Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
File: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json)
Hash identifier: xYrhH5jrQx4weeDcAe+MWeDEVE6EIyQVmfAE89w2udM=
Subject key identifier: 9A:5C:61:AD:1B:7C:77:D7:6D:AD:D3:08:AD:F4:CC:3C:F0:3A:BC:84
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 019DC038D7A2CB9E0BE94C5E6BA84A0CC76D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
Manifest number: 18EC
Signing time: Fri 24 Apr 2026 16:00:43 +0000
Manifest this update: Fri 24 Apr 2026 16:00:43 +0000
Manifest next update: Sat 25 Apr 2026 16:00:43 +0000
Files and hashes: 1: 1-sLM79fhgln3kKtmAVDWOo1kwmw.roa (hash: EUHr6hsfI8WuHLl/CT9f9Qt7naBdoIdHB1PmYGEqxpI=)
2: 2GyceDm_XAmgavG6-5vW6sV6cj8.roa (hash: kTGmpubLRdREIFhz3PYfU7sXxSrDuw6tha9TW2osTVI=)
3: R-Ms9tnwVFr5zGPdMpveWYmvzTU.roa (hash: 4hVn6BmRDmF60zXMMdHkc2jChJsAngJEvYhtXGC9Vjo=)
4: ZK9ALarqOpzm0i2rpLZ-rHOMzdo.roa (hash: RllCIZ6AldL0IOvShUd1+ZNf+viS99vPh52YLrvbtJU=)
5: ZmcfgQVw9WznPpWT9yLghomma18.roa (hash: dwEz5IwUCOta4WNqfA1M1PPK2wh9BaQxA/M28+Mkwpk=)
6: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: EY8yIVIE+gtVzKM1Wm8tZDfZKkXa823tbBD3xotwAl0=)
7: ks2_IkZaAakd1-3jQOWLy85dDy8.roa (hash: mLEy/InkNukmfeS2zm1mvXpvR+u6dmdc0Mw1w4KWFN4=)
8: vcHdvq4j0MZDMpwY_Sh1_lhpemE.roa (hash: TJZuXEOOt0r/V9EaRl+qnNfFa6UZgYtOnc2ci1AuANA=)
9: yO-faN1p6CDhjtBsMnJFSamd0b4.roa (hash: f5cjUT10BBqhpOr6X0AO88BjDl80sXjlHTe7MTa/7YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c0:38:d7:a2:cb:9e:0b:e9:4c:5e:6b:a8:4a:0c:c7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Apr 24 16:00:43 2026 GMT
Not After : Apr 25 16:00:43 2026 GMT
Subject: CN=9a5c61ad1b7c77d76dadd308adf4cc3cf03abc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:de:ad:99:ec:a0:13:f1:1e:b4:23:47:17:b5:
fd:e1:26:7f:ed:38:a3:9a:43:49:ba:44:2e:4c:df:
6f:98:1a:44:0f:92:b9:98:af:ff:79:6d:11:3a:b6:
b5:e7:75:42:d0:e8:ff:a6:9b:fd:52:03:b6:42:73:
cb:80:4d:cf:73:ab:7e:69:b2:8d:33:e8:e1:42:cb:
79:49:3f:02:bb:60:7b:4b:3c:b3:5b:9b:a5:00:13:
0a:a4:15:dc:e6:36:7b:8f:8b:a0:04:1a:a4:d2:5b:
62:0a:16:8f:a4:4c:9c:82:41:c9:3f:4f:b8:1f:17:
ba:ec:36:d1:16:57:37:78:e0:8a:62:3f:63:51:35:
fc:bc:09:e1:10:32:e0:3b:09:b7:0b:d3:46:7e:58:
da:49:6c:0f:d3:89:7f:5c:da:6f:5b:61:fa:71:a3:
7a:74:79:0c:57:f8:7d:8f:bb:9c:63:a6:65:55:1d:
37:f3:80:f5:00:5a:94:56:32:a4:9e:db:4f:70:31:
1b:75:26:41:12:fa:9e:6b:c7:2c:37:dd:c0:ab:3f:
63:a6:51:fd:00:00:b9:94:b2:3d:8e:a6:fd:45:0c:
46:f1:42:a1:cb:a9:84:69:cb:a6:fe:a5:06:71:cf:
de:19:04:18:31:f3:40:41:9a:ed:c0:45:1f:46:be:
27:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5C:61:AD:1B:7C:77:D7:6D:AD:D3:08:AD:F4:CC:3C:F0:3A:BC:84
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6f:e5:39:42:8b:70:8f:59:94:c5:fc:7b:ea:9b:73:11:a3:
aa:f8:18:b3:70:43:79:8c:85:21:6a:8a:41:2f:a8:3e:91:df:
dd:04:83:70:9a:46:4a:d0:74:df:4d:9a:b1:89:8b:b4:e7:0b:
2d:de:c8:5c:00:7d:08:14:57:a2:6c:2b:8b:11:54:58:21:49:
a2:d9:58:37:15:4a:d4:43:7b:24:8e:5e:17:96:c7:44:57:88:
9c:58:ca:4e:81:9b:af:2e:6e:a2:a3:d2:39:c9:cf:fe:5c:2e:
3b:58:28:fe:9c:16:ee:0a:d1:e2:ef:32:76:b1:7d:0b:53:d9:
f5:5e:53:f2:27:44:ad:b8:77:6e:b6:69:ad:ad:44:b1:19:7b:
da:f2:ba:83:00:11:36:3a:a5:f5:2a:9a:73:69:4b:79:c0:bf:
7f:4f:e8:0b:b1:02:6c:72:03:85:f5:df:73:53:7a:a9:33:d4:
d5:ac:b7:14:b1:9b:d7:1d:8c:9e:a2:2b:51:f6:07:b6:70:94:
a7:ca:03:2f:6d:3d:e6:79:0c:29:f2:ae:68:e7:11:dd:1a:23:
86:e3:c4:d2:33:7e:33:de:21:82:96:28:a2:67:6e:af:f9:04:
2d:cb:d2:60:18:da:0d:6b:b5:62:64:4d:76:3f:c1:74:fd:aa:
f1:75:23:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 20:21:05 2026 by rpki-client