Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
File: BdTUnaPhSFWnuINgP_FIwbsh9pA.mft (raw, json)
Hash identifier: XpnfVtFrBt3uf2FmmXtXaeZOwMbLxnnsyWYv9sxLTwI=
Subject key identifier: 55:97:A8:0C:A7:9A:13:D7:A1:2A:4C:7F:2E:FF:CA:2A:75:6B:8D:5E
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 019DCDBDD65FA25542F8EF6E45E2AB8CE238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
Manifest number: 03DC
Signing time: Mon 27 Apr 2026 07:01:03 +0000
Manifest this update: Mon 27 Apr 2026 07:01:03 +0000
Manifest next update: Tue 28 Apr 2026 07:01:03 +0000
Files and hashes: 1: 0ZYnGlB1sX-tIT-_McEHbMjcHh8.roa (hash: 2qWVIKYHaVj8bsZAAH+azzAq9wcQ/nQgKKzUX3Hr+1A=)
2: 4F9KCelkBdaW6adR2HbwfE6Qa50.roa (hash: 28y0uJhPlCZ576LDD9F3Bdf7MivZvFfgd38Ys6VSm5M=)
3: Af11MVP6VhwPCZW4GvxhTV3l2Qw.roa (hash: 0zTqrzFvszKEBTsjbfLGhc0G5gFEU942DbGfKhHwTtQ=)
4: BdTUnaPhSFWnuINgP_FIwbsh9pA.crl (hash: gdE00fRXNyLQwodXZ8Xl7g3p6q0VPxFsClzk0Jh3G34=)
5: HgKDk1kuAHkL3yy_TXl0qxP-7Ps.roa (hash: EYBlGLzCjhMCJqevk0Sz3CYuuG7NvC8a6JulLnYLrvQ=)
6: RB6c02Y05ndL1tBmed3K3PYqOb8.roa (hash: HA3QTmLMd6DYrv7h2tvYadjPLlyjtL356EnCTt0Ef14=)
7: b9tPgBNgYh6iOkrY-UQLj_LcNYI.roa (hash: XWqLKaSvCAdhll8JN//U7vrVfAkkRKjwGPOfF08R7Io=)
8: g2dtR6UU6YbyOvJ87zvLD53mIJA.roa (hash: OjJY/mSN+MIiT4fZ4kWjc3+KYFQldFou7Yv+HnbjSaQ=)
9: h6YKC3XtERD2VCMyNiRftB7wCuk.roa (hash: MN0yYx9HV02KqbAFLm8yDd6oSKi7xPvjzFqT6fvBP6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:d6:5f:a2:55:42:f8:ef:6e:45:e2:ab:8c:e2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Apr 27 07:01:03 2026 GMT
Not After : Apr 28 07:01:03 2026 GMT
Subject: CN=5597a80ca79a13d7a12a4c7f2effca2a756b8d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1d:d0:eb:a4:cf:8a:0c:12:ef:3a:9c:6d:70:
95:60:d4:fc:cb:71:85:16:13:23:7e:e1:0a:c7:66:
ed:5d:17:0b:d7:0d:0a:c6:ba:f1:96:ae:72:77:1d:
53:c8:9a:0c:f3:ac:5b:93:f6:61:83:f0:14:4a:00:
40:66:5b:45:ae:3c:30:c4:e1:3c:93:72:f0:68:cb:
f1:5b:f8:a5:cc:ac:24:77:84:d4:75:ff:be:dd:55:
2f:37:fe:a4:28:58:16:7e:f2:1c:c7:4e:e5:79:c4:
f1:94:dc:96:65:b5:61:a8:6d:72:9f:fa:b9:ad:60:
41:51:82:e9:ce:d1:da:24:96:04:42:9d:26:bc:b4:
79:09:11:a7:4f:ed:56:4b:24:c8:ca:f5:92:f3:93:
44:87:8b:a7:a6:21:f9:45:7b:06:c7:d1:8e:ae:b5:
6d:1a:fa:5e:96:3d:c4:b7:6f:ad:d8:ee:a3:ac:3d:
0a:c6:a7:6e:e2:b6:a8:c9:15:f3:31:a8:22:0e:5c:
81:89:19:b3:6d:46:5d:c7:bd:2b:96:7a:a4:07:e5:
22:af:c0:70:aa:90:1a:8c:bb:25:9f:6a:c0:b6:76:
4c:b8:3f:f0:4b:85:ee:50:59:b7:7d:ef:04:9d:50:
07:11:c4:af:85:59:28:c3:7b:9f:89:b4:d9:ce:e2:
b0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:97:A8:0C:A7:9A:13:D7:A1:2A:4C:7F:2E:FF:CA:2A:75:6B:8D:5E
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f7:8f:88:90:2f:89:00:ee:b3:45:9f:b5:08:f5:b3:12:ff:
8e:11:fb:07:29:71:d9:f1:6b:73:9e:ea:c2:6d:e7:28:77:14:
7a:15:64:ca:1f:78:b6:f1:fb:cd:0a:ab:36:34:aa:7f:61:49:
38:f7:cd:de:89:78:12:f5:0c:70:2f:5b:52:d2:a5:c5:2e:77:
01:9d:04:ca:38:42:3b:39:de:e4:5f:bf:d5:55:9e:21:b3:b9:
6b:68:fd:f0:9d:01:8e:65:8f:7c:88:27:37:52:46:75:af:f1:
9e:9e:23:4d:9a:3b:67:a3:c0:e8:b2:92:e4:86:d9:6d:ca:cb:
8a:fc:fc:56:ec:20:6c:b9:5a:0e:2b:8b:fd:13:7f:ee:2f:0e:
34:16:93:7d:35:50:56:4b:03:4c:37:b3:ea:1d:ae:0f:29:f0:
e1:3b:47:2a:60:f4:fa:94:45:2b:f7:ab:a1:ee:c5:8d:41:c9:
16:4f:15:eb:df:ad:d0:1d:3e:25:fa:51:d4:3e:5c:39:b1:bd:
24:c8:de:b8:7f:42:5b:dd:34:05:55:3a:a6:16:02:16:7f:bf:
03:9a:60:51:1f:b6:22:fe:1c:86:4f:01:58:f8:56:ef:66:2a:
8a:b0:54:11:2e:da:de:e3:1d:b3:cc:b6:5f:4c:ac:6b:d4:52:
66:e1:4d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:06:10 2026 by rpki-client