Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
File: Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json)
Hash identifier: 2SxuYseCEFOC1Vfz5dLX0Pji8RBFif9ofnkKngacSq4=
Subject key identifier: A4:0B:63:EA:7F:DF:15:BC:A1:9E:2F:FD:7B:D4:A1:AE:52:F2:7C:34
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial: 019DB16B49649CC68BF29679612D46413713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
Manifest number: 18D2
Signing time: Tue 21 Apr 2026 19:01:31 +0000
Manifest this update: Tue 21 Apr 2026 19:01:31 +0000
Manifest next update: Wed 22 Apr 2026 19:01:31 +0000
Files and hashes: 1: 8t3JN_7LDw-CGs7GhP5-c9YQT3Q.asa (hash: vle8JAoc+z41qSzbAnkjsok+oNKxAJh14QSzgoReOFc=)
2: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: z7u3H1UkO2B/8xMVcMtB8ds0oQxZd/vYd94OuZ72U7s=)
3: Eutl85DJa5Wvda8Ay8PusU7FvGw.roa (hash: 0UQ/kddOeRvGr5lY/YK4culyM9uyjud6DEWUEwmL8/g=)
4: QHBZT5kThtefU6Yue7jJobqw9JU.roa (hash: pRD253NVKbYirBHDkZVZG3Wa4gP+JVRS3M7a27XwU/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6b:49:64:9c:c6:8b:f2:96:79:61:2d:46:41:37:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Validity
Not Before: Apr 21 19:01:31 2026 GMT
Not After : Apr 22 19:01:31 2026 GMT
Subject: CN=a40b63ea7fdf15bca19e2ffd7bd4a1ae52f27c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:0f:31:57:f7:4e:c2:0d:45:df:d8:4b:ac:
38:05:89:d3:fa:2d:13:eb:5f:99:df:17:49:12:93:
c3:8a:91:8e:94:e4:cd:d9:be:e5:16:dc:e0:85:81:
8b:f7:e6:e7:d7:6b:c9:3a:08:62:10:f1:ac:11:a3:
cb:24:8d:e4:c9:63:b8:9c:5b:ef:17:7a:56:49:4f:
75:4b:24:9e:8d:e2:7a:2d:84:1e:af:c5:22:8a:86:
65:2c:73:9a:3c:4f:d3:48:fe:95:f2:06:fe:33:90:
cc:99:03:84:6e:9d:ba:0f:00:69:94:2e:3b:ca:f4:
37:89:15:fd:34:c3:8e:a7:01:60:67:a0:c7:48:5a:
76:ed:51:96:e9:d4:85:5c:34:97:9b:63:2c:93:c6:
b9:e2:5c:4a:e6:d1:e1:ca:1f:b8:e3:d6:8a:f4:a0:
60:69:e0:59:b6:9d:cd:53:c1:9c:21:af:63:3e:e9:
54:25:8d:1d:4e:ee:ae:d3:cf:c1:41:11:cd:cd:01:
24:8e:35:1f:fd:aa:c8:d1:66:9f:63:7a:8e:8d:fc:
67:37:c3:2d:0e:ac:07:b6:b6:a9:c7:7b:39:59:97:
e1:05:df:05:5c:f5:b6:b2:4f:a6:7e:09:45:87:f1:
18:a2:4f:96:50:85:37:05:74:be:a1:cc:c2:2e:c1:
07:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0B:63:EA:7F:DF:15:BC:A1:9E:2F:FD:7B:D4:A1:AE:52:F2:7C:34
X509v3 Authority Key Identifier:
keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e2:f2:dd:92:6e:9c:aa:87:9c:50:18:58:49:fd:17:42:a7:
c5:d2:c1:dc:b5:42:c9:58:ed:53:d1:bc:04:7f:ed:df:4b:21:
62:42:db:db:2a:50:4f:1a:a8:86:5c:4f:ba:11:e8:4c:24:2c:
3f:5f:e1:e0:82:cf:68:f3:83:21:dd:bc:25:1f:16:73:38:3c:
85:39:8e:e3:8a:63:5f:3a:84:2b:08:21:a4:50:39:ae:75:b7:
17:4b:27:8b:43:f4:85:cf:c8:88:53:fc:f5:f0:15:c8:16:ce:
2c:15:26:0f:e9:b4:f4:63:9e:50:33:73:c8:49:5f:10:37:25:
12:a3:13:db:24:43:da:c2:34:c2:00:56:95:fd:34:2a:c7:8e:
39:e8:31:6b:7c:f0:74:8c:4d:eb:f2:ab:da:d2:51:80:e0:96:
64:20:3d:6e:41:cb:9c:05:49:93:f2:23:6c:1d:a7:d5:d7:97:
a7:b6:24:55:58:28:5e:55:55:3a:62:05:98:2f:fd:dd:85:f4:
8a:20:50:6a:90:76:5f:fc:de:e1:27:60:c3:e8:89:f8:21:57:
ee:92:c0:d2:0b:b1:2b:8b:f6:e1:27:08:7b:69:35:82:b9:09:
14:89:1f:91:f6:24:45:ec:26:da:b8:79:84:0b:9b:bd:d3:28:
63:96:70:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:22:51 2026 by rpki-client