
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
File: BkAThp4LzSd4EEBTjflc-mfhFy4.mft (raw, json)
Hash identifier: RAuz3dNCNgLCgpN6Jq+ZGGjDapr4yZCaWLLfnWrUE08=
Subject key identifier: 71:28:CD:2B:F3:B2:87:C1:E2:E2:63:97:5B:5E:00:72:81:5F:9D:B3
Authority key identifier: 06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E
Certificate issuer: /CN=064013869e0bcd27781040538df95cfa67e1172e
Certificate serial: 019F8FEBE351B25CEB8A56777E3576B88C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
Manifest number: 074D
Signing time: Thu 23 Jul 2026 17:00:28 +0000
Manifest this update: Thu 23 Jul 2026 17:00:28 +0000
Manifest next update: Fri 24 Jul 2026 17:00:28 +0000
Files and hashes: 1: BkAThp4LzSd4EEBTjflc-mfhFy4.crl (hash: hXRIBWAFLZN9rpSBTyTqkin4diezVDdZP3mhevgKflo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:e3:51:b2:5c:eb:8a:56:77:7e:35:76:b8:8c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064013869e0bcd27781040538df95cfa67e1172e
Validity
Not Before: Jul 23 17:00:28 2026 GMT
Not After : Jul 24 17:00:28 2026 GMT
Subject: CN=7128cd2bf3b287c1e2e263975b5e0072815f9db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:5c:81:a8:ad:c5:64:ad:67:2f:5e:c7:00:
d3:dc:0a:1e:69:e2:c9:17:df:85:92:96:37:37:55:
3a:79:e4:96:4c:8d:21:4c:72:6c:36:b4:60:ff:5e:
11:29:85:78:88:9b:b4:8c:85:fc:fb:8d:2f:52:04:
de:8c:7d:1b:7a:bb:c6:6c:22:f3:3e:b4:89:ba:37:
ac:91:b1:6a:41:41:92:00:2c:cb:52:7c:c5:e3:68:
c7:32:24:f8:03:98:50:96:34:f9:f0:1d:22:3a:6a:
4a:a5:af:7d:66:4c:9b:24:6b:37:1b:00:4f:d7:f4:
f8:dd:75:b0:b5:6f:ad:59:55:81:a1:3f:e1:33:3a:
ed:61:e5:ce:cf:25:05:80:0c:67:15:cc:30:a9:bd:
ec:29:89:48:45:8a:9f:f1:02:5a:fe:8b:a8:c5:90:
67:38:ab:e8:2a:a9:32:9b:04:bf:00:69:39:10:69:
9d:b6:15:48:a5:51:b5:a8:9d:48:c1:27:49:36:0d:
88:e3:ac:e9:f1:05:8f:cf:c0:26:a2:c9:ea:8a:de:
ad:cd:4d:63:d5:f2:d7:2a:1c:ee:70:93:34:db:40:
88:2e:68:80:ca:48:dc:d5:b7:5e:13:f9:74:58:27:
1d:0c:68:79:03:3c:a6:c3:0b:42:e8:c3:be:68:bc:
8f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:28:CD:2B:F3:B2:87:C1:E2:E2:63:97:5B:5E:00:72:81:5F:9D:B3
X509v3 Authority Key Identifier:
keyid:06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:0e:c5:31:8a:09:d2:ec:a0:c3:bb:1d:58:a1:19:5e:cf:f2:
d4:54:5d:84:9d:95:65:82:db:4f:b7:e3:ce:d2:8b:64:8b:f2:
0c:dc:62:fc:55:d0:34:a4:d6:6f:84:ab:a6:cb:41:e5:ab:3b:
94:08:c3:f0:ce:0d:f9:5c:6c:5e:5c:34:e3:21:c0:64:4f:7f:
e3:15:0e:a1:02:18:69:e4:bf:e0:f1:ac:a9:a5:97:9d:23:98:
1d:a6:e3:3f:d2:5f:87:ab:2e:42:51:8e:91:75:11:4b:2e:5b:
7a:65:d7:28:9a:ee:e8:b2:43:9f:60:af:99:fa:f8:79:09:01:
7e:af:35:61:a0:1b:1b:31:14:b9:d1:07:d5:93:9a:d6:64:fb:
11:c3:d0:91:18:53:3c:fe:19:cc:16:91:0f:b5:27:25:a7:4d:
78:a6:99:17:74:02:67:5d:e1:d7:19:87:74:97:14:fd:bb:f8:
0b:1a:4d:5d:18:48:26:60:7d:05:e1:88:4f:00:08:8f:a1:f3:
fb:2c:c8:a8:cb:c9:28:72:ef:02:52:79:b9:e5:3a:b9:6f:a1:
b0:1d:8a:3a:01:98:62:33:5b:f3:33:62:51:1d:29:43:64:7c:
96:0f:4d:58:0b:e8:b3:a5:01:60:ca:e1:50:2a:dc:bc:f2:5e:
7c:ec:76:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:32 2026 by rpki-client