Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
File: bseKTlkP6xA9XRu00HnGhBVZK_k.mft (raw, json)
Hash identifier: yfnwu25oiriAj3GcJMZWh6vsXcmd9dGIT8ChCgxZlas=
Subject key identifier: E3:82:BE:88:7F:5C:5D:72:0E:E3:38:A1:DB:E0:E7:4F:81:80:A2:83
Authority key identifier: 6E:C7:8A:4E:59:0F:EB:10:3D:5D:1B:B4:D0:79:C6:84:15:59:2B:F9
Certificate issuer: /CN=6ec78a4e590feb103d5d1bb4d079c68415592bf9
Certificate serial: 019F935BA7AF60F1F8EB7BFC92A0B1E41320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bseKTlkP6xA9XRu00HnGhBVZK_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:25 +0000
Manifest this update: Fri 24 Jul 2026 09:01:25 +0000
Manifest next update: Sat 25 Jul 2026 09:01:25 +0000
Files and hashes: 1: HVmNUcJUz6eHLCWqv73qDc20l-I.roa (hash: Ku0nK986i55PU61Q1Y0z3xgl417ibJovalrFntQb3zE=)
2: bseKTlkP6xA9XRu00HnGhBVZK_k.crl (hash: 3ip1kSH5FGJyIBOkweyJ6c/z3nJi0PE2sgXu/50GH5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bseKTlkP6xA9XRu00HnGhBVZK_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:a7:af:60:f1:f8:eb:7b:fc:92:a0:b1:e4:13:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec78a4e590feb103d5d1bb4d079c68415592bf9
Validity
Not Before: Jul 24 09:01:25 2026 GMT
Not After : Jul 25 09:01:25 2026 GMT
Subject: CN=e382be887f5c5d720ee338a1dbe0e74f8180a283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4a:d5:c9:68:46:92:b6:0a:a7:74:8b:75:de:
01:43:b8:9a:95:2c:f4:35:25:00:1e:e1:ee:79:44:
df:85:91:8e:c2:7c:7b:99:94:aa:d6:0b:4e:03:bc:
9d:29:d2:0a:d3:a2:54:a8:c2:37:bc:a4:40:b3:cb:
cd:7d:c1:d6:23:11:41:41:2f:8d:74:92:dc:a7:93:
8c:92:2e:00:21:10:04:9c:6c:52:70:29:39:da:77:
59:92:22:a7:9c:8f:f5:68:67:1b:2b:ff:ae:fe:1b:
e7:f6:c0:d8:56:0a:62:26:1e:7a:fd:b4:45:dc:a5:
56:6d:3b:92:d0:c8:9d:c0:be:cf:b3:df:70:8f:f3:
dd:8a:7f:7d:89:e1:b9:68:38:8d:38:41:14:04:64:
36:54:c2:40:6e:ee:57:9d:48:b6:4b:f8:2c:9c:5e:
6a:c6:81:32:35:87:d6:87:1d:96:6a:82:89:59:fd:
77:7d:32:18:40:23:61:3d:84:9f:c7:14:80:17:ca:
c7:b4:dc:2d:c5:4d:95:27:fd:21:49:fe:90:88:da:
65:48:ea:92:b6:5c:31:b9:93:51:d2:56:cc:bf:70:
78:df:d4:f8:f6:f8:c9:7a:f2:75:e4:71:73:d6:d8:
b5:8f:c3:80:b8:a9:bd:a3:47:f4:51:14:ed:f2:44:
7d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:82:BE:88:7F:5C:5D:72:0E:E3:38:A1:DB:E0:E7:4F:81:80:A2:83
X509v3 Authority Key Identifier:
keyid:6E:C7:8A:4E:59:0F:EB:10:3D:5D:1B:B4:D0:79:C6:84:15:59:2B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bseKTlkP6xA9XRu00HnGhBVZK_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:25:fb:f4:b0:1c:3a:1f:98:a4:1c:44:1d:76:38:29:5b:63:
ff:27:66:01:96:5d:e2:cc:24:ca:42:8b:70:83:29:b5:b1:a3:
32:d3:e1:1b:b7:cc:a8:73:e6:2e:b1:03:6a:c3:6f:ab:7f:10:
88:1a:42:aa:0e:c1:8a:81:7e:bc:6e:d4:39:62:33:81:1f:77:
0f:8f:a4:9d:71:9c:dc:79:d3:6d:da:0c:04:21:a0:87:bf:5f:
12:f1:f6:fc:64:4a:5f:43:45:77:fd:85:1b:a3:36:b1:6f:c1:
cb:43:41:5b:42:d3:89:41:b5:86:d2:66:7d:a0:5a:d5:32:26:
78:ee:26:d6:b4:8f:8c:34:1a:12:6c:2f:27:96:fc:82:72:57:
55:d4:43:f6:02:40:f7:b1:97:e3:a8:7a:ed:7b:11:b3:4e:a7:
d8:f3:47:07:3f:95:11:20:de:18:a9:30:36:48:0f:ec:89:63:
01:94:54:77:22:7e:9e:b1:a0:34:12:95:0a:dc:12:2a:b2:a2:
a0:aa:63:ae:58:ee:8e:d2:41:56:13:a4:6b:d1:81:7f:33:95:
c9:17:9a:3b:12:90:6d:7d:60:11:0f:bb:ce:cb:7b:17:42:a4:
85:39:77:c3:ce:a0:c1:50:91:00:6e:bd:c1:eb:a0:05:88:ac:
4c:ad:25:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:50:50 2026 by rpki-client