Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
File: bseKTlkP6xA9XRu00HnGhBVZK_k.mft (raw, json)
Hash identifier: Z0yTu6zuLt+p0pFFApfpP0/BaOB4/sF5kC2yFPu2GHg=
Subject key identifier: A5:71:16:23:DE:AB:E2:F4:3E:70:F5:AA:15:6A:4A:CE:A0:FA:B1:4C
Authority key identifier: 6E:C7:8A:4E:59:0F:EB:10:3D:5D:1B:B4:D0:79:C6:84:15:59:2B:F9
Certificate issuer: /CN=6ec78a4e590feb103d5d1bb4d079c68415592bf9
Certificate serial: 01A0E92E1E5C35F7E35F1B164B07E39FF763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bseKTlkP6xA9XRu00HnGhBVZK_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
Manifest number: F2
Signing time: Mon 28 Sep 2026 18:01:48 +0000
Manifest this update: Mon 28 Sep 2026 18:01:48 +0000
Manifest next update: Tue 29 Sep 2026 18:01:48 +0000
Files and hashes: 1: HVmNUcJUz6eHLCWqv73qDc20l-I.roa (hash: Ku0nK986i55PU61Q1Y0z3xgl417ibJovalrFntQb3zE=)
2: bseKTlkP6xA9XRu00HnGhBVZK_k.crl (hash: xu6kpWlSpDqW+0h4B/tahuJgRSWj+kOxZdMTP9vtpFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bseKTlkP6xA9XRu00HnGhBVZK_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:1e:5c:35:f7:e3:5f:1b:16:4b:07:e3:9f:f7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec78a4e590feb103d5d1bb4d079c68415592bf9
Validity
Not Before: Sep 28 18:01:48 2026 GMT
Not After : Sep 29 18:01:48 2026 GMT
Subject: CN=a5711623deabe2f43e70f5aa156a4acea0fab14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:ac:11:cc:2a:03:24:e6:5f:c9:e7:b8:44:
11:2b:8f:6c:e6:ea:2e:06:d0:c5:6d:e0:5f:6e:e8:
5e:59:1e:ad:6d:84:c2:cc:11:b4:17:09:8e:54:5d:
cd:0a:2b:40:82:a1:17:19:45:94:21:4a:ae:46:61:
ac:31:2a:48:38:72:77:00:de:ee:7e:99:7d:10:a3:
63:6a:5f:a0:55:f0:c9:7a:91:8f:9f:cb:dc:d8:39:
cf:db:cb:af:1c:48:f9:13:b6:20:c5:0c:2c:d2:65:
5d:83:87:c5:c6:f4:5a:8c:29:00:18:09:55:61:da:
1e:ae:a8:13:43:2a:53:b5:87:03:6f:4c:b6:46:3b:
57:fc:03:fb:ed:9c:b2:7a:6d:23:bd:f0:dd:6a:7b:
7a:9a:b2:50:69:2e:ae:53:7a:70:83:6a:bb:16:a6:
3e:d2:90:af:8d:52:12:bc:97:c1:c7:c0:26:53:5d:
cc:6c:ac:7a:cf:ae:d3:1f:f0:55:00:4f:48:7b:fb:
e7:17:e9:2b:97:10:9e:69:f4:d9:58:b4:6b:28:1a:
2d:b9:67:ee:cf:0d:3b:d5:25:af:5a:37:7f:c6:7e:
37:a2:17:5a:9e:b6:c0:71:16:75:2b:18:e9:10:59:
8b:e4:73:e3:a5:5d:8f:12:26:51:40:68:a8:6f:47:
c3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:71:16:23:DE:AB:E2:F4:3E:70:F5:AA:15:6A:4A:CE:A0:FA:B1:4C
X509v3 Authority Key Identifier:
keyid:6E:C7:8A:4E:59:0F:EB:10:3D:5D:1B:B4:D0:79:C6:84:15:59:2B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bseKTlkP6xA9XRu00HnGhBVZK_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:dc:a5:c4:1f:1f:65:5a:51:15:8a:d1:c1:2a:29:19:2b:e7:
a4:7e:de:e8:cc:ce:36:00:46:33:6f:4c:ff:ee:b4:fe:f8:b5:
d5:88:54:91:1a:f5:e6:f7:b7:d8:b7:09:51:20:d1:ff:19:63:
e5:70:cd:47:72:c0:c3:3a:89:1d:56:c6:48:52:7e:e3:84:c0:
91:7e:a0:1a:9c:bc:68:47:9f:4d:21:77:e6:17:58:08:89:59:
1e:b4:2a:9d:0d:25:8f:87:ec:9c:cd:6d:17:24:3b:07:ad:35:
c8:99:f9:11:58:5f:71:d5:f3:d9:36:e7:5a:9b:96:73:fb:49:
e9:ff:83:44:68:d7:0f:3f:66:a6:2c:97:49:88:5d:e9:c9:2b:
f1:8d:88:5c:a8:50:3a:03:8b:f1:02:f6:ab:e7:e2:f4:cd:bb:
d3:9e:e3:42:39:e2:c0:4e:9d:04:bd:5b:80:dd:6c:95:1b:a3:
56:d3:ef:15:b8:32:82:42:71:31:45:37:f9:a2:af:ec:b0:0e:
e0:d7:6c:bf:91:07:1a:2f:dd:b5:b7:e2:3a:16:bb:82:49:dd:
40:07:1c:0c:ba:1b:14:1f:86:30:7d:ab:eb:d6:bf:90:06:ac:
ad:dc:ca:f4:e8:31:f9:80:ef:cc:9b:b8:27:2b:0c:45:db:8e:
d1:7c:ef:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:40:33 2026 by rpki-client