Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
File: rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft (raw, json)
Hash identifier: 2BNunecOPelFNpIpjDB1kC2M4MpL7By7CENVs5Jp3gE=
Subject key identifier: C4:03:4D:C9:63:DB:00:C7:53:5B:47:74:2E:23:C9:C8:CF:24:8C:4F
Authority key identifier: AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D
Certificate issuer: /CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
Certificate serial: 019D984FBBF9CDD575E59FC0D02B99E119B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 22:00:55 +0000
Manifest this update: Thu 16 Apr 2026 22:00:55 +0000
Manifest next update: Fri 17 Apr 2026 22:00:55 +0000
Files and hashes: 1: LvdPzY76oVVCPqtxUifx0oiy6Nc.roa (hash: EGp1yCKfki9H4eeCPphijJ85GaSMwEVebBOhEKpM2eY=)
2: rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl (hash: BOCzDMwGPBVRTShvi9KZqfsWhFreoBJKl3EvPxfyk2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:bb:f9:cd:d5:75:e5:9f:c0:d0:2b:99:e1:19:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
Validity
Not Before: Apr 16 22:00:55 2026 GMT
Not After : Apr 17 22:00:55 2026 GMT
Subject: CN=c4034dc963db00c7535b47742e23c9c8cf248c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:c8:81:e8:ea:e0:99:8f:85:bc:1e:4f:15:
65:61:b2:46:25:bb:3e:ef:f6:af:8d:bb:b5:43:e8:
31:14:09:59:ea:b8:c4:11:89:bc:d1:3e:60:c6:a6:
7e:8c:cb:73:b7:d5:5d:6a:c2:89:0d:61:96:1d:27:
48:d9:72:d9:a9:f7:cb:a3:d4:0c:7e:26:17:65:ef:
fe:34:31:11:b5:85:3b:76:44:18:bc:f6:72:02:cb:
7f:47:83:b9:93:0e:12:9b:58:db:69:a5:5f:a4:42:
69:11:ef:0d:22:6c:c3:b0:7b:44:e6:20:8e:cc:93:
aa:d8:1a:9a:87:c0:2a:f7:bd:23:cd:8a:5d:d0:9c:
04:e7:11:18:b1:ec:b4:33:de:58:05:ba:74:94:dc:
4c:bd:a2:11:a8:7f:21:c7:36:78:f1:fe:8a:51:e6:
6b:2a:7d:48:10:ba:b5:ff:5e:23:be:55:42:48:e8:
2d:1d:5d:8f:c6:c1:8d:9d:6c:ce:0f:34:cc:aa:d6:
aa:e6:77:a1:e4:de:a2:63:25:90:f6:8c:c8:e9:30:
d7:61:39:2a:90:83:7b:6a:17:ef:1d:c9:17:08:2c:
e3:72:24:0c:71:82:e8:8e:d9:7d:6d:34:20:ea:74:
fa:f7:90:59:fc:91:02:bc:3d:51:09:68:13:ce:04:
6f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:03:4D:C9:63:DB:00:C7:53:5B:47:74:2E:23:C9:C8:CF:24:8C:4F
X509v3 Authority Key Identifier:
keyid:AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:17:1e:85:22:98:69:97:f5:06:d6:04:83:af:6a:40:44:37:
46:41:a2:9f:be:f5:e1:65:39:6c:d1:dc:e7:0e:f8:8f:1d:aa:
94:82:a7:bf:a1:5d:2f:e9:cc:74:79:9f:43:e1:de:10:94:5a:
4a:36:7f:f1:1c:a2:88:d9:7c:72:ab:ea:6e:8a:0d:88:8a:2e:
46:31:97:23:b6:be:a2:a3:1e:44:8a:77:1e:a5:3d:f6:80:44:
ad:11:d9:11:16:b5:9b:35:d7:c0:0e:97:e3:6e:07:63:7c:d5:
b8:31:3d:35:0d:9c:ae:6c:f1:1f:8b:ed:8c:48:e9:a1:a0:28:
f3:5b:52:c9:03:e3:50:72:41:19:69:43:5b:33:41:c1:ca:5e:
f6:09:66:7f:df:e3:3f:96:29:18:08:c1:cd:e0:c2:06:df:69:
68:4a:f6:ad:13:df:be:02:8a:57:15:7e:0f:80:66:31:b3:dd:
83:10:01:d2:6b:6c:32:11:f0:c9:cf:97:dd:01:a8:34:d4:7d:
fb:b4:a5:0d:65:8e:2f:6c:3a:fb:26:e9:5e:85:21:00:f0:61:
1a:a8:33:4e:29:bd:bf:6f:7d:4b:dd:42:8c:04:90:45:84:9e:
21:54:d4:fa:5d:16:09:8d:a5:40:59:e4:df:86:f3:6f:7e:a7:
6e:96:80:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT7v5zdV15Z/A0CuZ4RmwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMWEwYjljYzVjZThiZmQ5ZWUyNmQwOWQ3ZTkxMTUxYTQy
ZDM3MGQwHhcNMjYwNDE2MjIwMDU1WhcNMjYwNDE3MjIwMDU1WjAzMTEwLwYDVQQD
EyhjNDAzNGRjOTYzZGIwMGM3NTM1YjQ3NzQyZTIzYzljOGNmMjQ4YzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu57Igejq4JmPhbweTxVlYbJGJbs+
7/avjbu1Q+gxFAlZ6rjEEYm80T5gxqZ+jMtzt9VdasKJDWGWHSdI2XLZqffLo9QM
fiYXZe/+NDERtYU7dkQYvPZyAst/R4O5kw4Sm1jbaaVfpEJpEe8NImzDsHtE5iCO
zJOq2Bqah8Aq970jzYpd0JwE5xEYsey0M95YBbp0lNxMvaIRqH8hxzZ48f6KUeZr
Kn1IELq1/14jvlVCSOgtHV2PxsGNnWzODzTMqtaq5neh5N6iYyWQ9ozI6TDXYTkq
kIN7ahfvHckXCCzjciQMcYLojtl9bTQg6nT695BZ/JECvD1RCWgTzgRvRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQDTclj2wDHU1tHdC4jycjPJIxPMB8GA1UdIwQY
MBaAFKwaC5zFzov9nuJtCdfpEVGkLTcNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckJvTG5NWE9pXzJlNG0wSjEta1JVYVF0TncwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hMzI4NzItODhhMy00ZTg0LTlmODMt
YWE3MzUzZDRkOThmLzEvckJvTG5NWE9pXzJlNG0wSjEta1JVYVF0TncwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9hMzI4NzItODhhMy00ZTg0LTlmODMtYWE3MzUzZDRkOThm
LzEvckJvTG5NWE9pXzJlNG0wSjEta1JVYVF0TncwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThcehSKY
aZf1BtYEg69qQEQ3RkGin7714WU5bNHc5w74jx2qlIKnv6FdL+nMdHmfQ+HeEJRa
SjZ/8RyiiNl8cqvqbooNiIouRjGXI7a+oqMeRIp3HqU99oBErRHZERa1mzXXwA6X
424HY3zVuDE9NQ2crmzxH4vtjEjpoaAo81tSyQPjUHJBGWlDWzNBwcpe9glmf9/j
P5YpGAjBzeDCBt9paEr2rRPfvgKKVxV+D4BmMbPdgxAB0mtsMhHwyc+X3QGoNNR9
+7SlDWWOL2w6+ybpXoUhAPBhGqgzTim9v299S91CjASQRYSeIVTU+l0WCY2lQFnk
34bzb36nbpaAqQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:06:56 2026 by rpki-client