b:0b:43:7e:f3:58:fd:7d:67:3f:14:
df:89:83:5b:3f:8a:5d:f1:f1:c4:64:e2:b8:44:b9:
84:50:08:66:a4:f8:77:b1:25:ea:46:1f:75:d5:55:
0e:f5:dd:53:77:9d:e7:10:68:8c:1e:ad:52:43:1b:
ea:aa:1b:14:40:f6:1f:ae:01:36:3a:15:ba:34:91:
c6:af:65:ac:66:3a:b2:55:50:74:e2:13:d6:3f:cf:
90:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BC:DA:0A:CB:AA:6C:A0:29:FC:B9:A9:BF:C0:D1:7F:CD:73:90:27
X509v3 Authority Key Identifier:
keyid:07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b6:0d:13:9a:9c:c5:0c:56:a7:14:d4:8f:93:b8:2f:96:11:
1a:01:c1:18:a7:85:44:fe:eb:37:1e:29:38:fa:2a:47:6b:c3:
c9:8d:ac:47:4e:90:7e:9c:81:7e:ec:04:1f:38:28:42:b3:a2:
10:a2:a9:5a:3d:84:ea:b8:23:2d:1e:ab:a9:04:93:81:3a:16:
e9:5c:6d:9b:56:96:35:1d:ba:79:e1:af:ed:8d:7b:e2:f4:b0:
2c:0b:91:68:bb:c3:4c:24:9b:bb:67:5a:d4:c1:25:3f:22:11:
07:90:50:d8:35:95:91:ff:a0:91:27:42:5c:5f:c9:66:e5:eb:
0a:24:e1:d7:b9:77:0f:d8:8f:cf:3c:14:c2:6b:1c:4d:0e:13:
ec:ef:b1:fb:39:f4:36:26:6d:a7:96:1a:aa:c3:a9:ef:7a:25:
15:49:36:3c:0c:78:65:08:9e:f7:a3:3c:7c:ea:22:ac:81:22:
44:fd:2d:e2:d7:5a:9d:0d:37:60:1e:55:d1:f7:13:b6:a2:81:
e5:ef:df:0a:0b:cd:ab:3b:57:73:ef:73:51:77:00:a1:87:5a:
41:8e:9f:76:be:35:97:b1:19:34:6a:93:e0:92:3a:d7:01:f7:
24:fb:eb:36:27:77:ca:3c:62:2f:c9:b2:5d:89:42:ea:ac:a7:
75:cc:a7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:17:13 2026 by rpki-client