Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
File: bc0iYSmgbEho-hD-gtImFrsvZps.mft (raw, json)
Hash identifier: QeKJlI28m+zubvj/wH4/gQoHMXqtcBPyV8q3s+d+TY4=
Subject key identifier: E0:15:0C:67:D3:91:C8:CD:6C:C2:52:C5:42:7E:68:92:E0:69:EA:4F
Authority key identifier: 6D:CD:22:61:29:A0:6C:48:68:FA:10:FE:82:D2:26:16:BB:2F:66:9B
Certificate issuer: /CN=6dcd226129a06c4868fa10fe82d22616bb2f669b
Certificate serial: 019DB0C60025C26F5EDDF28E82AEC572694C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
Manifest number: 99
Signing time: Tue 21 Apr 2026 16:00:59 +0000
Manifest this update: Tue 21 Apr 2026 16:00:59 +0000
Manifest next update: Wed 22 Apr 2026 16:00:59 +0000
Files and hashes: 1: 4GwizHDiJW34eVbsS1zqAhW5bAA.asa (hash: tIiey6tQSs3tmmWNU2xS6Ra9dn48lRK3oxZupZMUgQ8=)
2: bc0iYSmgbEho-hD-gtImFrsvZps.crl (hash: f3eCAtXs1bjvyjaY/xE9sTAQZEycjb8PSmhaDE9hkz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:c6:00:25:c2:6f:5e:dd:f2:8e:82:ae:c5:72:69:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dcd226129a06c4868fa10fe82d22616bb2f669b
Validity
Not Before: Apr 21 16:00:59 2026 GMT
Not After : Apr 22 16:00:59 2026 GMT
Subject: CN=e0150c67d391c8cd6cc252c5427e6892e069ea4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:51:6c:f3:c0:7f:c9:1e:15:ef:bc:0d:06:61:
c0:f3:6a:98:93:93:94:c8:c7:8d:20:60:94:59:53:
88:53:8a:17:44:57:08:5b:96:a3:1b:1b:7f:68:ec:
be:8f:ae:a0:09:f3:68:e7:73:10:de:1d:32:7c:28:
bd:8a:24:8a:1c:aa:37:8c:60:13:6b:27:22:f9:25:
9f:20:11:78:a2:b8:cb:cf:5c:01:85:35:2e:57:3c:
bf:80:26:29:01:9c:43:6e:c9:47:2b:92:59:90:6c:
2d:07:56:fa:9a:f7:f8:40:d5:d9:3d:fb:e2:92:b6:
81:f5:0c:6d:d6:1b:6f:49:ab:87:c7:7d:e8:7f:17:
30:1a:32:01:dd:06:73:f0:b1:0c:02:6e:d6:cb:ce:
a9:98:b5:bf:85:77:73:87:07:50:18:83:dd:03:d0:
96:a0:40:66:29:dc:09:60:16:8a:98:c8:8a:cc:78:
44:38:d8:7c:29:04:4b:c3:db:a1:a8:1d:59:0d:03:
a3:d7:a5:e5:4e:e7:b3:e3:d6:d0:10:f8:e0:43:fe:
4d:e1:5e:72:5d:e9:0f:be:e6:fa:fb:3a:90:67:77:
c5:81:a2:fc:41:de:ab:5a:e9:34:94:a1:2a:10:6e:
ee:0c:d2:4d:70:46:42:2a:c6:f0:fb:c9:10:9a:44:
b1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:15:0C:67:D3:91:C8:CD:6C:C2:52:C5:42:7E:68:92:E0:69:EA:4F
X509v3 Authority Key Identifier:
keyid:6D:CD:22:61:29:A0:6C:48:68:FA:10:FE:82:D2:26:16:BB:2F:66:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:97:f8:7e:09:41:40:fe:12:ca:b5:ab:fb:7a:13:e0:cd:0c:
4c:e0:e0:01:ad:ba:68:4d:30:65:c2:b6:14:96:c2:e6:e7:46:
4d:9d:a0:1c:75:16:b7:f4:14:25:9d:84:e6:6b:09:b8:92:32:
88:04:f2:e0:90:49:65:9a:fc:5b:1a:94:08:29:89:08:a1:7d:
2f:48:13:9b:2c:6a:7d:7c:02:00:19:da:cf:b8:b6:83:1e:68:
ef:5c:f3:ef:8d:56:72:0a:26:85:23:78:f9:c2:3b:d5:8a:f1:
e5:63:2e:bd:ce:bb:42:d9:7d:61:64:58:9d:25:d4:1e:c3:c2:
a8:25:fc:58:3f:97:7f:1b:da:ea:fa:96:69:91:fc:8a:54:b5:
5a:54:8d:b6:7e:97:60:83:2e:f7:c1:99:ba:bf:2b:15:c6:37:
19:3e:b5:3b:01:f9:16:ba:8c:b3:3b:46:71:c6:17:e5:fb:6c:
6a:60:96:a8:b5:dc:aa:99:3b:aa:a2:e7:1b:4d:06:65:4a:fc:
93:d2:0c:4a:d2:41:c8:61:c7:46:b2:9c:f8:42:f2:63:29:26:
6b:cb:7b:ce:86:b6:20:a0:b9:b8:b9:f1:e3:14:06:fd:44:73:
9d:49:78:4b:af:6a:1c:8e:f4:dc:ae:6b:e0:6c:a5:42:96:5d:
0f:ad:25:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:51:18 2026 by rpki-client