Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
File: bkIT73VQqt75F5PcnRS-h0ceTBI.mft (raw, json)
Hash identifier: PP6n4Qz+yT9yvc1xF1DyKmXmc4dvK9E+YVMhB0b2ctM=
Subject key identifier: 06:85:95:38:FD:AB:01:B3:5A:07:65:6B:9B:ED:2D:50:2E:4E:38:C0
Authority key identifier: 6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
Certificate issuer: /CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Certificate serial: 019F8F7E7C8D35BD20E80BDD564C10EAD247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
Manifest number: 01C9
Signing time: Thu 23 Jul 2026 15:00:59 +0000
Manifest this update: Thu 23 Jul 2026 15:00:59 +0000
Manifest next update: Fri 24 Jul 2026 15:00:59 +0000
Files and hashes: 1: Aw9tXveR8BkFdyjJFk7_AmnfBwY.roa (hash: qR8wHawnouYoCzeQOakk7xfrAyq4fC7VhBjSSJYeEBQ=)
2: bkIT73VQqt75F5PcnRS-h0ceTBI.crl (hash: 0N/XI4L6d4riCyl8wVMJ/IXdoYl6D27wTwFEulG/PlU=)
3: t-pysyXW9DMYW3dIdVXL1kuI-lk.asa (hash: PkLiAsSP6O1ZogB6nCzsRUHVv6ZGFXVfkqaqouAY69U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:7c:8d:35:bd:20:e8:0b:dd:56:4c:10:ea:d2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Validity
Not Before: Jul 23 15:00:59 2026 GMT
Not After : Jul 24 15:00:59 2026 GMT
Subject: CN=06859538fdab01b35a07656b9bed2d502e4e38c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:dd:d4:6e:f6:af:ab:c9:b7:bc:37:f5:3a:
ac:2c:fa:d6:fc:97:d2:0a:e4:ff:c9:9a:3f:01:0f:
51:20:eb:f8:67:da:2a:46:40:73:32:ad:56:87:fb:
3c:2a:02:76:a5:d3:31:94:ca:82:d8:76:4a:6d:0a:
3d:4c:78:d4:72:19:39:c6:0c:f0:4e:f8:57:7f:ad:
59:b9:89:e8:c9:d4:60:78:c4:39:69:df:3a:8e:27:
30:47:fa:1d:a8:8a:e6:f7:96:48:3e:80:57:ed:b4:
fa:40:2a:78:38:e7:df:4f:b2:54:b3:47:4a:ae:58:
13:19:28:25:e8:c1:28:25:a4:30:10:0a:8a:e0:d6:
85:51:76:52:5b:2a:a4:af:6b:77:2a:a9:b2:98:8e:
96:b4:ce:5d:c1:95:b7:74:5c:41:87:d3:3a:c1:60:
59:8c:30:21:a4:af:a8:05:13:c8:d5:03:66:e6:44:
01:d0:ac:f5:99:98:1f:a8:4e:f1:bf:09:ec:b2:e8:
4b:0f:16:4a:06:d5:e0:6d:c6:a0:d3:62:ab:cf:78:
22:14:ce:1d:ec:d2:3f:52:42:3a:81:12:1b:b4:07:
ee:9a:90:f1:a4:ca:c6:62:ec:9d:57:9c:09:6d:c7:
97:05:24:fe:f9:aa:bf:70:d0:e7:25:38:d6:8f:8e:
3a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:85:95:38:FD:AB:01:B3:5A:07:65:6B:9B:ED:2D:50:2E:4E:38:C0
X509v3 Authority Key Identifier:
keyid:6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7b:20:f9:f9:f5:50:31:ca:90:8c:8f:c7:17:31:ed:5c:59:
8e:8c:d8:bd:32:12:39:24:27:8c:9c:34:e1:79:7d:aa:92:50:
09:19:35:16:d9:39:0f:e8:9d:49:ef:89:41:80:28:4f:24:ac:
83:a6:a2:1a:00:3b:43:ac:01:0c:16:e5:b4:09:48:e0:d9:40:
4f:8f:07:1c:18:bf:ca:17:1c:d0:30:eb:80:61:5d:4c:39:d1:
78:16:aa:ef:2a:db:7e:d6:f7:26:a5:a6:b6:dd:4f:03:c0:29:
7e:ec:ba:e6:c1:4f:45:87:bf:51:fa:c1:65:7c:c1:fb:ee:e6:
02:6c:1b:ea:60:5f:91:36:ff:e0:01:69:83:83:c7:17:4e:b2:
3a:a5:b9:e8:2d:50:dc:93:b6:de:8f:59:b7:13:43:0e:04:0d:
01:53:93:73:b5:ea:a7:c4:a8:85:01:e2:f3:f3:bf:35:c9:cc:
08:8f:e3:26:42:a8:fe:57:a5:30:2a:a0:08:74:07:da:b7:f1:
50:c5:29:cf:e0:f2:8f:af:4d:44:76:9f:04:ec:0b:21:38:b9:
16:ec:b7:8f:8e:24:e4:c5:2b:fa:3b:b9:e4:7d:7f:f0:09:f2:
98:d5:bf:da:af:db:2c:30:3c:5e:f3:b7:45:6c:56:99:a4:85:
26:3d:50:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfnyNNb0g6AvdVkwQ6tJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNDIxM2VmNzU1MGFhZGVmOTE3OTNkYzlkMTRiZTg3NDcx
ZTRjMTIwHhcNMjYwNzIzMTUwMDU5WhcNMjYwNzI0MTUwMDU5WjAzMTEwLwYDVQQD
EygwNjg1OTUzOGZkYWIwMWIzNWEwNzY1NmI5YmVkMmQ1MDJlNGUzOGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5/d1G72r6vJt7w39TqsLPrW/JfS
CuT/yZo/AQ9RIOv4Z9oqRkBzMq1Wh/s8KgJ2pdMxlMqC2HZKbQo9THjUchk5xgzw
TvhXf61ZuYnoydRgeMQ5ad86jicwR/odqIrm95ZIPoBX7bT6QCp4OOffT7JUs0dK
rlgTGSgl6MEoJaQwEAqK4NaFUXZSWyqkr2t3KqmymI6WtM5dwZW3dFxBh9M6wWBZ
jDAhpK+oBRPI1QNm5kQB0Kz1mZgfqE7xvwnssuhLDxZKBtXgbcag02Krz3giFM4d
7NI/UkI6gRIbtAfumpDxpMrGYuydV5wJbceXBST++aq/cNDnJTjWj446mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAaFlTj9qwGzWgdla5vtLVAuTjjAMB8GA1UdIwQY
MBaAFG5CE+91UKre+ReT3J0UvodHHkwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmtJVDczVlFxdDc1RjVQY25SUy1oMGNlVEJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8wNzNkZGEtMDMxNC00ZWFmLWJkMDQt
MjFmZThiMjlkM2Q2LzEvYmtJVDczVlFxdDc1RjVQY25SUy1oMGNlVEJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8wNzNkZGEtMDMxNC00ZWFmLWJkMDQtMjFmZThiMjlkM2Q2
LzEvYmtJVDczVlFxdDc1RjVQY25SUy1oMGNlVEJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3sg+fn1
UDHKkIyPxxcx7VxZjozYvTISOSQnjJw04Xl9qpJQCRk1Ftk5D+idSe+JQYAoTySs
g6aiGgA7Q6wBDBbltAlI4NlAT48HHBi/yhcc0DDrgGFdTDnReBaq7yrbftb3JqWm
tt1PA8Apfuy65sFPRYe/UfrBZXzB++7mAmwb6mBfkTb/4AFpg4PHF06yOqW56C1Q
3JO23o9ZtxNDDgQNAVOTc7Xqp8SohQHi8/O/NcnMCI/jJkKo/lelMCqgCHQH2rfx
UMUpz+Dyj69NRHafBOwLITi5Fuy3j44k5MUr+ju55H1/8AnymNW/2q/bLDA8XvO3
RWxWmaSFJj1QRw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:42 2026 by rpki-client