
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
File: bchbZ4jkUMBUE0row2V0iyP3Qmc.mft (raw, json)
Hash identifier: eX02zJxgYnOPcfic96KeWcKVoCbtH9BeMACbR6PXWrg=
Subject key identifier: 94:D8:B3:D3:A5:4E:E0:8D:FC:67:56:47:6F:F2:C6:F1:B8:27:B3:31
Authority key identifier: 6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67
Certificate issuer: /CN=6dc85b6788e450c054134ae8c365748b23f74267
Certificate serial: 019D99627F45227933860A621E8640E9713B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
Manifest number: 0A3C
Signing time: Fri 17 Apr 2026 03:01:02 +0000
Manifest this update: Fri 17 Apr 2026 03:01:02 +0000
Manifest next update: Sat 18 Apr 2026 03:01:02 +0000
Files and hashes: 1: RNdr2XfKznxYQv64qQ8r-9v8mi8.roa (hash: 8EELTXHUCB2Nv32RBO7+0uGvBkgV+cDWxxUoIS6QShs=)
2: bchbZ4jkUMBUE0row2V0iyP3Qmc.crl (hash: 83sNPeOvTmgUG6pENEtz4UIKz685XZzAmjHUGaxjtQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:7f:45:22:79:33:86:0a:62:1e:86:40:e9:71:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc85b6788e450c054134ae8c365748b23f74267
Validity
Not Before: Apr 17 03:01:02 2026 GMT
Not After : Apr 18 03:01:02 2026 GMT
Subject: CN=94d8b3d3a54ee08dfc6756476ff2c6f1b827b331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8d:21:7a:85:9d:b2:c8:51:1c:0a:cc:8a:11:
4d:c5:3d:37:8f:57:01:57:ad:47:cd:4e:54:1e:df:
2a:23:68:74:38:35:74:34:2f:30:6a:fc:e2:cb:19:
29:02:fd:a9:78:17:f4:33:9e:ea:fb:74:24:8f:10:
60:e7:78:79:ca:40:0a:4a:76:5b:6d:67:30:06:7e:
d8:a3:9c:fc:81:0d:4b:bb:bb:55:09:7d:f4:26:df:
9c:2b:c0:99:a1:6d:fc:71:7c:3c:1d:56:5b:df:95:
8a:0b:b2:ca:4d:b6:be:0f:5c:50:47:63:b0:85:9d:
73:80:da:be:16:3f:60:9a:98:8b:9f:60:35:6a:52:
55:23:0d:dc:d2:ff:64:f8:0e:57:21:02:8a:d6:56:
82:9f:42:6f:a1:91:80:21:89:98:ed:7c:d7:80:87:
7e:f3:ec:8a:97:6d:d5:5f:17:71:26:93:6a:34:d9:
54:50:a9:87:ba:ba:c4:60:81:4b:08:a9:6b:b7:80:
2d:d0:3d:7f:7b:ea:57:b2:08:de:f1:19:78:1e:43:
06:b7:26:85:51:c2:10:dc:ef:11:a9:bf:44:09:94:
84:8c:e9:92:b2:7c:b1:37:b5:78:1e:cb:35:74:56:
a6:bc:37:ca:9c:51:f3:40:4d:74:25:1d:54:88:d2:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D8:B3:D3:A5:4E:E0:8D:FC:67:56:47:6F:F2:C6:F1:B8:27:B3:31
X509v3 Authority Key Identifier:
keyid:6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3c:ad:dd:2a:01:b5:97:52:f9:72:61:b5:86:a8:9d:4b:fc:
b2:03:98:ab:49:12:56:1e:cf:ff:37:be:65:5e:17:c0:41:48:
2d:a4:e2:3c:98:87:f0:72:a2:43:21:f3:b2:86:6b:4e:43:82:
1b:c0:5c:fe:1c:f0:bb:42:79:47:75:70:5c:50:dd:45:61:29:
71:c3:5b:a6:b5:8d:d4:f0:6d:a8:d9:0d:0d:ef:b6:84:18:5e:
29:3e:98:03:1c:91:e0:31:9b:e9:71:b0:29:45:18:8f:30:1d:
b0:af:f8:62:fe:1a:2b:8c:47:72:68:c1:44:bf:ee:a6:1b:9a:
a3:38:97:ab:35:33:49:e2:dd:26:99:3a:9f:23:14:7d:36:bf:
c1:59:5a:58:42:31:21:a5:a6:9a:e4:da:9b:d2:73:9b:a1:39:
39:25:4f:c0:b6:63:52:c4:89:27:39:36:65:f3:59:29:91:c4:
35:8f:d1:4d:ab:a9:c5:87:1e:d5:e1:31:69:93:7b:07:c5:d5:
40:7b:63:b0:53:76:c9:41:36:08:08:a4:3e:94:ac:5e:97:af:
d8:8c:0d:28:79:e8:a2:6d:f4:c4:6d:95:a6:8d:70:cf:ef:b7:
3d:56:31:b3:15:aa:81:4b:3b:de:1c:e8:56:e1:2c:2a:e2:45:
75:a2:af:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:07:57 2026 by rpki-client