Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json)
Hash identifier: ppN/Ievev3ACB+Kyd2RFvGphko+VFUSqlYmEa91EqMU=
Subject key identifier: 15:D2:72:C1:C2:10:67:5C:4B:C6:01:62:40:AB:5F:37:95:44:75:04
Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Certificate serial: 019D2695C0AB9168C9D2FBB1DB416E8BAA9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
Manifest number: 0E50
Signing time: Wed 25 Mar 2026 20:00:41 +0000
Manifest this update: Wed 25 Mar 2026 20:00:41 +0000
Manifest next update: Thu 26 Mar 2026 20:00:41 +0000
Files and hashes: 1: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: imGF+XeoTAd4ZhwbavRyrXz/FIN9BHIbq4N1tu89dfU=)
2: fYQ8diFS0pMi17AAJonCpFXTGqg.roa (hash: IlQw7JdR5Y+EO+F9R5RY7SSoodskPtpA7HFrW9NLQp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:c0:ab:91:68:c9:d2:fb:b1:db:41:6e:8b:aa:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Validity
Not Before: Mar 25 20:00:41 2026 GMT
Not After : Mar 26 20:00:41 2026 GMT
Subject: CN=15d272c1c210675c4bc6016240ab5f3795447504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:15:7f:ce:69:4d:49:2a:1f:b4:25:6e:69:d1:
af:b8:45:80:98:9d:b0:0d:2e:83:f2:e8:ce:ed:e8:
9d:5e:b9:71:59:60:87:7e:0f:71:c0:4e:04:fb:8b:
a0:27:10:70:79:6d:df:2a:39:47:5c:23:59:90:e8:
4d:65:10:0d:44:5a:a8:f6:78:6d:3d:7a:63:7b:33:
63:8b:32:15:ff:04:46:23:11:22:46:0c:3d:d7:14:
fd:cc:5c:f1:87:ba:94:0a:62:6a:a1:03:b2:d2:0e:
f2:e8:bb:4b:d3:fb:09:f7:b2:cb:cc:7d:36:55:02:
83:1f:cd:71:59:07:36:67:63:ad:83:5e:9f:25:f2:
6a:86:b8:8b:a0:47:cc:fd:71:b8:c4:12:36:45:3d:
72:67:1d:50:7b:98:c3:b3:b8:e2:0c:39:04:c3:7d:
c4:96:8c:b6:c7:ff:c0:ce:b5:95:ab:79:e3:f9:bf:
cc:58:a3:5b:12:59:41:22:11:49:3c:35:c2:f8:3f:
14:9b:21:fd:b7:3d:ce:e8:eb:00:64:50:eb:80:19:
e1:89:41:5d:a2:87:9d:00:b1:f0:40:b6:0e:95:e3:
17:06:d0:99:49:ae:f2:89:7e:37:1d:ee:ec:d8:a5:
59:7d:42:4b:f8:bb:9a:f3:7d:c6:22:74:02:6d:62:
f8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D2:72:C1:C2:10:67:5C:4B:C6:01:62:40:AB:5F:37:95:44:75:04
X509v3 Authority Key Identifier:
keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:fe:f6:ff:38:1a:67:00:27:87:ea:00:16:a9:11:50:d9:81:
96:93:18:e5:d4:57:50:35:25:1f:57:36:16:ca:96:89:03:3a:
c8:13:31:e9:52:89:5b:cb:9a:ba:e3:d2:11:75:2e:02:f1:d7:
f7:9b:c9:23:36:62:4c:1c:0e:70:94:96:f9:e0:5d:19:86:70:
97:d6:f1:4c:41:8b:bb:4d:8e:3e:71:25:18:60:fc:52:77:fa:
1c:9d:f9:6d:6a:d6:6c:5f:99:57:70:b9:f7:8a:1a:c7:3e:77:
a4:32:b1:c5:af:a3:a1:1e:f5:30:5a:7c:f0:5b:01:02:9c:2a:
6e:3c:92:19:75:cd:49:37:d1:12:18:55:88:04:62:fb:43:90:
a9:59:42:e7:cd:54:06:12:08:ff:9e:54:c7:13:f4:4c:5c:0d:
06:8c:05:fa:c9:30:d1:d6:cd:9a:ed:a9:2e:b3:bd:80:62:9f:
b3:5d:06:61:b8:7d:ec:46:4a:35:fa:20:6e:dd:41:2f:e4:1d:
01:10:63:4b:a4:0a:68:93:76:1b:d9:e8:25:47:e5:b6:5d:0f:
27:47:6d:5e:1b:b8:22:93:c8:16:2e:ea:bf:32:e9:85:6f:94:
bd:53:54:0c:66:3f:51:6f:26:e5:08:79:35:67:96:44:0c:e2:
fe:38:11:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:25:35 2026 by rpki-client