Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
File: bI5k4HENMvJqNtaM_3s_hqyCDOs.mft (raw, json)
Hash identifier: 4rob2coIbz7nqxp+IKBKpp9gOyIlJG64TQJv9niScjg=
Subject key identifier: 16:A7:F1:B3:E3:A5:F2:D1:59:76:E8:CF:D5:D0:6A:1C:60:8D:D7:94
Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
Certificate issuer: /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Certificate serial: 019DD019E2164EB2E4B6B88BEE5B11F67EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
Manifest number: 0354
Signing time: Mon 27 Apr 2026 18:00:50 +0000
Manifest this update: Mon 27 Apr 2026 18:00:50 +0000
Manifest next update: Tue 28 Apr 2026 18:00:50 +0000
Files and hashes: 1: 03NeIplATFDJWFtEuuQG-JYnRlE.roa (hash: 0PUjM3BFPHGxuy7ESUIjpYFstJbdDCjDTMV4Zmhng7M=)
2: bI5k4HENMvJqNtaM_3s_hqyCDOs.crl (hash: yHd6wJtlfAfuXNqSdkNjTpKfONG2+sNiP3W6to0P6hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:e2:16:4e:b2:e4:b6:b8:8b:ee:5b:11:f6:7e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Validity
Not Before: Apr 27 18:00:50 2026 GMT
Not After : Apr 28 18:00:50 2026 GMT
Subject: CN=16a7f1b3e3a5f2d15976e8cfd5d06a1c608dd794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:b4:18:61:f7:ca:63:d8:2d:44:e5:be:90:
c1:a9:d2:d3:f6:81:83:b6:21:74:8e:19:9b:22:aa:
4b:08:25:09:f5:f2:06:9a:8d:87:5b:27:f9:f6:a4:
49:80:96:49:4d:f1:97:5c:a6:a0:8f:0d:df:09:b7:
27:67:a7:77:02:15:09:0e:13:36:18:bc:aa:ac:42:
a6:41:4f:a1:12:b8:a6:b7:4c:1f:02:49:46:35:a2:
a7:24:a4:ec:a7:58:8d:cd:0d:77:21:8b:1a:86:f9:
d8:18:e0:58:74:e4:c5:6b:a1:84:1c:1e:40:3f:4b:
96:37:32:72:6d:26:f2:6d:44:de:7a:3a:3a:21:b0:
d8:a4:87:b5:eb:27:9d:18:b7:73:a5:7f:9a:60:5f:
84:ce:f6:a0:48:5b:56:28:29:32:86:66:d7:4f:c6:
01:fa:16:33:4e:aa:18:85:15:b5:84:11:4e:da:63:
39:d2:33:ae:e7:b9:cb:e0:62:39:a1:dd:92:d0:d0:
1a:88:3e:3b:7c:4d:53:65:cd:df:01:a6:fb:2b:59:
09:b6:95:11:f9:e4:21:a1:8d:74:ac:8a:5b:28:43:
86:d0:5b:a5:4f:29:0a:03:35:5d:5e:6b:0c:75:1a:
27:74:3a:16:da:00:ec:af:1e:52:16:85:d0:55:a0:
a4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A7:F1:B3:E3:A5:F2:D1:59:76:E8:CF:D5:D0:6A:1C:60:8D:D7:94
X509v3 Authority Key Identifier:
keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5a:a3:c7:a4:59:c0:cc:dc:3a:7c:e1:2b:f5:4d:ae:43:40:
49:ea:cb:13:07:af:71:02:e7:a9:15:ec:1f:42:21:be:e9:ab:
7c:a0:db:44:d4:b1:af:d1:0c:08:7b:0f:de:81:3c:26:89:bf:
9c:dd:f0:67:bb:e8:8d:0b:53:e4:14:a2:93:83:d6:01:d3:8e:
6d:94:41:b7:d9:85:e4:90:31:43:1d:d7:50:af:f8:f5:c4:79:
ef:1d:fa:86:b2:8c:cd:0d:01:75:ed:84:73:fd:c2:81:06:8c:
5d:47:38:df:8c:07:ac:b0:df:20:d6:ae:1d:eb:24:a7:78:7f:
47:ba:22:d9:0d:0d:eb:22:13:17:33:b1:e0:14:6d:33:16:ec:
70:27:41:28:e5:16:ad:7c:b3:82:1a:72:d8:65:2b:76:42:d7:
17:b9:42:fd:1c:e7:e8:c4:5c:70:3d:ed:59:1f:ad:c9:0f:ba:
7d:a9:7b:f5:a6:e8:90:53:7a:56:89:e7:81:b4:6f:5f:45:f6:
6c:93:90:71:02:b3:50:5e:b0:c0:4d:ab:5f:be:11:b4:ac:2d:
97:4f:81:d1:56:df:ad:0c:f1:7f:62:ec:01:fa:2a:c7:0f:e4:
92:a0:62:11:15:15:84:ec:d7:c7:01:98:6d:ae:b8:a2:9c:4e:
5a:9c:b0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:36:32 2026 by rpki-client