Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
File: bkIT73VQqt75F5PcnRS-h0ceTBI.mft (raw, json)
Hash identifier: /nSRgyc7VHGiB0qFr69/0Syw7YxqwNQphzy1kwZoYBg=
Subject key identifier: 8D:70:DE:4B:B1:49:78:64:0D:C2:60:5B:4E:BF:FC:46:52:DF:EE:D3
Authority key identifier: 6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
Certificate issuer: /CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Certificate serial: 019D2583B04F99138AE186275C519401700E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
Manifest number: 89
Signing time: Wed 25 Mar 2026 15:01:20 +0000
Manifest this update: Wed 25 Mar 2026 15:01:20 +0000
Manifest next update: Thu 26 Mar 2026 15:01:20 +0000
Files and hashes: 1: Aw9tXveR8BkFdyjJFk7_AmnfBwY.roa (hash: qR8wHawnouYoCzeQOakk7xfrAyq4fC7VhBjSSJYeEBQ=)
2: bkIT73VQqt75F5PcnRS-h0ceTBI.crl (hash: RLDyOmJ37OD1nlGJdPotvO6f11WyLRmLniprGn02r/8=)
3: t-pysyXW9DMYW3dIdVXL1kuI-lk.asa (hash: PkLiAsSP6O1ZogB6nCzsRUHVv6ZGFXVfkqaqouAY69U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:b0:4f:99:13:8a:e1:86:27:5c:51:94:01:70:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Validity
Not Before: Mar 25 15:01:20 2026 GMT
Not After : Mar 26 15:01:20 2026 GMT
Subject: CN=8d70de4bb14978640dc2605b4ebffc4652dfeed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:d4:2f:b8:bc:b5:74:9f:40:5d:6e:5b:de:
c8:8d:6b:bf:e0:3d:f5:cf:30:a1:56:eb:5b:c8:86:
f2:60:79:b9:0d:86:55:4f:a6:bf:db:97:82:d4:74:
f3:7a:b7:72:8e:47:ef:98:b4:94:6c:f5:85:ab:f1:
1b:4c:7f:f6:1e:7b:18:15:85:35:ac:34:4a:5c:09:
7f:e8:70:29:b9:5b:66:46:81:98:c0:1e:1b:23:f6:
94:09:cc:ae:1a:88:59:7a:6e:f9:60:7b:76:0b:4e:
20:ce:3c:d2:d1:f0:17:d6:fb:d8:ae:26:e1:39:c2:
9f:6c:4f:ec:45:e8:5a:97:e1:71:c3:f6:d8:13:91:
72:cf:cb:3f:cd:89:e4:6b:aa:ba:a4:d0:e9:29:f8:
d8:9c:0c:4a:cd:bf:64:e6:fb:64:dc:88:8c:00:36:
13:cf:18:c9:73:50:55:ef:25:45:55:14:33:b6:2a:
dd:02:75:ff:e9:2e:fb:ef:70:d6:88:2d:8c:5e:7c:
d6:c3:a7:0b:5d:dd:e2:81:71:00:63:df:05:4a:bc:
07:33:6a:4d:ec:fc:be:20:7d:32:11:39:16:29:62:
37:83:a5:95:cf:28:cd:6e:74:d0:8e:fa:f4:6e:8b:
da:7e:4c:a0:50:d9:39:52:d1:6c:91:77:47:73:6b:
10:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:70:DE:4B:B1:49:78:64:0D:C2:60:5B:4E:BF:FC:46:52:DF:EE:D3
X509v3 Authority Key Identifier:
keyid:6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:03:34:50:22:2c:1a:89:ed:95:56:0c:c4:8c:2c:94:23:42:
88:67:db:37:e9:81:5a:81:58:13:0e:8a:23:8c:57:90:e7:f4:
9e:2a:98:a2:5e:db:68:9d:78:27:36:16:95:d3:90:c6:b8:2a:
cd:b9:8b:d7:ba:29:30:bb:32:4f:a8:2e:73:05:51:2f:29:e7:
c8:42:12:9d:d4:81:f7:3b:50:f3:52:d7:ee:1f:74:ad:6e:ff:
59:b6:36:83:4b:5e:21:e8:c5:6a:c1:82:67:d5:70:f3:92:4b:
2a:f1:b2:24:ff:46:e3:4b:1d:c8:51:eb:70:cf:43:b9:25:ca:
10:f5:66:bd:9a:ec:4e:2c:4f:0f:54:67:15:bf:09:ec:e2:91:
d7:d9:76:47:cf:88:65:42:9e:59:76:60:72:ed:bb:66:a6:08:
30:98:7e:3d:aa:8c:be:d0:d4:77:67:f9:c1:ea:97:d7:c2:c2:
61:1f:b9:1f:ff:1d:f6:6f:3a:a0:2e:31:f4:e4:4e:22:06:e9:
2d:23:c5:00:60:2c:b1:05:ed:50:7c:39:68:16:d8:5d:f9:9d:
b8:08:30:49:ac:83:72:44:6d:26:d1:d7:5e:18:79:05:7e:0b:
e4:89:91:ef:10:65:cc:78:0f:bb:68:18:a6:57:bb:a9:83:2b:
44:d6:59:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:48:35 2026 by rpki-client