Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
File: bkIT73VQqt75F5PcnRS-h0ceTBI.mft (raw, json)
Hash identifier: 5lwg5syAj7DFx0ax2tygNwvglKy4GR0Vb0ohnLO6++o=
Subject key identifier: 0F:52:56:C0:8F:65:AA:07:C0:D0:C9:77:28:4F:99:9A:EF:7A:76:AF
Authority key identifier: 6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
Certificate issuer: /CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Certificate serial: 01A0CC352F9319B13ECD12C7D649E2524F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
Manifest number: 026D
Signing time: Wed 23 Sep 2026 03:00:32 +0000
Manifest this update: Wed 23 Sep 2026 03:00:32 +0000
Manifest next update: Thu 24 Sep 2026 03:00:32 +0000
Files and hashes: 1: Aw9tXveR8BkFdyjJFk7_AmnfBwY.roa (hash: qR8wHawnouYoCzeQOakk7xfrAyq4fC7VhBjSSJYeEBQ=)
2: bkIT73VQqt75F5PcnRS-h0ceTBI.crl (hash: YhWPge1HluTIAfR6TS1wMGHyiQ8vphWBxZx6pZ+iaBE=)
3: t-pysyXW9DMYW3dIdVXL1kuI-lk.asa (hash: PkLiAsSP6O1ZogB6nCzsRUHVv6ZGFXVfkqaqouAY69U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:2f:93:19:b1:3e:cd:12:c7:d6:49:e2:52:4f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Validity
Not Before: Sep 23 03:00:32 2026 GMT
Not After : Sep 24 03:00:32 2026 GMT
Subject: CN=0f5256c08f65aa07c0d0c977284f999aef7a76af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3a:0d:dd:86:bb:17:a2:a7:94:bf:06:18:2a:
87:e3:19:4d:e3:13:63:fc:ec:49:82:45:f0:60:5f:
22:9d:a5:13:81:8a:0c:44:a6:b6:1e:4f:9b:44:04:
8e:08:ce:36:af:5f:b7:90:fd:c2:f6:98:21:93:a8:
1f:64:82:dc:8f:57:49:41:1f:c9:db:c8:5a:28:d3:
90:67:14:58:fc:ba:6d:7f:db:e9:41:d9:2f:34:ab:
a7:30:e9:00:5b:3f:ce:71:56:95:db:c9:dd:b4:7d:
b3:01:07:03:b1:ce:fc:11:78:59:97:c1:2e:aa:58:
2e:9c:06:39:cd:b7:42:bc:83:b1:18:28:c5:c0:13:
69:25:04:ba:8c:04:5f:3c:1e:5d:65:a5:9a:2d:9e:
ca:7f:85:d9:e7:49:15:48:6f:c0:a7:d6:91:69:b9:
56:31:ba:36:5f:7a:f1:3d:83:a3:0b:4b:bb:ae:a4:
97:e0:c4:22:86:09:ae:01:f0:27:e6:24:d1:c1:97:
d1:39:b5:4a:cf:63:09:9b:2e:31:02:13:b6:49:57:
ab:a2:f1:56:b6:07:36:09:e6:79:ec:c6:fd:f3:ea:
88:e6:cd:cf:10:4a:4f:47:48:3f:74:f3:0d:cf:44:
6d:0b:06:dd:2f:92:79:f3:db:22:86:e7:af:5b:22:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:52:56:C0:8F:65:AA:07:C0:D0:C9:77:28:4F:99:9A:EF:7A:76:AF
X509v3 Authority Key Identifier:
keyid:6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ed:fb:24:7b:45:55:30:46:5b:7e:b0:dd:b0:3b:fa:ce:be:
1c:64:5f:ed:b7:e2:6a:f1:5e:4d:4d:93:78:2d:d8:96:9a:7c:
f3:d8:fd:24:3d:39:3d:5c:7c:ab:d0:71:1f:e1:fd:f2:11:62:
fb:9b:fe:d7:4d:38:f4:43:78:d8:c8:59:9b:07:ae:a9:a4:77:
16:72:7a:67:e2:75:df:5f:21:c9:a6:27:56:43:40:23:ad:4b:
d5:68:f6:90:5c:ea:16:7d:87:90:1f:ab:cb:3f:81:2c:20:5d:
3f:cd:4d:f3:99:be:11:8e:4d:ec:67:95:73:75:9b:38:0b:c2:
df:49:67:11:5c:5d:f4:3c:fa:6e:5b:af:30:9c:90:f0:80:01:
1e:0c:e6:54:65:61:bb:5e:c6:03:77:76:e2:9b:95:f5:46:8d:
f0:db:44:d5:0f:50:cf:41:b3:6c:5b:0a:26:23:06:45:cf:71:
80:5d:58:c8:3a:db:67:f0:0a:6a:3b:f9:f0:11:9b:f6:af:36:
13:77:f4:9c:80:71:71:5b:4c:07:c0:f4:26:04:ae:e8:99:13:
73:f1:33:d4:1f:3d:d3:5c:d2:94:7b:40:bd:5a:48:70:c7:e0:
21:74:7d:d4:d4:4e:80:1d:d7:c5:e6:a5:46:24:40:7e:57:50:
f9:0d:17:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:11:06 2026 by rpki-client