Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json)
Hash identifier: /VYgV7N0M2I01x3Ixyy5vltc+XAMfg5jnXuYLn/lgR8=
Subject key identifier: 3D:4E:2C:C9:12:91:B3:86:55:F7:02:67:5D:EB:3E:B3:F6:F7:23:C1
Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Certificate serial: 01A0F1FA207DD7D11096B6E99151B8EA29FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
Manifest number: 1047
Signing time: Wed 30 Sep 2026 11:01:36 +0000
Manifest this update: Wed 30 Sep 2026 11:01:36 +0000
Manifest next update: Thu 01 Oct 2026 11:01:36 +0000
Files and hashes: 1: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: bmKXmuq136YTkdk4xds8lXHsYxT32hhzrHUrakOBC5g=)
2: fYQ8diFS0pMi17AAJonCpFXTGqg.roa (hash: IlQw7JdR5Y+EO+F9R5RY7SSoodskPtpA7HFrW9NLQp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:fa:20:7d:d7:d1:10:96:b6:e9:91:51:b8:ea:29:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Validity
Not Before: Sep 30 11:01:36 2026 GMT
Not After : Oct 1 11:01:36 2026 GMT
Subject: CN=3d4e2cc91291b38655f702675deb3eb3f6f723c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8e:af:39:e5:cc:24:a4:e2:7b:19:8f:59:2c:
ad:03:79:65:47:c8:23:93:2d:bf:91:21:14:01:2c:
dc:06:6c:a5:4f:69:b5:aa:3e:59:c0:68:9d:22:b0:
71:9f:fe:45:a9:ff:ce:88:0a:a5:ea:af:5e:07:06:
7c:88:1b:c2:1a:4c:6b:c6:d5:47:42:7a:95:6c:78:
a0:6e:21:73:96:cc:69:06:64:21:a5:45:07:ec:76:
3f:1d:25:d7:fe:6f:ef:62:a9:d0:6c:2c:ed:61:da:
c0:15:25:3c:6e:e4:14:b6:3e:d0:b6:d7:5a:cd:0c:
1d:55:4d:12:68:7e:63:5b:33:26:13:18:af:3b:23:
2b:f4:d1:76:77:d9:d5:91:e1:33:57:43:75:30:36:
b2:88:27:ce:f7:2d:7a:01:74:b6:5c:e9:f5:40:08:
75:fe:95:12:5d:c8:92:0e:e0:b5:25:fa:0c:33:9e:
a7:f4:13:3e:7c:e7:a1:1e:0c:ca:a9:90:64:52:bf:
da:9c:84:74:04:14:4a:f6:9f:57:20:56:65:63:94:
bd:2d:72:f6:57:a2:4d:ca:94:60:15:9a:51:2d:28:
22:17:2c:f1:36:ab:79:73:44:6d:22:b8:45:78:ec:
46:99:7e:f7:16:cb:e8:0e:cd:9a:26:5d:85:ab:15:
3b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4E:2C:C9:12:91:B3:86:55:F7:02:67:5D:EB:3E:B3:F6:F7:23:C1
X509v3 Authority Key Identifier:
keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:60:38:0a:c2:8c:d9:dd:2b:28:87:ed:76:74:92:04:1b:3b:
98:35:2c:e0:e2:9f:c0:e4:cc:18:d3:f9:4d:f5:08:50:72:e8:
d8:2a:86:cd:51:33:df:93:0b:4e:b8:6e:0f:d8:46:bb:b6:8c:
77:77:4c:86:18:05:20:9f:c4:e9:02:62:48:1c:29:2e:c5:e4:
ee:61:1e:17:90:5d:c1:72:4c:e2:cf:e8:44:a0:26:17:c6:91:
c9:18:b1:fb:1f:f5:c2:9a:d7:6e:b7:e8:f7:e5:8b:3d:8c:89:
9e:5e:8a:e1:06:50:c1:9a:ae:c7:0a:07:8e:bb:4e:ba:7b:1a:
a3:b4:c7:58:db:c6:67:ea:71:80:80:77:34:e6:2d:c3:5c:df:
43:79:65:8f:29:30:93:d1:29:cc:28:c5:b5:89:3a:91:c1:5d:
b6:cc:9d:75:bb:77:79:c6:34:ac:8b:05:de:f7:a8:cc:17:35:
44:45:46:b4:c3:c1:28:32:f2:c0:39:8a:6b:f8:e0:cb:d2:fd:
8d:f7:78:4d:a9:45:d3:e6:fe:b1:ef:1c:44:0f:31:0e:23:d8:
c1:34:d6:8e:29:fb:dd:b1:d7:0a:93:6c:69:54:b0:74:e0:a9:
24:2f:d5:a9:06:d9:2d:7d:58:e1:7e:82:c7:86:ff:4a:38:d6:
83:25:0c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:59:51 2026 by rpki-client