Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
File: BjtmD1abVGtTDsbeabMIs2k-f3Q.mft (raw, json)
Hash identifier: alx8YhGzUdIOL3Kq0CTXX4wXFRYHtpQfSbJpsWuf1J8=
Subject key identifier: D0:F1:27:DB:2C:CA:4C:F8:47:F6:CD:6A:1F:B1:2F:13:99:E9:00:3B
Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
Certificate issuer: /CN=063b660f569b546b530ec6de69b308b3693e7f74
Certificate serial: 019D9A74E3D2FCBE00537A1795760DD90B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
Manifest number: 1858
Signing time: Fri 17 Apr 2026 08:00:44 +0000
Manifest this update: Fri 17 Apr 2026 08:00:44 +0000
Manifest next update: Sat 18 Apr 2026 08:00:44 +0000
Files and hashes: 1: BjtmD1abVGtTDsbeabMIs2k-f3Q.crl (hash: 8I0H3jUUvxYD2i1imEMCaJJaofW9DsQeSW88/A+ITos=)
2: xhF6836ZAZ1v6FMBtDsruSd1XhM.roa (hash: CMajZTVB+UvtUZM05scLZACQyLK6q2OoOtMJquT+J6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:e3:d2:fc:be:00:53:7a:17:95:76:0d:d9:0b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74
Validity
Not Before: Apr 17 08:00:44 2026 GMT
Not After : Apr 18 08:00:44 2026 GMT
Subject: CN=d0f127db2cca4cf847f6cd6a1fb12f1399e9003b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:f2:34:f0:2a:fa:ef:5f:87:fd:90:72:6c:
2f:8d:7c:b1:9b:54:01:36:63:77:ba:9b:37:84:62:
4a:70:01:8d:ee:a1:a0:76:5c:73:dc:7b:ad:b8:d9:
c6:29:31:1f:4f:73:5e:9e:36:d2:fd:6d:43:72:39:
d1:87:e3:21:3c:e7:fa:07:37:37:10:78:f2:2b:8a:
72:21:d4:74:2f:5f:11:f3:23:76:db:d1:73:cc:ce:
2b:eb:74:5d:53:bc:70:89:f6:0b:04:37:69:c4:ee:
5a:cd:1c:52:10:3f:08:99:42:dd:97:73:34:2d:08:
37:b4:9b:09:ec:d4:55:e8:43:8c:6f:e1:ed:b9:78:
b4:59:6e:23:28:1b:d4:38:a5:37:b6:71:df:af:ff:
ed:99:99:be:90:72:51:6f:18:e0:fe:0c:81:cf:c9:
5e:05:a8:45:07:aa:6e:e1:e6:19:84:47:a6:6d:bb:
4f:dc:af:40:db:c3:a8:d8:52:f5:d2:78:0c:78:fc:
c1:07:ac:56:df:73:ba:c0:68:02:ab:b5:05:4f:42:
2d:63:1e:90:e4:9c:ec:fa:23:56:55:ba:73:56:fe:
a8:c5:2d:ff:cf:e6:34:71:79:a0:a5:b5:49:17:69:
f1:87:03:b5:b3:a0:a1:c4:b0:3d:74:b6:55:6a:5a:
b9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F1:27:DB:2C:CA:4C:F8:47:F6:CD:6A:1F:B1:2F:13:99:E9:00:3B
X509v3 Authority Key Identifier:
keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c8:9f:e1:84:71:8c:cf:d7:18:1a:8c:13:eb:4f:53:3c:c0:
ac:03:a2:98:2e:23:84:3c:28:fe:91:56:f8:4d:cc:d9:04:7b:
1b:33:4a:3f:70:ae:a4:05:27:f5:ed:10:7d:cc:65:23:04:f7:
de:fd:6f:67:63:91:b9:b2:07:a8:f6:1a:3b:40:6f:ba:cc:ac:
39:83:df:de:77:3c:44:50:fe:a2:77:c6:43:3f:52:8c:0e:45:
ac:8b:27:11:42:5b:c2:e9:00:82:32:db:61:ee:5b:fc:6a:f7:
21:fc:80:48:b7:cc:87:cd:21:6b:a0:09:f7:9a:29:ff:9e:c4:
8e:98:c5:1f:8b:0a:be:57:79:c8:69:72:67:1e:6d:2f:d9:73:
81:eb:d4:54:a6:36:c9:81:ab:09:70:80:fd:bb:7e:44:45:c7:
e7:cd:7e:9a:38:9a:3f:70:2a:bf:99:d9:2a:9b:0b:77:30:ab:
1d:ea:e9:ad:e7:90:02:39:9a:8f:f8:20:0a:ca:c6:bd:8b:2e:
19:7d:94:89:e8:35:d2:8c:97:b0:c5:2e:27:a2:c6:91:cd:ce:
9f:f5:7e:03:19:03:ca:cb:95:73:fd:2b:69:2b:8e:f8:a1:83:
60:54:62:eb:87:a6:c7:42:ce:06:2b:23:45:2a:63:cc:2a:c3:
55:81:48:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adOPS/L4AU3oXlXYN2QshMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2M2I2NjBmNTY5YjU0NmI1MzBlYzZkZTY5YjMwOGIzNjkz
ZTdmNzQwHhcNMjYwNDE3MDgwMDQ0WhcNMjYwNDE4MDgwMDQ0WjAzMTEwLwYDVQQD
EyhkMGYxMjdkYjJjY2E0Y2Y4NDdmNmNkNmExZmIxMmYxMzk5ZTkwMDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJXyNPAq+u9fh/2QcmwvjXyxm1QB
NmN3ups3hGJKcAGN7qGgdlxz3HutuNnGKTEfT3NenjbS/W1DcjnRh+MhPOf6Bzc3
EHjyK4pyIdR0L18R8yN229FzzM4r63RdU7xwifYLBDdpxO5azRxSED8ImULdl3M0
LQg3tJsJ7NRV6EOMb+HtuXi0WW4jKBvUOKU3tnHfr//tmZm+kHJRbxjg/gyBz8le
BahFB6pu4eYZhEembbtP3K9A28Oo2FL10ngMePzBB6xW33O6wGgCq7UFT0ItYx6Q
5Jzs+iNWVbpzVv6oxS3/z+Y0cXmgpbVJF2nxhwO1s6ChxLA9dLZValq5oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDxJ9ssykz4R/bNah+xLxOZ6QA7MB8GA1UdIwQY
MBaAFAY7Zg9Wm1RrUw7G3mmzCLNpPn90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQt
YmMyNWFlNmViMTNjLzEvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQtYmMyNWFlNmViMTNj
LzEvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMif4YRx
jM/XGBqME+tPUzzArAOimC4jhDwo/pFW+E3M2QR7GzNKP3CupAUn9e0QfcxlIwT3
3v1vZ2ORubIHqPYaO0BvusysOYPf3nc8RFD+onfGQz9SjA5FrIsnEUJbwukAgjLb
Ye5b/Gr3IfyASLfMh80ha6AJ95op/57EjpjFH4sKvld5yGlyZx5tL9lzgevUVKY2
yYGrCXCA/bt+REXH581+mjiaP3Aqv5nZKpsLdzCrHerpreeQAjmaj/ggCsrGvYsu
GX2Uieg10oyXsMUuJ6LGkc3On/V+AxkDysuVc/0raSuO+KGDYFRi64emx0LOBisj
RSpjzCrDVYFIJg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:49 2026 by rpki-client