Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
File: bkIT73VQqt75F5PcnRS-h0ceTBI.mft (raw, json)
Hash identifier: y/HzF9XhqLz+xncshtCkP7BdiwVcH8HLRsYUtOwJBKw=
Subject key identifier: 4D:E6:2E:AE:98:D7:F5:53:4E:15:56:D8:65:D5:AA:C3:B0:D8:2F:60
Authority key identifier: 6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
Certificate issuer: /CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Certificate serial: 019E1CB56B54C29B3D1FF4D4F1F8BFE52C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
Manifest number: 0109
Signing time: Tue 12 May 2026 15:01:51 +0000
Manifest this update: Tue 12 May 2026 15:01:51 +0000
Manifest next update: Wed 13 May 2026 15:01:51 +0000
Files and hashes: 1: Aw9tXveR8BkFdyjJFk7_AmnfBwY.roa (hash: qR8wHawnouYoCzeQOakk7xfrAyq4fC7VhBjSSJYeEBQ=)
2: bkIT73VQqt75F5PcnRS-h0ceTBI.crl (hash: u+bHFJjOuFC2lor89soo3u/U/hl6wgZFkUfBx1QueIo=)
3: t-pysyXW9DMYW3dIdVXL1kuI-lk.asa (hash: PkLiAsSP6O1ZogB6nCzsRUHVv6ZGFXVfkqaqouAY69U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:6b:54:c2:9b:3d:1f:f4:d4:f1:f8:bf:e5:2c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Validity
Not Before: May 12 15:01:51 2026 GMT
Not After : May 13 15:01:51 2026 GMT
Subject: CN=4de62eae98d7f5534e1556d865d5aac3b0d82f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:5c:a6:63:70:64:75:29:96:a1:6e:d8:d5:
34:34:2e:5b:23:d6:2f:ed:43:94:c4:c6:7f:19:1c:
ac:83:89:dd:a6:22:95:c6:6a:11:b2:da:57:0f:ce:
7f:14:25:89:70:be:e1:96:d7:f6:ca:42:bd:91:62:
cb:48:d4:95:4a:88:33:73:b0:5c:99:e8:49:55:22:
4f:17:ff:a2:a6:a1:c5:13:7a:10:d7:a4:69:17:7a:
67:c6:65:93:20:f7:35:d7:d2:16:09:ca:4a:ed:93:
a4:a1:55:25:a5:6b:14:41:1f:22:e4:4b:d7:18:45:
c0:a0:c4:4f:ca:e4:11:08:c4:c7:7c:2f:b8:12:31:
6b:0f:e2:7f:51:76:e8:40:1d:a5:df:2d:99:ff:1a:
74:0a:60:2e:fd:4a:b5:fb:13:c9:30:04:45:fb:e2:
dc:df:41:2d:bf:49:f3:47:4f:a0:c4:f1:8f:70:52:
54:c3:df:87:fe:cd:5e:5f:4b:e6:98:4a:8e:4f:24:
22:7e:93:08:10:22:58:df:e2:86:66:38:9f:a7:7d:
68:49:9a:58:55:cc:f7:20:93:77:43:22:58:1e:50:
6c:ad:01:ce:c7:88:bb:ed:72:55:b5:fb:49:24:cd:
e7:98:14:0b:6a:36:55:ec:a9:8b:ca:a4:27:4a:98:
18:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E6:2E:AE:98:D7:F5:53:4E:15:56:D8:65:D5:AA:C3:B0:D8:2F:60
X509v3 Authority Key Identifier:
keyid:6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bd:b6:64:30:b9:a4:fb:5b:f2:3d:57:5e:d4:99:26:05:64:
32:ac:78:d6:21:4a:2b:33:d4:6c:6d:e5:1c:be:df:44:9a:84:
22:4c:27:c7:99:df:dc:33:03:f6:0e:9f:0c:07:cf:73:c0:d1:
ce:a6:80:37:81:29:0d:c5:69:fd:86:b1:ad:8d:03:43:ea:7a:
8e:c9:fc:5c:ef:49:f5:99:0f:c9:f3:e1:dc:ba:28:fa:9d:d5:
f3:96:17:6f:a7:66:7f:f6:da:d4:f7:b3:32:8b:24:87:e2:0d:
a7:5b:92:8f:00:6a:fe:42:e7:93:a9:66:a8:94:8c:1f:1f:d2:
ef:1e:de:93:e6:14:16:ed:8e:de:15:75:16:07:10:70:a2:dd:
d0:d1:eb:79:10:1e:f0:75:09:8a:fe:22:75:fc:ba:f5:0d:41:
74:f2:b2:dc:ff:7a:04:f6:83:b1:4a:24:d2:2a:5a:33:e4:53:
1d:26:15:e5:22:51:f3:85:03:f1:97:c7:69:56:a6:c4:3a:e0:
88:bd:0c:38:d9:06:6a:ac:d9:74:cd:11:56:bb:14:58:d9:04:
0a:dc:af:8c:59:96:56:56:f2:50:73:b5:8a:bd:83:75:06:d2:
6b:a1:73:e4:49:a0:fe:05:b6:68:00:2c:47:b4:ba:3c:d1:ff:
57:7c:13:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:35 2026 by rpki-client