Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json)
Hash identifier: jfyinHJWLzPUMUXCvx6u1ScrP7EAGCZ2dD9QeN8JyqA=
Subject key identifier: 4A:F2:04:EA:17:4A:34:0A:44:33:C1:90:1F:11:2B:C1:10:3B:3D:E3
Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Certificate serial: 019E1FB5FC4722AC6C5DE4BA0A6D82B8F748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
Manifest number: 0ED1
Signing time: Wed 13 May 2026 05:01:20 +0000
Manifest this update: Wed 13 May 2026 05:01:20 +0000
Manifest next update: Thu 14 May 2026 05:01:20 +0000
Files and hashes: 1: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: wmlueNmUtpyZCAzbDrLjPGwGvw3oVyi02XkR9fIopq4=)
2: fYQ8diFS0pMi17AAJonCpFXTGqg.roa (hash: IlQw7JdR5Y+EO+F9R5RY7SSoodskPtpA7HFrW9NLQp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:fc:47:22:ac:6c:5d:e4:ba:0a:6d:82:b8:f7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Validity
Not Before: May 13 05:01:20 2026 GMT
Not After : May 14 05:01:20 2026 GMT
Subject: CN=4af204ea174a340a4433c1901f112bc1103b3de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:90:8d:48:22:50:00:28:1d:68:a7:36:e5:66:
bc:90:6a:00:8e:97:bd:23:ad:5a:42:dc:b8:63:c2:
42:d2:3f:e7:f0:60:60:29:6a:c3:fd:5e:a5:cc:06:
bb:7b:55:0e:2e:c6:e7:b6:6d:8d:21:f9:3d:fd:b9:
07:56:11:4b:78:e2:e9:09:82:49:0a:e2:c3:05:6c:
49:87:e1:7e:e4:ff:dc:63:a6:fa:e5:51:2c:64:24:
a6:12:a4:18:44:4a:7b:88:5f:66:c0:3d:35:fc:4a:
3d:91:b1:46:fa:fc:21:23:0c:f2:0c:b5:20:58:42:
ff:93:d4:fc:14:a2:e4:40:cf:bb:33:60:e8:bf:2d:
a2:33:f5:78:a1:49:f6:24:50:47:c1:ab:4c:7e:ff:
5f:1e:aa:c9:32:01:5c:f1:c5:5f:e0:0e:79:36:38:
93:e8:47:04:d6:f4:2f:f1:1d:e3:c5:71:55:1d:3a:
d8:e5:de:87:31:aa:0a:09:4e:b8:68:85:ba:94:69:
28:49:37:b9:84:db:7c:05:6b:72:cc:4c:23:51:3a:
cd:cd:38:08:1a:4f:15:9f:75:33:b2:ba:78:d8:6a:
c8:5c:89:86:e9:b8:3e:d0:f7:aa:da:a1:6f:66:f2:
62:92:9b:cc:fc:79:43:d1:e2:38:f0:da:40:11:87:
ee:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F2:04:EA:17:4A:34:0A:44:33:C1:90:1F:11:2B:C1:10:3B:3D:E3
X509v3 Authority Key Identifier:
keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:61:af:bf:41:5d:f1:67:53:d3:f4:ff:1d:b4:6d:57:b6:0e:
02:fc:f8:86:20:c9:d4:ce:ae:ac:e4:83:1c:33:6b:91:5d:30:
46:53:76:d9:7e:c5:ce:8c:c4:37:ca:b8:89:2d:ce:da:59:ee:
f6:5f:c7:db:d6:2f:ba:6a:46:76:41:18:f1:85:3c:c2:37:a4:
2b:fd:2d:92:bb:63:62:d3:29:b3:f1:5b:64:1b:1f:cf:99:37:
e0:c9:0a:49:9a:c5:a9:e7:94:a9:93:bc:51:6a:74:1c:29:c4:
83:4a:38:3e:f5:d8:3e:8b:5f:41:9c:c9:c5:0e:de:72:25:2a:
4b:e0:6e:e5:7b:f5:5b:29:e7:99:95:6b:ae:f7:11:9d:9a:8e:
bf:76:e6:03:bb:a7:a2:47:86:4b:65:4d:bb:d8:79:8c:6f:28:
1d:e6:d6:5a:8d:40:e6:d6:3c:21:53:d4:a6:bc:c9:46:8e:d6:
05:7f:c9:6f:9e:91:37:43:b2:0e:57:b8:d8:a9:b0:4f:f8:43:
cf:ee:ff:41:bc:ac:9a:08:75:23:64:01:f6:9a:1a:44:79:c4:
b0:cb:81:a9:b7:b3:ab:80:c0:49:77:41:00:25:81:9f:12:13:
7e:b3:d2:11:56:b3:8f:60:c5:88:9c:65:bc:0b:54:39:cf:8c:
22:e3:f3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:19:59 2026 by rpki-client