Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
File: B-XE5L47jL3g6ulGChEDLWpkq3E.mft (raw, json)
Hash identifier: +GGxDIwqYOhs3o/ZRFtdshwW5jHei7lzj2q9CRBGbng=
Subject key identifier: 86:44:EB:7D:BC:FE:93:B5:66:F7:97:CF:DA:88:B9:CF:F4:DF:D9:3D
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial: 019D9AABFC0FE72829EAEB75CFA9C0FAFA8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 09:00:55 +0000
Manifest this update: Fri 17 Apr 2026 09:00:55 +0000
Manifest next update: Sat 18 Apr 2026 09:00:55 +0000
Files and hashes: 1: 32FLh-2sl2eJtIOGk05i3sfElJU.roa (hash: HsUbHhV9ZeMlUBS5nClbq2bfx/JXEoBIkb5zGIiCc2U=)
2: 6y02T8isddrk35I82aQnZfza2hw.roa (hash: 6Bwcv1vQHggut1Ym2FRTt/C0CVvJQpNdaHy95CBYlLc=)
3: B-XE5L47jL3g6ulGChEDLWpkq3E.crl (hash: fALSnozqvPAqW1JV/1lav9IY69sDReszWMEiLQC6F3A=)
4: q04DAUNQ8mmk4frR1pjxhZ9V5q0.roa (hash: KQaHhA+OhijKUCpTAoL29fJGLyKeGagBCHKk31Lp+WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:fc:0f:e7:28:29:ea:eb:75:cf:a9:c0:fa:fa:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Validity
Not Before: Apr 17 09:00:55 2026 GMT
Not After : Apr 18 09:00:55 2026 GMT
Subject: CN=8644eb7dbcfe93b566f797cfda88b9cff4dfd93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:40:62:56:bc:31:17:83:77:96:c5:ec:b6:1b:
79:23:8b:d2:b3:12:06:04:26:21:a6:73:e1:e9:71:
cf:43:a1:6f:5b:1e:e1:bc:d1:e1:8b:81:7c:23:f8:
4e:3b:79:29:09:07:3f:22:46:08:f6:64:7d:fe:ef:
4f:de:92:67:33:40:99:d2:e4:ae:c7:d8:64:37:e5:
51:ca:52:30:6b:c1:20:71:4e:64:4e:83:d1:2a:36:
59:0f:af:b3:39:fa:8b:67:e2:41:10:52:c8:ac:ec:
44:d3:49:8f:54:df:60:36:87:4b:95:64:95:d9:72:
3c:d1:78:d8:0d:c9:f9:27:d1:71:0f:26:b0:b2:e6:
c6:10:d2:13:a3:52:18:10:cd:fe:19:18:73:f6:c1:
1f:ea:8d:3e:33:d0:56:07:e6:41:f0:d8:55:7c:e8:
d3:5f:e9:d1:ee:3b:54:e9:2c:e4:47:8f:5f:b7:6d:
73:42:b5:2b:d7:0a:5d:66:f7:63:52:de:fb:59:23:
8c:c2:c7:32:6d:37:ad:8f:81:d3:1e:34:8e:2b:27:
32:f7:55:a4:2c:9b:54:7a:d3:25:f5:f9:d8:f5:72:
4c:fe:0e:ff:71:8b:65:e9:29:fa:d6:65:70:44:be:
59:42:be:98:b1:d0:4d:69:28:93:3c:65:ac:4a:f8:
a6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:44:EB:7D:BC:FE:93:B5:66:F7:97:CF:DA:88:B9:CF:F4:DF:D9:3D
X509v3 Authority Key Identifier:
keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:0b:e2:1e:86:92:82:ab:86:9f:d2:6a:71:d6:98:b5:34:ce:
a4:8f:34:59:9b:76:00:e2:5d:1b:42:46:1c:24:b4:97:9a:cb:
14:67:0f:91:5e:26:a2:9f:48:9e:7e:d7:3e:7c:ad:c3:9f:31:
fc:40:49:37:f6:eb:d6:4f:5c:58:cd:42:3b:68:f0:16:18:35:
af:58:d3:8d:e3:9d:86:59:bd:d2:f3:0b:60:69:32:76:bb:5d:
8e:b6:24:1a:b8:02:4c:bf:95:76:71:91:3d:14:72:11:10:f0:
c6:0f:9a:4b:fb:95:5f:fd:28:12:37:56:fb:4e:c7:c3:60:82:
13:14:93:06:4f:74:9b:17:66:27:d5:fb:cc:1d:93:fe:29:d9:
28:a8:be:4a:d4:b8:df:a6:33:9d:48:dc:ce:11:ed:7b:60:c4:
ff:f7:d7:4c:8f:06:76:e9:e1:9c:31:01:11:b8:40:d5:2a:2d:
5a:98:62:0a:bd:1b:78:3d:0f:f2:8f:a4:7f:e1:85:9c:e6:3c:
b4:0f:52:25:37:28:af:a1:9d:f6:cf:54:73:af:f2:e1:a8:c0:
f7:a9:8b:05:0c:77:39:61:e4:f6:24:b1:a9:b8:e4:8c:f8:28:
32:50:21:c6:b7:fe:25:a0:39:97:d1:45:21:79:71:4b:93:21:
bf:a5:75:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:55:57 2026 by rpki-client