Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json)
Hash identifier: vR2LiJMiXMETFzQ5B32uSXkZ0iubb7goCoJnTya/dyA=
Subject key identifier: 3C:A5:00:FA:17:81:C2:38:0B:17:00:20:F8:12:2F:01:4D:9F:BD:F7
Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Certificate serial: 019F927F4654E91CBE6DF1E75F3EDF92D24D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
Manifest number: 0F91
Signing time: Fri 24 Jul 2026 05:00:42 +0000
Manifest this update: Fri 24 Jul 2026 05:00:42 +0000
Manifest next update: Sat 25 Jul 2026 05:00:42 +0000
Files and hashes: 1: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: dgpnzPARg3uiH5r1c21F51XEEUVoKQbmNRvplYefTco=)
2: fYQ8diFS0pMi17AAJonCpFXTGqg.roa (hash: IlQw7JdR5Y+EO+F9R5RY7SSoodskPtpA7HFrW9NLQp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:46:54:e9:1c:be:6d:f1:e7:5f:3e:df:92:d2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Validity
Not Before: Jul 24 05:00:42 2026 GMT
Not After : Jul 25 05:00:42 2026 GMT
Subject: CN=3ca500fa1781c2380b170020f8122f014d9fbdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:3b:3c:d0:a3:0a:d1:7f:6e:46:83:d0:e9:
2d:53:54:36:13:ec:27:f5:54:b5:88:8e:20:bd:c3:
e3:73:b8:86:97:d9:b5:ca:e5:a2:7d:32:94:34:60:
55:94:5b:f1:6b:c2:bd:a9:46:ad:1e:e8:8d:94:1a:
08:f6:b0:b8:94:fd:d2:85:20:fe:dd:93:2e:bf:fc:
46:91:47:c2:a7:a0:ce:bb:dc:7a:51:36:d0:ab:7a:
3e:21:3d:da:55:d3:b5:a2:5a:58:f1:34:c7:9e:00:
c3:e3:71:a4:32:5c:bb:1f:c7:89:33:47:fb:df:eb:
e3:70:d7:60:35:db:c3:85:67:61:aa:6e:dc:59:b8:
08:f4:99:e9:8e:db:2a:c8:66:61:40:1b:6a:ff:dd:
8e:83:e1:5f:e0:ce:4d:27:e6:c4:31:d3:98:37:60:
65:ce:70:cd:e9:d2:3a:a1:24:c5:3e:23:0f:3a:ea:
c2:0a:52:d7:c9:0f:a1:98:db:82:7c:a4:04:f8:c7:
21:be:20:39:7d:1c:8b:22:b1:5c:53:b6:9e:80:dd:
fa:9a:7e:ca:10:d4:12:40:07:5b:52:97:fa:33:90:
d2:a4:da:a4:ee:c3:06:30:2e:c9:a4:a9:71:3e:39:
51:23:9d:27:42:9e:b9:c4:3a:da:9c:f4:48:64:4c:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A5:00:FA:17:81:C2:38:0B:17:00:20:F8:12:2F:01:4D:9F:BD:F7
X509v3 Authority Key Identifier:
keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3c:9b:81:25:e4:89:a3:b8:50:6c:a8:93:7b:a8:78:bf:e8:
78:cd:88:9e:31:1f:06:1c:47:19:92:4a:6f:a5:14:6f:48:4b:
0b:c7:4b:b8:21:a7:9d:17:35:ae:ca:fa:2b:19:07:5b:ef:d5:
9e:80:a2:14:b3:35:f0:59:5c:fd:3c:92:33:b3:a4:2f:8d:3a:
7d:a9:e8:5b:74:35:ba:1e:aa:59:85:f2:de:09:00:35:84:29:
9e:a1:b3:d0:1a:43:55:1f:dd:45:a0:47:ec:d2:63:bc:7d:4e:
8e:39:05:f7:97:3b:de:bc:ed:35:a2:7c:e6:22:17:b5:25:57:
d1:6a:c0:3e:c2:19:25:73:fc:63:7a:7f:8d:96:a6:de:3b:8f:
f6:44:40:3d:d6:2c:95:10:cd:a0:02:b7:0c:3a:45:a3:0e:ab:
6c:69:48:41:b3:fe:e9:38:2d:66:77:a5:4d:67:3b:ee:5a:77:
ee:55:63:6e:c1:4f:6d:81:7a:8c:12:ff:5c:38:c0:88:c8:be:
dd:35:bb:34:07:46:15:fc:f9:22:68:2d:f3:d5:04:75:c6:0a:
a7:bc:04:aa:88:29:56:42:97:38:d9:97:b8:06:a3:70:df:ce:
2d:61:7c:1e:0f:b9:21:ab:05:3d:bd:3f:69:32:6d:16:89:fa:
3e:13:82:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:06:50 2026 by rpki-client