Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
File: bpTN6pNlYSrfdhEURmglSziPphI.mft (raw, json)
Hash identifier: xvXLFdx7VImP4PkZjdznijYzou7ZPOKTbC78y8IPKjU=
Subject key identifier: A6:3C:0E:E0:B3:7D:39:A4:8D:69:B9:29:5A:57:6B:D1:CC:EF:4D:AD
Authority key identifier: 6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
Certificate issuer: /CN=6e94cdea9365612adf7611144668254b388fa612
Certificate serial: 019DF1CB71A7866CF34F78F3C9DA0FAB50D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
Manifest number: 187E
Signing time: Mon 04 May 2026 07:02:15 +0000
Manifest this update: Mon 04 May 2026 07:02:15 +0000
Manifest next update: Tue 05 May 2026 07:02:15 +0000
Files and hashes: 1: bXq5SBFXa74fH9hWZJ4SPjJEUDY.roa (hash: wECDbeffP8fSkj2EE1uRvP/uOND4sX/q6tlGIHgdMtk=)
2: bpTN6pNlYSrfdhEURmglSziPphI.crl (hash: cCQbb7FhH1VFHlKHwq6YJnqqopHRiEUAJmy3y6dHAzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 May 2026 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f1:cb:71:a7:86:6c:f3:4f:78:f3:c9:da:0f:ab:50:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e94cdea9365612adf7611144668254b388fa612
Validity
Not Before: May 4 07:02:15 2026 GMT
Not After : May 5 07:02:15 2026 GMT
Subject: CN=a63c0ee0b37d39a48d69b9295a576bd1ccef4dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:de:0d:00:8d:e4:85:f6:96:75:0b:8c:00:63:
06:99:91:5c:96:62:f0:d3:a2:54:5d:29:80:14:81:
26:05:97:b3:0a:1d:fe:37:40:9d:a5:3b:35:98:10:
cb:12:2d:4b:fd:86:c5:9f:7c:60:70:ea:54:c2:5e:
6b:ff:a0:07:71:20:7f:23:c6:ca:b2:64:f9:ff:b0:
e0:a7:9a:c6:a0:00:92:33:31:0e:5b:1d:9c:d5:65:
c1:95:c8:24:a8:ae:28:63:6e:50:61:bf:e9:9f:42:
94:fc:97:57:ca:56:8c:ad:fa:b5:06:14:5c:ab:48:
61:a4:6c:ab:ae:d2:e5:7f:8b:81:d4:83:54:60:99:
4e:11:71:a1:bb:cb:ba:66:ac:e8:d7:7f:20:1f:4e:
86:81:ed:f8:3a:67:95:8c:6d:9f:41:4c:0f:76:22:
55:15:22:87:9c:71:17:d3:34:df:8b:f1:0c:67:16:
c7:8b:72:01:4c:01:bb:3e:19:36:7d:84:ec:d6:81:
76:99:f9:6d:ba:61:66:4b:90:81:83:2d:8a:ef:da:
5c:f6:08:de:3f:7b:e8:23:5a:c4:c7:c0:e2:80:16:
0c:7e:21:5c:18:10:c3:e9:49:e2:fe:7a:28:ee:47:
5b:07:ed:e3:40:d5:70:81:a8:72:cb:dd:9d:c3:17:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3C:0E:E0:B3:7D:39:A4:8D:69:B9:29:5A:57:6B:D1:CC:EF:4D:AD
X509v3 Authority Key Identifier:
keyid:6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ac:ed:5c:9f:af:d4:84:a5:40:f3:9f:51:11:a4:19:3e:8b:
67:af:53:2f:0a:b6:eb:7a:47:7e:0c:71:28:13:fa:85:1b:13:
6e:63:f8:ee:54:87:78:22:5f:f5:fe:60:39:b5:98:07:c0:3c:
4c:98:95:b6:34:30:24:c0:f6:6f:13:e0:91:41:cc:b9:b8:cd:
7e:71:8b:e5:e5:f6:da:72:e2:95:c2:e0:c6:b0:60:4d:bc:19:
77:54:2a:ab:55:b9:cf:d8:2c:30:f5:37:59:a4:de:ac:f3:cc:
77:ba:be:b1:62:ef:dd:8d:49:6f:58:71:0d:cd:63:aa:a5:05:
64:3a:2a:9a:23:c1:47:ac:51:08:63:69:69:52:00:80:5b:6d:
9b:a9:cc:de:7f:28:7c:2c:8a:e0:a0:00:7f:44:a4:35:6b:6f:
de:3c:86:ff:8b:18:5b:6c:3b:98:9e:c3:d5:ae:ae:f5:e0:e3:
ac:5e:f3:75:cb:8c:a3:48:1a:f3:10:85:71:4c:b6:47:06:c0:
82:29:b1:5b:d1:e4:ef:59:32:f6:e9:2a:c1:a1:3c:8f:3e:9b:
80:38:6f:81:8d:41:87:6c:68:e9:1a:c3:75:0d:0c:b9:f9:26:
ac:08:d4:21:62:ad:a7:98:01:d6:3d:9a:ce:14:8c:f3:eb:8f:
e4:ea:c1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 13:19:44 2026 by rpki-client