Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
File: BkAThp4LzSd4EEBTjflc-mfhFy4.mft (raw, json)
Hash identifier: AoYYPxr7KbeDRWJFlnFlk3D2A4SFfbqOHPA+0mP075c=
Subject key identifier: 12:AF:0D:F4:32:52:60:15:34:A5:05:09:39:BC:0C:48:7B:55:B3:E2
Authority key identifier: 06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E
Certificate issuer: /CN=064013869e0bcd27781040538df95cfa67e1172e
Certificate serial: 019E1D230190F79454D690997306566C49FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
Manifest number: 068D
Signing time: Tue 12 May 2026 17:01:33 +0000
Manifest this update: Tue 12 May 2026 17:01:33 +0000
Manifest next update: Wed 13 May 2026 17:01:33 +0000
Files and hashes: 1: BkAThp4LzSd4EEBTjflc-mfhFy4.crl (hash: 4B1lMo+27DEjmWdjUyZ+LDPoNfxt+a4gwz768/9gzew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:01:90:f7:94:54:d6:90:99:73:06:56:6c:49:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064013869e0bcd27781040538df95cfa67e1172e
Validity
Not Before: May 12 17:01:33 2026 GMT
Not After : May 13 17:01:33 2026 GMT
Subject: CN=12af0df43252601534a5050939bc0c487b55b3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:93:96:99:df:0b:c0:d5:4d:c0:04:74:86:
96:58:77:0a:05:86:d6:40:65:8c:56:10:41:b4:0c:
af:31:5b:25:8d:d4:5a:cb:b1:23:65:ce:72:c9:ea:
58:a9:d3:f6:ed:4a:26:06:3e:b3:7e:46:a3:50:27:
8f:22:94:8f:9c:cf:8f:79:78:a3:1b:56:51:87:b5:
e7:62:36:d7:05:df:74:76:80:b9:d5:91:5d:b1:11:
32:a3:4a:48:44:e7:31:fd:88:eb:4e:62:ee:21:95:
b9:7c:a7:32:83:4b:f7:46:b0:1d:56:7b:a2:c4:9d:
56:50:c2:07:5e:b2:7a:6e:96:5f:c6:cb:7e:72:de:
79:2e:15:2d:ee:35:b1:b3:78:13:ed:b9:6d:6c:f9:
06:a0:86:62:ad:ce:a1:32:db:e9:5e:90:56:15:fe:
37:a3:e9:ed:d9:be:cb:8f:b4:f3:77:69:5a:5e:30:
de:f9:e6:07:4b:8f:45:c4:29:96:a9:77:67:64:88:
43:d3:7c:fb:36:cd:af:5f:84:21:db:16:e4:2d:fd:
5b:03:54:e7:06:19:9f:39:53:b5:aa:d8:3e:83:4c:
d6:f1:c0:15:68:2b:13:df:65:6e:9f:8e:c2:f8:ad:
47:f0:57:c8:2b:ef:d8:9b:fc:77:85:a7:ec:5a:5f:
4e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AF:0D:F4:32:52:60:15:34:A5:05:09:39:BC:0C:48:7B:55:B3:E2
X509v3 Authority Key Identifier:
keyid:06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0e:e1:7d:5c:88:92:a8:37:f7:82:e4:70:5d:52:48:14:99:
7f:12:dc:21:8b:2e:ab:9f:b7:ce:29:c7:39:fd:27:b0:17:a2:
e7:1f:64:f8:ec:11:65:95:91:12:52:95:f2:cb:5c:5b:3d:a3:
d1:fe:5f:94:a6:93:bc:f6:3c:a5:cf:82:0f:10:5e:e3:36:ad:
7a:4a:a2:92:7c:a9:3d:c4:77:d9:a9:75:a1:d8:6d:c5:70:17:
6b:51:fc:f8:0d:92:a9:7b:e4:6b:a6:3b:0c:26:ca:30:d9:96:
83:3d:c1:25:e0:eb:e1:6e:c8:fb:0e:5e:8f:f1:81:ab:ba:0a:
3b:e6:13:ce:03:2b:bd:0c:a6:96:d6:a8:c9:7a:cf:23:93:33:
fb:ab:42:15:db:a0:5f:42:d3:e1:ee:9b:24:e5:26:c9:ec:c4:
f7:10:1d:72:12:93:de:17:b5:41:fc:5f:2a:ba:ae:e5:2b:40:
c7:8b:c3:3a:17:b9:58:3d:06:36:8f:f3:ca:60:40:eb:7d:eb:
89:5f:31:42:7e:9b:3a:45:6a:96:68:97:7a:ee:b4:8b:b2:eb:
e0:b5:9a:a3:26:7d:ab:c4:71:6f:2c:f6:f9:1d:7f:0d:37:35:
9e:87:35:b2:30:a3:3d:a0:49:f9:ee:d5:72:87:0a:d7:02:a3:
ba:94:ae:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIwGQ95RU1pCZcwZWbEn/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NDAxMzg2OWUwYmNkMjc3ODEwNDA1MzhkZjk1Y2ZhNjdl
MTE3MmUwHhcNMjYwNTEyMTcwMTMzWhcNMjYwNTEzMTcwMTMzWjAzMTEwLwYDVQQD
EygxMmFmMGRmNDMyNTI2MDE1MzRhNTA1MDkzOWJjMGM0ODdiNTViM2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaSTlpnfC8DVTcAEdIaWWHcKBYbW
QGWMVhBBtAyvMVsljdRay7EjZc5yyepYqdP27UomBj6zfkajUCePIpSPnM+PeXij
G1ZRh7XnYjbXBd90doC51ZFdsREyo0pIROcx/YjrTmLuIZW5fKcyg0v3RrAdVnui
xJ1WUMIHXrJ6bpZfxst+ct55LhUt7jWxs3gT7bltbPkGoIZirc6hMtvpXpBWFf43
o+nt2b7Lj7Tzd2laXjDe+eYHS49FxCmWqXdnZIhD03z7Ns2vX4Qh2xbkLf1bA1Tn
BhmfOVO1qtg+g0zW8cAVaCsT32Vun47C+K1H8FfIK+/Ym/x3hafsWl9OiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKvDfQyUmAVNKUFCTm8DEh7VbPiMB8GA1UdIwQY
MBaAFAZAE4aeC80neBBAU435XPpn4RcuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmtBVGhwNEx6U2Q0RUVCVGpmbGMtbWZoRnk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81MGY2NGQtMmJlOS00Mjg5LWE0OGUt
NDA5YmQ0YWExNjJiLzEvQmtBVGhwNEx6U2Q0RUVCVGpmbGMtbWZoRnk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC81MGY2NGQtMmJlOS00Mjg5LWE0OGUtNDA5YmQ0YWExNjJi
LzEvQmtBVGhwNEx6U2Q0RUVCVGpmbGMtbWZoRnk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdg7hfVyI
kqg394LkcF1SSBSZfxLcIYsuq5+3zinHOf0nsBei5x9k+OwRZZWRElKV8stcWz2j
0f5flKaTvPY8pc+CDxBe4zatekqiknypPcR32al1odhtxXAXa1H8+A2SqXvka6Y7
DCbKMNmWgz3BJeDr4W7I+w5ej/GBq7oKO+YTzgMrvQymltaoyXrPI5Mz+6tCFdug
X0LT4e6bJOUmyezE9xAdchKT3he1QfxfKrqu5StAx4vDOhe5WD0GNo/zymBA633r
iV8xQn6bOkVqlmiXeu60i7Lr4LWaoyZ9q8Rxbyz2+R1/DTc1noc1sjCjPaBJ+e7V
cocK1wKjupSupA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:06:13 2026 by rpki-client