Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
File: bn8ivutSxuUaJCKxORQu6gP7XU0.mft (raw, json)
Hash identifier: pez3cg4wLbEatg7umtuirY3aW3+K/4Pm14JLreRh2fw=
Subject key identifier: B2:08:26:A5:DF:9B:57:D2:4B:33:57:C6:DF:36:A3:95:C0:03:A4:11
Authority key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
Certificate issuer: /CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Certificate serial: 019DA30A8F5BE13FF754E2D269EF8F8C3562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 00:01:11 +0000
Manifest this update: Sun 19 Apr 2026 00:01:11 +0000
Manifest next update: Mon 20 Apr 2026 00:01:11 +0000
Files and hashes: 1: bn8ivutSxuUaJCKxORQu6gP7XU0.crl (hash: LTLzEjd9Qd6soyUnmZdjviJVw1+vUxAJPjMM9tefDSw=)
2: e8E7CZUAUckXh4bcKKwuRzIom-U.roa (hash: lALjysVYHSzqDpZrz4VJufsPGn7d6TgnW+zEsP4UHHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:8f:5b:e1:3f:f7:54:e2:d2:69:ef:8f:8c:35:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Validity
Not Before: Apr 19 00:01:11 2026 GMT
Not After : Apr 20 00:01:11 2026 GMT
Subject: CN=b20826a5df9b57d24b3357c6df36a395c003a411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5c:ab:53:d2:77:1b:37:fc:a4:ba:88:c6:9c:
79:a2:55:2f:74:70:a0:84:88:f4:8c:46:07:5b:68:
9d:75:05:f3:69:a3:e9:21:80:37:4c:59:91:54:0b:
50:ad:2a:12:e8:97:b1:10:3f:c0:3c:49:f9:64:fe:
28:02:e4:c8:83:a8:fb:bb:f5:85:46:1b:32:83:3e:
9c:d9:9a:de:a8:37:b0:b0:fd:1c:19:38:f7:aa:30:
0f:70:5b:16:88:b7:5f:7f:ee:91:13:3c:a1:9f:7c:
fe:cc:18:19:a1:54:71:c7:a9:44:24:a8:22:29:2d:
38:1b:6b:42:95:0c:a5:ed:ee:51:b1:bd:88:72:f6:
f1:30:fc:74:aa:c9:65:6a:6f:63:f3:54:6f:9a:10:
f5:f6:07:9b:1c:3a:56:94:5c:b3:9b:7a:77:8c:61:
55:2e:02:71:a5:45:f9:f5:24:0c:71:8f:44:05:b7:
7f:4e:8c:86:27:ce:fd:3a:fb:29:2f:0a:67:92:9d:
1f:04:33:33:68:8f:f3:d7:b0:7f:bb:a4:55:d1:d3:
98:be:a0:4e:fa:f4:c4:f1:e9:de:7f:47:64:d0:58:
ba:3a:f1:b1:c6:72:5d:32:ed:02:20:b3:4e:ce:26:
80:c4:97:7c:4e:51:e5:e7:00:a0:9c:8f:b6:d7:3c:
3d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:08:26:A5:DF:9B:57:D2:4B:33:57:C6:DF:36:A3:95:C0:03:A4:11
X509v3 Authority Key Identifier:
keyid:6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9b:cf:ce:ec:d4:f5:e7:58:72:83:00:65:ef:f8:14:62:dc:
2a:d6:a2:86:fb:17:b4:54:5a:37:a5:c7:00:7d:1b:89:62:de:
63:f9:73:cd:1e:4d:70:b2:cb:f9:1d:ca:5b:7a:10:e3:e8:ad:
e6:c8:17:c3:a5:6d:2a:4c:e8:2a:77:7e:ea:90:aa:4f:c0:74:
f4:67:7f:6e:ab:9e:8e:ee:77:20:78:d0:2d:1b:20:c1:24:d0:
cb:2b:f7:ba:b6:87:3c:b4:59:2f:12:02:f8:fd:7e:ef:bb:99:
f3:06:e6:c6:4d:7c:f1:1b:06:b9:d4:51:5f:e2:b2:c3:66:cd:
0a:8f:fc:ce:51:09:b2:d0:39:01:77:7f:c5:07:dc:0e:1a:4f:
2c:1f:10:9f:70:f2:f4:9c:cd:32:f0:8b:1c:46:53:13:86:f2:
ad:69:24:4b:0b:40:af:11:77:b3:9a:1f:3a:01:53:88:2d:72:
b8:7e:00:5a:db:c8:ab:5e:1c:9e:47:2d:7e:c6:55:42:5c:8c:
d4:fe:54:65:39:8d:04:7c:d0:fc:5c:99:a8:7d:a8:bb:6f:76:
d4:2f:09:54:50:42:04:7b:07:7e:80:be:70:ff:6e:43:28:d0:
40:fc:34:db:74:ae:d8:9c:ca:a7:80:73:29:68:95:bc:90:6c:
1e:a8:db:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCo9b4T/3VOLSae+PjDViMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlN2YyMmJlZWI1MmM2ZTUxYTI0MjJiMTM5MTQyZWVhMDNm
YjVkNGQwHhcNMjYwNDE5MDAwMTExWhcNMjYwNDIwMDAwMTExWjAzMTEwLwYDVQQD
EyhiMjA4MjZhNWRmOWI1N2QyNGIzMzU3YzZkZjM2YTM5NWMwMDNhNDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lyrU9J3Gzf8pLqIxpx5olUvdHCg
hIj0jEYHW2iddQXzaaPpIYA3TFmRVAtQrSoS6JexED/APEn5ZP4oAuTIg6j7u/WF
Rhsygz6c2ZreqDewsP0cGTj3qjAPcFsWiLdff+6REzyhn3z+zBgZoVRxx6lEJKgi
KS04G2tClQyl7e5Rsb2IcvbxMPx0qsllam9j81RvmhD19gebHDpWlFyzm3p3jGFV
LgJxpUX59SQMcY9EBbd/ToyGJ879OvspLwpnkp0fBDMzaI/z17B/u6RV0dOYvqBO
+vTE8enef0dk0Fi6OvGxxnJdMu0CILNOziaAxJd8TlHl5wCgnI+21zw9DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIIJqXfm1fSSzNXxt82o5XAA6QRMB8GA1UdIwQY
MBaAFG5/Ir7rUsblGiQisTkULuoD+11NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80MmY1NGItNTdjMC00MjRhLWFjZjUt
NGRkNGQwZjUzODQ5LzEvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS80MmY1NGItNTdjMC00MjRhLWFjZjUtNGRkNGQwZjUzODQ5
LzEvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZvPzuzU
9edYcoMAZe/4FGLcKtaihvsXtFRaN6XHAH0biWLeY/lzzR5NcLLL+R3KW3oQ4+it
5sgXw6VtKkzoKnd+6pCqT8B09Gd/bqueju53IHjQLRsgwSTQyyv3uraHPLRZLxIC
+P1+77uZ8wbmxk188RsGudRRX+Kyw2bNCo/8zlEJstA5AXd/xQfcDhpPLB8Qn3Dy
9JzNMvCLHEZTE4byrWkkSwtArxF3s5ofOgFTiC1yuH4AWtvIq14cnkctfsZVQlyM
1P5UZTmNBHzQ/FyZqH2ou2921C8JVFBCBHsHfoC+cP9uQyjQQPw023Su2JzKp4Bz
KWiVvJBsHqjbRw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:54 2026 by rpki-client