Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
File: B_Khdb4gEIZBxklVMhPyElEWZ6U.mft (raw, json)
Hash identifier: 8Ee5AxlKUGQi1fVq98M/J3BbeflxCbQbG4nCa1A/W/c=
Subject key identifier: E1:D2:8B:F2:77:25:79:D4:6B:E2:72:E0:9E:FF:A5:57:9A:21:A7:38
Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
Certificate issuer: /CN=07f2a175be20108641c649553213f212511667a5
Certificate serial: 019D99D04583DCD451E07EA24930EA71ABDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:00:56 +0000
Manifest this update: Fri 17 Apr 2026 05:00:56 +0000
Manifest next update: Sat 18 Apr 2026 05:00:56 +0000
Files and hashes: 1: B_Khdb4gEIZBxklVMhPyElEWZ6U.crl (hash: Hb2BShLff0mJLrMzWsg0JtIKbCvA3Y12TodqKbFvsIU=)
2: UiYKZv_nf6g6lMuEagnSGv0kAAw.roa (hash: PTK0hI3EFperuvKBPntydYLK0hdElxooN2h+y17nzk0=)
3: YXSgyUgUnB863rJPTcWCW7mGwFc.roa (hash: V1Uuys2uya26ArEHIls/PYBVdC0Vm3sFwdUGRo5ZhTA=)
4: lMQfwH-V7Yhd6sNgC8BpN5Ho3vc.roa (hash: 80PQfjBzEobkUlg1u1KjDZCEtHTRyd3Qm3q0fmEsPoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:45:83:dc:d4:51:e0:7e:a2:49:30:ea:71:ab:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f2a175be20108641c649553213f212511667a5
Validity
Not Before: Apr 17 05:00:56 2026 GMT
Not After : Apr 18 05:00:56 2026 GMT
Subject: CN=e1d28bf2772579d46be272e09effa5579a21a738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:2d:43:9f:6d:24:9e:65:9a:6e:98:f9:30:
6f:b2:9b:17:54:e5:20:77:9a:cb:16:7a:3a:78:d6:
61:c8:40:08:6f:72:c4:c7:23:25:38:f6:1c:9c:0c:
28:a6:69:c9:c6:f1:b5:f2:a9:c8:a4:82:96:c7:93:
21:9b:ea:5e:93:95:75:bc:db:d6:28:35:91:ff:5f:
b2:64:89:3d:ba:a3:f0:5d:29:d9:b3:4f:0b:32:37:
f1:a0:9e:63:65:15:00:ab:f0:6d:7c:9c:73:da:ab:
2c:a3:c8:14:4e:c5:f1:b8:6c:c9:83:85:d2:f6:42:
18:43:72:35:bf:0b:12:2c:5b:50:04:33:54:90:59:
20:62:ba:d8:20:28:ae:24:61:00:04:03:a4:51:11:
08:d1:83:05:68:a4:91:ec:e8:da:77:06:18:de:a3:
7c:36:69:33:de:b1:cb:e9:b4:38:bf:97:1f:c4:65:
39:13:c6:e2:63:d1:0f:fc:81:0c:75:4e:5d:3e:8b:
52:7d:5a:a0:57:31:ab:a4:23:95:63:9d:cc:7e:d0:
66:b5:65:d0:8e:6a:11:2e:5a:5f:ee:20:d6:a8:80:
40:54:19:2b:be:04:fc:85:7d:1e:f9:d5:5e:95:b8:
af:e5:df:d4:23:a8:f7:39:93:a5:66:cf:70:8d:39:
93:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D2:8B:F2:77:25:79:D4:6B:E2:72:E0:9E:FF:A5:57:9A:21:A7:38
X509v3 Authority Key Identifier:
keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ca:35:98:a1:00:c4:97:6a:a4:c5:81:b1:53:33:97:9c:ab:
d8:45:cf:1b:9f:b0:dc:88:6c:f6:b8:25:87:3e:4c:90:a1:ca:
0a:b5:7c:69:48:6e:a1:2f:11:89:3e:8f:d5:58:31:e1:d5:61:
06:64:7f:ed:00:71:49:2a:38:c9:51:4e:a5:dd:97:4a:bb:8c:
93:16:87:aa:bb:44:76:73:a3:eb:3c:38:88:bf:a3:7b:d3:63:
d6:e3:e8:2f:0d:4e:19:22:ca:42:81:d7:08:c0:0f:4d:6a:b7:
c5:fb:ee:67:40:02:55:99:21:dd:df:41:d8:cc:59:8c:84:5a:
8c:44:58:da:60:c1:b6:80:6b:95:27:42:da:d6:78:d3:f6:39:
76:85:38:a1:a6:da:0d:7c:bc:16:ed:66:3f:9c:4a:e5:a3:bb:
4e:d0:3a:b5:53:3c:44:22:23:5b:f2:71:69:15:ea:19:5a:1a:
e5:8e:b3:34:2e:0c:36:7d:81:0e:9e:de:d5:87:18:2b:86:8c:
66:e9:ed:2d:73:d7:8b:17:db:e5:d4:6a:b5:5c:ae:55:a1:23:
75:a6:64:0c:a7:f1:01:73:a6:fc:92:57:8d:63:34:f9:f4:c5:
ec:7e:44:71:6d:07:15:14:8c:5d:04:3e:b2:37:2f:ff:92:1d:
c8:c1:04:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0EWD3NRR4H6iSTDqcavcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZjJhMTc1YmUyMDEwODY0MWM2NDk1NTMyMTNmMjEyNTEx
NjY3YTUwHhcNMjYwNDE3MDUwMDU2WhcNMjYwNDE4MDUwMDU2WjAzMTEwLwYDVQQD
EyhlMWQyOGJmMjc3MjU3OWQ0NmJlMjcyZTA5ZWZmYTU1NzlhMjFhNzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYQtQ59tJJ5lmm6Y+TBvspsXVOUg
d5rLFno6eNZhyEAIb3LExyMlOPYcnAwopmnJxvG18qnIpIKWx5Mhm+pek5V1vNvW
KDWR/1+yZIk9uqPwXSnZs08LMjfxoJ5jZRUAq/BtfJxz2qsso8gUTsXxuGzJg4XS
9kIYQ3I1vwsSLFtQBDNUkFkgYrrYICiuJGEABAOkUREI0YMFaKSR7OjadwYY3qN8
Nmkz3rHL6bQ4v5cfxGU5E8biY9EP/IEMdU5dPotSfVqgVzGrpCOVY53MftBmtWXQ
jmoRLlpf7iDWqIBAVBkrvgT8hX0e+dVelbiv5d/UI6j3OZOlZs9wjTmT4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHSi/J3JXnUa+Jy4J7/pVeaIac4MB8GA1UdIwQY
MBaAFAfyoXW+IBCGQcZJVTIT8hJRFmelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zNmIwODUtMWE1Yi00YWY5LTg3OGIt
Mzc2NDI2ZmZkNjYyLzEvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8zNmIwODUtMWE1Yi00YWY5LTg3OGItMzc2NDI2ZmZkNjYy
LzEvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMo1mKEA
xJdqpMWBsVMzl5yr2EXPG5+w3Ihs9rglhz5MkKHKCrV8aUhuoS8RiT6P1Vgx4dVh
BmR/7QBxSSo4yVFOpd2XSruMkxaHqrtEdnOj6zw4iL+je9Nj1uPoLw1OGSLKQoHX
CMAPTWq3xfvuZ0ACVZkh3d9B2MxZjIRajERY2mDBtoBrlSdC2tZ40/Y5doU4oaba
DXy8Fu1mP5xK5aO7TtA6tVM8RCIjW/JxaRXqGVoa5Y6zNC4MNn2BDp7e1YcYK4aM
ZuntLXPXixfb5dRqtVyuVaEjdaZkDKfxAXOm/JJXjWM0+fTF7H5EcW0HFRSMXQQ+
sjcv/5IdyMEEIg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:26:21 2026 by rpki-client