Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
File: bDpjxTHO5Bs77YcwDkWeRfueiXg.mft (raw, json)
Hash identifier: qW/eRxRaTie70hyj8TtHQBnvVI98maP/a7wxANUwmZs=
Subject key identifier: 7A:72:1A:67:FB:56:25:02:C6:68:F6:C6:26:D0:EF:E5:04:BF:69:37
Authority key identifier: 6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
Certificate issuer: /CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Certificate serial: 019DCFABDCBD9D55C61E766DBE5A5B5342C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
Manifest number: 17E0
Signing time: Mon 27 Apr 2026 16:00:40 +0000
Manifest this update: Mon 27 Apr 2026 16:00:40 +0000
Manifest next update: Tue 28 Apr 2026 16:00:40 +0000
Files and hashes: 1: 7ekKRg8g8HrfOcB9YF4-OtPsRQs.roa (hash: yMXJseso0YF/5O/OMhuQoK6YA8+AHyLDCsIrCokdoMw=)
2: bDpjxTHO5Bs77YcwDkWeRfueiXg.crl (hash: bUbsHHfYoXA3vpPBaGEHY9lTTXeBJCIYtZ/U0jsLJ+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ab:dc:bd:9d:55:c6:1e:76:6d:be:5a:5b:53:42:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Validity
Not Before: Apr 27 16:00:40 2026 GMT
Not After : Apr 28 16:00:40 2026 GMT
Subject: CN=7a721a67fb562502c668f6c626d0efe504bf6937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:37:b8:27:5e:df:18:67:37:44:ca:7d:2f:15:
4f:1d:76:93:69:74:fa:c2:03:21:ce:5f:78:64:ab:
d9:d2:bf:70:4a:f1:2f:3e:dc:82:b2:b2:80:01:89:
54:39:db:ca:bf:b1:1d:6b:40:78:52:7e:42:94:a7:
9e:cb:04:a9:ca:f1:0c:8d:c7:4c:24:ca:ea:21:19:
87:d9:cb:ff:7b:08:67:e5:6a:a7:a4:78:08:53:3d:
f2:88:06:0d:a2:0f:2e:15:9d:02:91:11:30:c1:5b:
4d:19:0a:54:56:83:28:0a:95:10:1b:f5:d5:93:8a:
70:df:d3:14:b2:a1:a2:4d:5d:b2:a5:5a:98:b5:d7:
e8:b4:c1:ad:39:9b:ea:fb:1e:4d:1c:c2:7d:35:8e:
ac:0d:c8:50:be:0b:be:5e:36:22:d7:67:9c:10:13:
0e:05:9f:e7:cc:36:56:a2:b4:12:5b:a8:3a:88:00:
ee:82:bd:94:19:37:99:89:11:0d:85:f7:dc:36:49:
2e:80:1d:0b:a0:89:d8:71:94:1f:d2:fc:3b:37:59:
76:17:92:f9:ee:50:6e:d1:7f:4f:32:81:d4:d9:d9:
2a:b1:4e:b4:54:30:40:de:b3:65:39:73:3a:16:ed:
95:26:e5:a3:cd:0a:73:51:66:d1:77:88:34:2d:80:
b8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:72:1A:67:FB:56:25:02:C6:68:F6:C6:26:D0:EF:E5:04:BF:69:37
X509v3 Authority Key Identifier:
keyid:6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:18:57:8a:29:dc:ff:51:b0:90:e6:bd:ba:3f:b9:d5:68:e1:
7b:cc:e8:e9:ed:ad:64:3b:19:b6:65:40:ee:0e:e5:c1:a9:ad:
56:2f:c0:94:fa:8a:97:16:2f:9c:ea:10:19:65:9f:f3:16:0a:
d9:5b:37:85:1f:19:bb:f3:24:40:a5:cf:f4:8b:02:ba:dc:27:
60:41:4b:b4:44:2c:b1:6f:07:3e:f6:e3:5f:f3:9d:28:02:58:
05:a3:0f:a9:62:27:e2:54:6f:37:b5:ea:f6:04:d0:27:c8:91:
bc:7b:d3:36:05:bb:cb:46:f7:47:7c:0b:c9:0c:4f:f7:51:0c:
64:78:27:bd:9c:05:e0:3a:4b:7b:40:43:08:b9:11:fc:0b:67:
c7:f6:ff:77:d1:f8:8e:ac:fe:98:11:99:a5:5e:8d:01:0c:8d:
cb:85:b5:ab:d1:3d:fe:76:a1:2d:b2:40:14:4b:7e:6c:5a:54:
be:8c:d4:28:ec:bd:ae:75:c4:2d:3f:4f:99:45:a5:48:b1:29:
b5:35:56:e4:79:fb:93:a3:41:55:f8:a4:56:af:1c:bc:8c:8d:
35:84:04:f2:df:15:97:12:c7:1b:32:79:b1:b5:9b:69:67:58:
1e:e9:3e:57:84:48:3d:c1:1e:99:82:70:b7:1c:dd:a6:d0:f9:
05:12:2d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:48:46 2026 by rpki-client