Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
File: bMI2cPl4nALYO6fC5-TG6e3lL3o.mft (raw, json)
Hash identifier: c8wJdUqjVUc3DdoNk+7ABFNilAPXoI6uzWeY7S7c7y8=
Subject key identifier: 3B:A7:04:65:56:7D:BE:A1:21:A9:FF:CB:C0:80:6D:D8:66:98:5A:A4
Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
Certificate issuer: /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Certificate serial: 019D98F40E6D3EE644F54141CA7BDFEBDDCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
Manifest number: 0A59
Signing time: Fri 17 Apr 2026 01:00:24 +0000
Manifest this update: Fri 17 Apr 2026 01:00:24 +0000
Manifest next update: Sat 18 Apr 2026 01:00:24 +0000
Files and hashes: 1: 1-oXRSWUITDd07eDSgyzihLvCs0o.roa (hash: 8mm9o8vBcdV71+SfAkdhQvQO3lbM5m+bwU9TRuRs5IM=)
2: 1wP7tKrHU793i9lAANAvF98w4jY.roa (hash: tk+jnzJLSmGPklGJJhOITYrmNwlbyXIF9jo1MJSghJ8=)
3: bMI2cPl4nALYO6fC5-TG6e3lL3o.crl (hash: vGd3vvLotrWnoU8+KkS64F28wZiJV3s6ar910M96xSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:0e:6d:3e:e6:44:f5:41:41:ca:7b:df:eb:dd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Validity
Not Before: Apr 17 01:00:24 2026 GMT
Not After : Apr 18 01:00:24 2026 GMT
Subject: CN=3ba70465567dbea121a9ffcbc0806dd866985aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:a4:38:7b:30:c9:98:b3:fb:dd:0b:da:ad:
03:2f:54:b0:79:8c:22:c0:48:26:bd:b9:bc:86:83:
c3:77:6c:31:f3:d3:ad:be:a9:7e:23:5a:7e:df:86:
77:5b:aa:86:f2:31:da:88:b7:9d:cd:9a:54:89:40:
32:9f:aa:40:4a:38:03:6c:a4:6f:e5:80:74:db:c6:
59:91:fe:be:bc:8a:c4:ef:0d:7a:9d:3f:2d:00:66:
bb:b2:f9:b5:28:f0:88:e1:db:34:4c:ec:93:29:ae:
20:46:11:aa:81:6a:cc:90:4e:81:9b:a7:0e:b6:ce:
90:46:a7:5e:70:53:56:86:96:24:fd:a1:ec:74:5b:
36:84:39:36:07:14:6c:18:54:f8:7a:8a:8d:8f:72:
46:50:b1:c6:b8:ac:88:48:43:1d:3b:30:2a:17:5a:
76:66:5a:50:f7:95:0b:0e:6d:f6:c6:41:77:c1:9e:
3b:d8:b0:bd:e3:b4:25:4b:a9:8d:c8:4e:9b:c6:96:
a0:2d:61:5b:23:24:c7:3f:b5:92:40:8c:57:fe:4e:
12:8a:30:c0:26:7b:7e:b7:04:69:27:99:0b:5a:4c:
b3:ae:31:b3:b3:64:2c:b4:8a:85:39:6d:0d:9b:d1:
b8:59:7b:00:bf:a8:07:e0:0d:1b:36:a5:10:fe:e9:
db:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A7:04:65:56:7D:BE:A1:21:A9:FF:CB:C0:80:6D:D8:66:98:5A:A4
X509v3 Authority Key Identifier:
keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:91:ed:6d:c7:6e:91:42:0b:b2:96:ec:eb:79:78:1d:4c:2f:
68:3f:53:c2:96:72:88:e2:0f:b6:26:21:6e:cb:5c:42:87:f7:
8b:22:2e:c4:1f:df:87:c3:be:ef:54:dc:ba:da:23:70:0f:4c:
24:09:49:e0:ad:b2:50:f9:12:75:8e:d5:0d:a4:53:4c:ee:95:
22:cc:7e:56:ec:00:0c:de:16:96:b8:78:8e:91:1c:83:6b:90:
1a:98:04:34:c7:fc:fc:b3:94:2b:a1:33:1f:02:65:a4:30:70:
a8:ab:d4:a1:99:fc:2a:b6:d4:be:f5:8f:18:7f:e8:e3:6e:49:
9e:db:dc:64:89:7c:8e:4b:e4:46:16:17:a3:e0:4e:68:7f:b8:
a9:99:2d:07:6b:d2:05:e3:a4:f9:a4:bb:40:38:dc:fd:1f:ea:
06:bf:0d:71:c5:ea:29:b4:92:51:64:a0:c4:da:3c:d9:b8:c6:
07:d3:b2:98:4c:4e:b6:48:32:fc:b1:4b:89:7b:87:2d:d5:d5:
2e:1b:e3:20:e0:b9:94:aa:1f:77:a0:7e:79:2a:81:70:37:5f:
b3:8c:13:ce:63:e5:83:e1:ed:72:72:24:ce:fa:58:59:bd:99:
71:76:6a:2d:72:d6:36:bc:ef:0a:bc:fe:6c:bb:8a:ec:db:db:
8d:8e:a1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:15 2026 by rpki-client