Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
File: bDLcnlJJ-0HEffSRQSGpsaau8f8.mft (raw, json)
Hash identifier: qlUmhH2AhpwrhYAQqeRjp6I/+jhQprvH25RADEVMx/g=
Subject key identifier: 61:56:BD:04:06:57:0F:C8:75:72:06:D0:53:0D:D4:D4:BB:A7:06:4B
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial: 019DDE0C873D92951CB64936AFBD3F396417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
Manifest number: 16A3
Signing time: Thu 30 Apr 2026 11:00:56 +0000
Manifest this update: Thu 30 Apr 2026 11:00:56 +0000
Manifest next update: Fri 01 May 2026 11:00:56 +0000
Files and hashes: 1: 1-YrYrU78JVrBQu4b-JvMNXte1Y8.roa (hash: T19rFV+NYifOvJLKtfb/jn8yzfjpP/9o/emwcX4dW0M=)
2: 2X2qjtlvWrh-i63OX0duW0X7RUQ.roa (hash: fEDF/KXuTjDM56u/FoBt/YnMpIHjrDBH/KrLWrRIe+4=)
3: CgnPVoz_nSq_2jl8rVPXhU6NRRQ.roa (hash: ReEo9rp4x3coc8Tyv/m0USlR6KR0jZ84qGX2CKHn4jw=)
4: WwPaGaQpisjEnRGrMLRHcOFL-Fs.roa (hash: 5IoEhSgKYc9VUWIcxC0NxkfJGhGKKPJuUdqSQvnAiQA=)
5: bDLcnlJJ-0HEffSRQSGpsaau8f8.crl (hash: pP9F67jALejGE5psCnIlZ7PY20iRw6oxDJ9D1M3idc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:0c:87:3d:92:95:1c:b6:49:36:af:bd:3f:39:64:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Validity
Not Before: Apr 30 11:00:56 2026 GMT
Not After : May 1 11:00:56 2026 GMT
Subject: CN=6156bd0406570fc8757206d0530dd4d4bba7064b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:86:42:55:c0:8f:36:ba:b1:48:26:b4:98:
0d:4e:55:24:ae:dc:51:9d:22:33:25:db:af:22:8c:
72:f0:b0:14:31:4f:5b:6a:6e:ee:10:28:79:dc:ee:
a9:96:7a:b5:5c:c0:e6:85:35:4c:f0:7e:b5:ca:52:
cc:95:42:b7:da:ab:70:c0:0b:55:19:7a:80:61:cb:
22:02:39:06:f8:d8:d3:42:ac:03:2e:38:53:1a:99:
82:2d:f8:57:7d:fe:31:f5:7a:ba:90:9e:4b:98:d5:
f2:ff:c5:73:3c:4d:49:35:c8:2b:10:c7:8d:d3:ae:
6e:c3:cf:00:6f:46:5c:22:ba:fd:aa:01:7b:5f:98:
23:13:cf:95:5d:20:d7:fe:ea:2b:c4:3e:23:c0:f0:
7a:bb:1d:7a:55:6a:c5:fa:66:bf:2a:2c:ab:92:50:
46:1d:aa:de:a5:1a:98:66:48:8c:46:56:2a:3d:89:
df:29:aa:88:21:22:6e:b1:f8:3a:32:db:2f:3c:d3:
7f:9e:1c:58:0a:7a:4e:61:1c:6d:64:b6:7c:71:05:
e4:cf:4b:a5:bf:bd:73:ef:93:2f:30:ea:45:7f:a2:
4d:02:e1:d1:72:00:43:a4:38:85:68:0d:aa:0d:27:
2a:d9:1c:3a:61:7d:e5:b8:c5:9a:ed:2d:80:f7:92:
7c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:56:BD:04:06:57:0F:C8:75:72:06:D0:53:0D:D4:D4:BB:A7:06:4B
X509v3 Authority Key Identifier:
keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a0:e3:1a:98:ff:83:c9:df:d3:e1:26:bc:20:d5:ce:0f:76:
ea:cb:39:35:01:7b:6c:89:12:bf:46:d3:71:d0:68:5c:27:78:
4a:e3:20:b4:f4:c4:ae:d4:4c:c5:59:7d:3d:52:0c:25:7b:d0:
0c:a2:81:1f:3f:67:dd:f7:72:ec:66:1e:03:95:06:cd:a6:df:
f3:25:09:fb:41:47:32:9a:97:34:a0:a7:f0:a6:76:68:91:af:
c5:d6:e6:06:8a:12:c5:5f:62:b0:a2:bc:03:40:0c:00:38:8c:
06:95:3f:cf:ce:fa:97:c8:e0:93:b5:ce:86:3f:bf:b9:00:db:
17:da:69:72:fd:6f:4e:1f:d0:18:3a:58:0f:8e:09:54:4e:1d:
87:c3:fc:d5:5b:ec:87:0d:d0:cd:bf:c7:de:5a:41:28:b4:11:
82:63:8f:dd:3e:2d:19:1c:ce:a8:b6:e0:c2:1c:0d:b6:20:1e:
7d:c9:9d:b4:64:ea:4b:25:e9:ed:0e:23:59:d1:fa:c3:6d:f7:
2b:89:4f:c1:85:78:c8:3f:65:a3:38:ff:53:99:7b:5e:4a:1b:
b9:6b:3c:27:f6:07:c1:f0:89:2b:47:08:50:5a:f2:91:c7:f8:
69:9a:4e:92:ad:87:96:7b:c1:cc:b8:da:1f:95:5c:37:ed:4f:
c1:30:0a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:29:24 2026 by rpki-client