Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
File: bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft (raw, json)
Hash identifier: U5/mU/YfTpKXJl5MStBeethHSxCdK8uxdEkwN33VBRY=
Subject key identifier: D6:80:39:78:65:E9:58:9D:ED:6A:93:78:F6:AD:96:12:A5:AB:C6:94
Authority key identifier: 6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
Certificate issuer: /CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Certificate serial: 019D29292AF1A6A89AFF92B31228EE60F35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 08:00:56 +0000
Manifest this update: Thu 26 Mar 2026 08:00:56 +0000
Manifest next update: Fri 27 Mar 2026 08:00:56 +0000
Files and hashes: 1: bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl (hash: HcWHkArqZN+ELo+LR1nRjIA9v3lS7+Q40K7BlpJr5Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:2a:f1:a6:a8:9a:ff:92:b3:12:28:ee:60:f3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Validity
Not Before: Mar 26 08:00:56 2026 GMT
Not After : Mar 27 08:00:56 2026 GMT
Subject: CN=d680397865e9589ded6a9378f6ad9612a5abc694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:be:a5:cc:a6:33:79:ab:43:a9:56:fa:75:
17:da:c4:79:f9:66:a6:a2:ec:70:74:4c:b9:cb:3b:
63:74:9f:7f:5a:a5:39:6d:8e:ef:4d:93:c2:d2:40:
62:5e:0b:b2:34:e5:8f:cc:67:02:71:08:42:5e:96:
88:82:98:15:05:30:92:cb:30:79:a4:64:8d:4c:fa:
16:89:f7:1b:29:d6:09:58:55:7e:3b:33:9a:7e:ea:
ca:35:cc:c5:fa:cf:ad:62:2b:f6:86:88:a7:c0:23:
d7:92:b5:c2:5f:55:df:2d:81:25:d9:8d:36:d9:d7:
f2:ce:dc:18:31:5e:19:bd:a3:07:a8:f3:c4:ab:88:
d7:7e:bd:d9:9e:2b:9e:6c:11:44:d6:50:30:13:02:
40:a5:66:d4:af:26:b6:c7:62:73:cd:0b:e7:21:02:
7f:e3:32:6d:b5:f4:95:fb:3e:61:86:6e:47:18:6b:
77:92:b9:86:69:b4:24:c7:8e:ea:10:7e:17:66:9a:
ff:3e:2e:ee:db:da:fc:49:92:a5:d5:db:be:99:d0:
6d:95:b3:4d:60:f9:18:14:2f:3a:f7:f6:7e:d7:1b:
7c:8a:74:fa:39:7c:97:2c:8c:f0:a6:4c:59:90:c1:
8c:98:e1:33:9f:5b:b7:c7:1d:45:be:cd:f9:c8:c6:
81:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:80:39:78:65:E9:58:9D:ED:6A:93:78:F6:AD:96:12:A5:AB:C6:94
X509v3 Authority Key Identifier:
keyid:6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:29:3b:8c:25:d1:c4:70:ad:75:7e:ce:26:e9:9e:12:ab:38:
77:9f:ef:6b:a3:d8:47:ae:58:dc:57:37:98:4a:5e:f0:1b:cb:
f2:0d:8b:18:ef:5c:db:32:6f:d5:64:60:63:96:df:2b:8e:92:
b1:54:88:bc:79:1a:81:b3:7e:cb:f4:2e:72:ee:05:3d:97:f3:
df:21:9c:91:8b:1a:c1:4c:ef:bb:b7:98:cd:44:20:8b:b8:52:
d9:6b:b5:03:24:68:c3:b6:e8:b7:ef:15:0c:82:f0:d2:3d:5c:
d6:70:55:58:cf:e5:d6:35:5c:4a:a3:2b:95:88:e7:e5:c0:1c:
30:17:f9:d9:89:dc:1f:49:96:3d:59:9e:79:9c:e7:62:07:32:
c1:9d:bc:64:ca:07:43:bb:5c:3f:98:0e:42:9a:1e:a9:18:fb:
af:0f:39:b0:63:ec:11:a7:9f:51:f0:41:90:f0:41:07:7d:63:
e0:2e:51:21:00:32:21:fa:27:e7:dd:50:b7:0c:12:f7:a9:24:
49:d4:cc:51:a3:ce:d6:a3:04:b7:1d:a7:76:42:3c:3d:de:60:
92:a4:5f:40:9e:0e:71:aa:9d:49:d0:a5:36:91:1f:a9:91:c2:
f4:08:4e:c8:22:60:f3:53:1e:79:04:6e:9d:05:56:b9:d2:11:
04:22:df:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:39:39 2026 by rpki-client