Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
File: b1GlChfEHhkEHD-xCwqDkielyQU.mft (raw, json)
Hash identifier: 0fgMreYz0FnessYYp9WKrlAB4q7PUmA0zn8TSa5ptA8=
Subject key identifier: 14:9B:85:75:51:B6:29:ED:FC:E3:56:82:80:BC:27:99:A3:6A:C7:AB
Authority key identifier: 6F:51:A5:0A:17:C4:1E:19:04:1C:3F:B1:0B:0A:83:92:27:A5:C9:05
Certificate issuer: /CN=6f51a50a17c41e19041c3fb10b0a839227a5c905
Certificate serial: 019D9D75C5E4F50DC4AD3D52D789FDD1FF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1GlChfEHhkEHD-xCwqDkielyQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
Manifest number: 43
Signing time: Fri 17 Apr 2026 22:00:34 +0000
Manifest this update: Fri 17 Apr 2026 22:00:34 +0000
Manifest next update: Sat 18 Apr 2026 22:00:34 +0000
Files and hashes: 1: PZMuJ8QpgBXhv1xbGqZzJ29BgDQ.roa (hash: jrIRAMtDwbYUDnGzpj0BHU287oxSgfwbWoyH7EMZ7jI=)
2: b1GlChfEHhkEHD-xCwqDkielyQU.crl (hash: hiEEHegVjhTLGQCvk86esi76FjTigvKEQnlxS6hYKVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1GlChfEHhkEHD-xCwqDkielyQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:c5:e4:f5:0d:c4:ad:3d:52:d7:89:fd:d1:ff:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f51a50a17c41e19041c3fb10b0a839227a5c905
Validity
Not Before: Apr 17 22:00:34 2026 GMT
Not After : Apr 18 22:00:34 2026 GMT
Subject: CN=149b857551b629edfce3568280bc2799a36ac7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:50:15:75:72:06:79:3c:6d:cd:50:3c:47:a8:
f7:a5:c4:c2:e1:4d:af:9e:db:7e:ae:6a:cd:01:84:
a8:b5:fc:59:22:d1:d1:3f:a2:0e:3e:91:50:d8:3c:
be:05:b4:27:45:98:3c:a2:86:ce:4d:4d:64:9b:04:
9e:b1:52:0e:db:4e:69:1b:c5:a3:77:e9:18:37:d3:
45:35:1d:19:72:1a:0e:1d:9b:92:c8:85:6c:34:ad:
ae:00:ab:91:13:50:c8:6b:46:b9:bd:8a:df:9e:3f:
84:b0:fe:3a:dd:64:39:12:72:bf:c0:f5:9d:52:ea:
6c:4f:43:61:b9:28:47:bc:4c:dd:2c:49:f1:86:cd:
43:2a:42:52:5d:18:b8:28:05:76:59:4f:55:a9:09:
24:9e:c1:1d:c4:10:a8:75:60:b8:28:af:56:f8:4d:
d1:47:6e:5d:f2:69:ef:d5:3e:93:dc:86:69:db:57:
7c:ca:48:7e:c8:65:ac:aa:ba:08:cc:a6:64:52:56:
cb:a8:8c:36:e1:07:ab:fe:f3:57:41:ba:3a:9f:99:
11:f8:b4:07:39:4f:65:f4:d7:3d:04:3a:05:4b:31:
2d:3f:d8:39:ce:c1:8a:e8:b3:b5:6d:49:ff:45:25:
1c:bb:0c:9e:a8:22:37:cd:b4:46:75:65:05:32:d8:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9B:85:75:51:B6:29:ED:FC:E3:56:82:80:BC:27:99:A3:6A:C7:AB
X509v3 Authority Key Identifier:
keyid:6F:51:A5:0A:17:C4:1E:19:04:1C:3F:B1:0B:0A:83:92:27:A5:C9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1GlChfEHhkEHD-xCwqDkielyQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f9:23:40:06:46:6f:d3:4c:47:23:12:67:34:c1:63:59:32:
6c:5e:4c:53:ad:28:3f:10:8b:ea:fa:c5:95:11:a1:ab:24:f6:
72:11:d9:80:9d:25:ed:ac:e0:4c:d2:47:ba:bc:3b:e2:b1:78:
45:fa:ef:df:7d:b9:6e:fe:e9:d6:42:cd:5d:0c:25:0c:57:22:
5e:d2:8a:eb:3d:7d:95:ca:bd:70:81:0d:5e:d9:86:92:cf:4c:
ac:d2:fe:ae:00:7a:0f:77:14:b1:09:59:1e:f1:e8:08:22:ee:
8a:f7:d7:31:c5:b6:0b:17:c2:1a:ea:b5:26:32:9e:31:a8:b5:
a6:08:32:8b:f1:f7:0c:b1:0e:14:d0:84:e6:a9:12:58:13:3d:
35:0a:1d:fc:f9:09:01:3b:0d:04:eb:25:fb:42:77:fb:b7:e1:
78:3a:2a:04:28:c9:8b:a7:91:b1:f8:27:0d:e6:83:74:b3:44:
d2:88:38:19:9c:40:af:4f:64:c0:fc:86:5e:92:52:32:24:4a:
27:0d:d9:a4:fe:f9:0c:47:6b:ac:9d:a3:a0:bf:dd:a3:87:53:
9b:ad:02:19:95:ec:9e:b3:12:6b:cb:af:f0:50:5c:15:d9:6b:
a2:96:8a:1d:7a:cb:cb:aa:f6:81:6d:c1:01:85:11:a0:14:ec:
51:29:ed:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:59:45 2026 by rpki-client