
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
File: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft (raw, json)
Hash identifier: ITrRztnd/m6G0cN1MwV594WiVeCuSZhNqvKnj3e7DVc=
Subject key identifier: 4B:84:25:C1:81:71:60:4B:64:E5:BB:FA:FB:17:56:F2:D0:36:59:62
Authority key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
Certificate issuer: /CN=047ee74ac490e31f1d40764f092411ee25eb1665
Certificate serial: 019D9BBE231FB0DD07E38291C277B4717F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 14:00:22 +0000
Manifest this update: Fri 17 Apr 2026 14:00:22 +0000
Manifest next update: Sat 18 Apr 2026 14:00:22 +0000
Files and hashes: 1: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl (hash: oIcI6XMOVRBignLhqCFS0sTWCdVz81C0HsVWKXBgDK4=)
2: tdO4wEk8YpGTzq5kd9vPeqnDeDo.roa (hash: cB5CSJkT3O+9UBmuTizqC0w9ZxVIs1IRBERe6k5DKkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:23:1f:b0:dd:07:e3:82:91:c2:77:b4:71:7f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=047ee74ac490e31f1d40764f092411ee25eb1665
Validity
Not Before: Apr 17 14:00:22 2026 GMT
Not After : Apr 18 14:00:22 2026 GMT
Subject: CN=4b8425c18171604b64e5bbfafb1756f2d0365962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fc:e8:2a:06:a2:a2:fd:64:ba:a6:02:e1:cd:
44:49:5c:4d:36:6d:cb:56:65:37:a4:2b:52:a7:70:
1f:7e:e7:0e:84:89:e0:20:f5:db:b4:7a:47:21:88:
39:4c:a8:2a:31:75:40:f2:b6:03:f6:4d:a0:1c:d8:
d1:da:f1:9a:d9:7a:b4:f3:a8:07:5d:07:19:21:ed:
f1:e5:86:6e:9e:e3:18:b7:a9:26:97:e1:1a:e5:4b:
54:21:fa:9a:bc:6e:ec:5a:d1:7d:a6:9b:69:4e:e1:
d2:f7:6b:9e:cb:5f:6d:47:07:f3:6d:4e:d8:af:6b:
40:f7:88:96:54:67:ff:89:72:7e:42:96:6c:47:2d:
0f:ab:36:c4:b2:15:8b:de:2f:be:80:ab:0b:47:1b:
bd:b4:38:52:58:2e:b0:9f:96:43:ac:63:bf:2e:04:
6a:83:cd:8b:c2:a5:c4:58:57:56:1f:84:58:35:03:
b3:0c:08:df:f4:0c:46:16:81:39:84:64:a1:5c:a5:
70:6f:d5:d1:61:ff:24:b4:88:62:4c:37:dd:dc:4d:
4b:0d:7d:20:8e:26:cd:47:a7:ad:8b:fc:95:b6:1b:
b2:e5:4c:f0:f4:17:16:19:56:de:2c:a7:45:bd:01:
ab:21:27:35:3c:e8:e5:dd:23:d7:7e:83:48:2a:5b:
d2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:84:25:C1:81:71:60:4B:64:E5:BB:FA:FB:17:56:F2:D0:36:59:62
X509v3 Authority Key Identifier:
keyid:04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d5:71:c7:a6:33:b2:d3:60:f6:2f:d7:7e:15:66:3c:29:5a:
4d:4a:e3:69:87:44:b0:e9:55:74:83:6c:ea:61:25:0d:93:92:
d0:08:20:6b:d6:64:7d:77:f0:95:10:66:7f:d9:e7:19:e3:0c:
27:89:51:82:77:50:3e:d9:dc:84:79:71:47:39:76:69:20:ab:
4f:f6:d6:34:7d:92:63:60:32:a1:cd:01:0b:39:9f:c2:53:17:
c3:0e:5a:5b:59:46:1e:7d:30:a1:29:cc:33:39:7e:b8:3b:11:
7e:9e:a5:4b:88:25:92:b2:7c:34:d8:02:39:99:5b:12:98:af:
94:96:80:4d:5a:4e:d8:a5:ef:d1:d9:50:ef:06:6b:11:06:5e:
b3:3d:07:b0:06:44:30:fa:d6:4b:f9:61:f6:55:32:e6:0f:d5:
1a:52:87:bc:60:54:fe:5a:8c:1a:7f:eb:46:0e:18:c8:ae:ac:
85:af:60:ef:6e:18:5f:25:2c:ca:3b:d3:ea:ed:95:a3:81:81:
14:ad:66:b4:47:10:8a:2f:4e:a1:63:8a:85:96:33:81:6d:a2:
ea:17:0b:e1:db:2d:52:ca:27:79:03:36:71:54:c0:90:9d:af:
84:e6:04:77:2f:47:88:90:0e:ff:d8:16:af:c6:cf:6e:2f:65:
a3:df:93:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:46:24 2026 by rpki-client