Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
File: BG82Rli2TivxUNIPyDjDZCB5deI.mft (raw, json)
Hash identifier: VWgXeFzrjM7WwD/P9jH1ncE9VFN/xHWKfhMJwV3yNek=
Subject key identifier: 40:FB:9E:BF:0A:BE:FC:9E:26:96:94:5E:83:49:B7:EA:B7:0A:90:91
Authority key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
Certificate issuer: /CN=046f364658b64e2bf150d20fc838c364207975e2
Certificate serial: 019DA5670CF475A396A441CAF63747CCF8D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 11:01:27 +0000
Manifest this update: Sun 19 Apr 2026 11:01:27 +0000
Manifest next update: Mon 20 Apr 2026 11:01:27 +0000
Files and hashes: 1: BG82Rli2TivxUNIPyDjDZCB5deI.crl (hash: 6aY/KTtqZ+xeKusWpuKodPGvKp4BM5uymsE5vmMyjjY=)
2: MrmdJdrahes4YHrf8GzXfXRAQTo.roa (hash: KDHItLe9nk7zEElA0XEEmNLAdVnKqz0qSQ47JBnQBmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:67:0c:f4:75:a3:96:a4:41:ca:f6:37:47:cc:f8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046f364658b64e2bf150d20fc838c364207975e2
Validity
Not Before: Apr 19 11:01:27 2026 GMT
Not After : Apr 20 11:01:27 2026 GMT
Subject: CN=40fb9ebf0abefc9e2696945e8349b7eab70a9091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:17:3f:d9:09:81:a1:b3:a5:17:38:60:2f:bf:
24:91:54:da:16:2a:02:e8:f4:23:de:29:d8:48:4b:
58:c3:fd:d8:a7:e9:57:18:1a:42:73:39:ae:7e:f6:
26:87:70:1b:c8:a0:e1:a5:3a:d8:2b:22:36:19:90:
10:35:8c:32:13:20:7c:51:2e:55:2f:2d:15:15:43:
ef:94:89:c1:fb:57:ae:75:f2:e8:bc:ab:5c:d8:0f:
d6:74:1b:f4:23:c5:00:0e:35:a8:ba:69:d5:ac:02:
d3:6c:7f:42:1b:ee:3e:28:0a:d7:97:d9:ea:10:39:
83:c0:26:5f:d7:13:16:5d:ab:bc:5f:52:39:fd:9e:
b8:6f:9f:56:a0:89:63:08:2b:ec:b3:3f:3f:d5:2a:
23:c3:90:93:0b:56:33:3f:a9:b1:8d:1c:fe:90:de:
db:ca:94:c0:0c:0a:e9:c0:01:6e:77:33:09:91:07:
fb:38:fc:05:f3:3d:2c:b6:c5:34:e6:e7:e2:b0:46:
16:45:c7:aa:f6:fd:a5:06:bd:5a:9f:85:f1:da:fb:
4d:95:37:3c:af:d7:8e:5e:ec:c0:d0:cc:83:c1:4b:
a0:26:71:d6:85:6d:91:5e:aa:ac:71:3f:cd:b6:01:
b8:e0:41:b1:17:bb:b6:fe:f9:76:1c:1b:d0:34:05:
d0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FB:9E:BF:0A:BE:FC:9E:26:96:94:5E:83:49:B7:EA:B7:0A:90:91
X509v3 Authority Key Identifier:
keyid:04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2a:f1:ff:a8:ba:15:b3:27:39:a5:df:27:e0:69:b1:a7:60:
d3:74:ad:72:8e:14:64:51:b7:82:1c:f5:9a:35:1e:f2:7d:5f:
87:39:9f:a2:27:2d:da:1c:dd:67:f7:a8:07:81:c9:7d:c2:54:
f9:c6:64:b0:f4:14:9f:ba:ed:72:7a:b3:77:ed:ad:5d:db:7f:
31:9f:9c:b7:50:70:68:f7:d5:0a:a9:f7:f5:24:43:c7:11:9b:
78:88:33:5d:00:7c:47:c0:37:b5:6e:61:2d:31:08:38:3e:cd:
d2:4b:da:7a:f6:5e:c9:7b:1e:0c:f9:2c:20:d9:ef:ea:73:97:
74:53:85:52:29:c1:bd:03:26:04:1c:21:36:79:ba:30:8b:b7:
5c:b6:f2:cd:55:e3:88:cd:d9:4b:22:a9:6a:cd:14:6d:a6:d2:
8f:72:ad:60:a6:79:83:f0:06:35:9e:35:93:74:23:fd:ca:66:
4d:0e:a7:92:f7:71:98:d3:31:10:1a:d6:98:1e:25:66:9c:bb:
87:28:04:b7:74:46:9c:4b:aa:66:36:57:ec:ac:c9:6e:95:b8:
9d:0b:bc:57:a9:6a:7d:57:f1:c5:76:99:2a:f4:73:9f:ee:56:
c6:9d:28:0b:bc:ce:ee:f7:a1:e9:0c:74:0f:ca:44:78:82:c2:
01:56:89:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:51:22 2026 by rpki-client