Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
File: bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft (raw, json)
Hash identifier: wDfni8CW+LPjD4F6/czpqnn/51B7EzGW8Rv9ps0m9Vg=
Subject key identifier: B0:17:6D:AB:A3:1C:81:9C:BB:77:FE:E8:60:B5:A2:6F:16:7E:9E:62
Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
Certificate issuer: /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Certificate serial: 019F92ED347E004C67BD3292AD51C2171927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 07:00:46 +0000
Manifest this update: Fri 24 Jul 2026 07:00:46 +0000
Manifest next update: Sat 25 Jul 2026 07:00:46 +0000
Files and hashes: 1: _HzxSZR90lf9BYmEm2VupOU1Vas.roa (hash: Ugm9+I27Dta4vBt0cYoky3PGDm0q/WYMbNn8zxEdBlA=)
2: bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl (hash: xzNIrp2yvzCQBk099rx2lH8eCc3wx3XbZVxl0rf/7z0=)
3: wgHQmaQij3F-nK5W4X8CVxaOPm0.roa (hash: sBWiBVt4sHrg4hhwrk19Ek9irYUlBrf3WzJ8I2XR+Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:34:7e:00:4c:67:bd:32:92:ad:51:c2:17:19:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Validity
Not Before: Jul 24 07:00:46 2026 GMT
Not After : Jul 25 07:00:46 2026 GMT
Subject: CN=b0176daba31c819cbb77fee860b5a26f167e9e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b7:9a:a3:64:81:d9:80:10:74:35:2b:15:9c:
5d:6b:c9:9d:77:34:d3:3c:06:8e:5f:dc:7f:68:50:
b8:b6:a8:cc:1d:bd:de:d0:98:e5:ff:62:c8:81:67:
5b:89:51:de:2b:be:1e:a6:03:76:86:5e:31:dc:d3:
9f:ed:d0:de:ba:ff:d8:07:25:11:5d:61:64:11:bb:
97:77:4c:94:7a:a6:15:58:b2:8c:12:56:10:eb:e5:
29:e8:34:71:6c:a6:d5:75:19:7d:66:46:a2:77:c0:
10:98:65:f2:04:93:d1:4c:87:ce:91:9a:7c:cf:f7:
7c:a3:e4:52:d5:bd:ce:cc:07:33:ed:78:75:ba:b2:
9c:a1:cd:0f:b3:87:e4:d9:43:13:43:c1:1b:3d:9c:
64:6c:3f:c2:0b:a6:69:2e:23:77:29:8b:8a:f0:00:
d1:df:03:c1:48:e8:da:0b:da:8b:bd:b0:14:d3:7d:
03:4f:79:71:32:4f:ef:20:e7:a7:8c:48:96:70:3b:
fb:e7:89:56:35:3c:92:53:72:f5:7f:af:9d:b8:ff:
39:fb:f7:80:ac:42:88:5d:70:f0:79:6a:18:1f:a9:
5d:53:87:c6:e7:fd:fa:f1:0f:55:c4:46:b1:0d:a5:
fc:0a:0c:04:7c:d5:ac:37:f6:48:70:65:af:f6:8a:
1b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:17:6D:AB:A3:1C:81:9C:BB:77:FE:E8:60:B5:A2:6F:16:7E:9E:62
X509v3 Authority Key Identifier:
keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:eb:ab:70:69:4b:b3:fb:75:60:3d:52:97:02:da:ae:05:f0:
2f:8e:00:f7:d8:b4:a8:84:65:1e:13:17:f4:16:c7:20:c7:b9:
9c:42:3d:6e:00:c4:67:37:f9:9f:a2:20:1c:7e:74:d1:43:56:
6c:46:d6:2f:ce:51:fb:d3:3b:72:7f:04:90:1d:30:cc:2a:23:
1e:ca:c9:52:2a:b9:1b:bb:1b:62:70:ea:09:57:17:84:d0:e8:
71:86:24:19:e6:86:c1:ed:25:85:45:00:8e:18:60:81:1b:1d:
e4:24:df:6e:92:d9:72:12:65:09:25:29:db:82:fd:f5:ba:0a:
44:35:b5:a8:ca:54:ee:6f:44:db:1b:4a:f5:0b:f8:12:fd:35:
c9:6f:d7:29:a7:9e:02:71:18:bd:58:38:37:c1:12:88:8c:54:
cb:fd:e9:13:09:68:b5:77:f1:36:da:f5:ae:1b:4d:2c:1b:f3:
e2:38:12:c5:57:07:02:31:4e:4f:f4:92:90:78:3b:2e:3b:0d:
a5:72:b9:1b:66:fd:03:e7:5b:fe:85:c4:79:14:e4:2a:a6:b1:
e9:e4:c3:f1:a5:ae:1b:61:1d:c3:c9:85:24:9d:28:ef:b8:88:
57:fc:71:31:29:cb:19:a7:32:28:85:a2:86:e9:f3:98:db:ae:
c6:bb:35:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:25:50 2026 by rpki-client