Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft
File: K-BKLRVsHGjDUjj26DAauu8AvfE.mft (raw, json)
Hash identifier: aRukIokN5dOfotmUpuNcLqHTc6v81+UtFkc8ikggMv8=
Subject key identifier: F5:2F:48:76:1C:4C:50:B7:12:52:D2:5E:A2:46:C4:42:C7:F8:2D:28
Authority key identifier: 2B:E0:4A:2D:15:6C:1C:68:C3:52:38:F6:E8:30:1A:BA:EF:00:BD:F1
Certificate issuer: /CN=2be04a2d156c1c68c35238f6e8301abaef00bdf1
Certificate serial: 019D27724BD59305ED54CA907B36625CE2FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-BKLRVsHGjDUjj26DAauu8AvfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft
Manifest number: 0143
Signing time: Thu 26 Mar 2026 00:01:35 +0000
Manifest this update: Thu 26 Mar 2026 00:01:35 +0000
Manifest next update: Fri 27 Mar 2026 00:01:35 +0000
Files and hashes: 1: K-BKLRVsHGjDUjj26DAauu8AvfE.crl (hash: am/m80e5TpvZ9flNWfrWRIRCC9pmVLamezwEU/T4fDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-BKLRVsHGjDUjj26DAauu8AvfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4b:d5:93:05:ed:54:ca:90:7b:36:62:5c:e2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be04a2d156c1c68c35238f6e8301abaef00bdf1
Validity
Not Before: Mar 26 00:01:35 2026 GMT
Not After : Mar 27 00:01:35 2026 GMT
Subject: CN=f52f48761c4c50b71252d25ea246c442c7f82d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0d:64:74:9f:50:ee:ad:f1:48:f5:9f:51:f8:
45:98:c4:a1:86:f5:bb:93:4b:cf:34:14:36:76:11:
4f:bc:39:09:93:ac:23:cd:36:78:c1:43:ff:11:b4:
ee:cb:2b:f0:4d:63:5d:e5:b1:e3:ed:37:fb:52:34:
27:67:c0:1e:1f:20:8b:c6:47:36:74:9e:8c:e8:0a:
05:96:0f:ed:15:20:02:ad:ae:a5:0f:ef:68:3f:e7:
e8:83:48:bd:6a:08:71:2c:09:2b:8c:25:da:b8:1a:
f4:1c:dc:0c:4c:f3:74:8f:1b:8a:a6:34:b1:eb:d8:
4e:29:50:5a:03:4d:7e:03:6f:6f:7e:78:4b:b5:d3:
1a:24:1f:b7:81:9a:76:0f:6d:bf:cf:cd:68:33:22:
fb:ab:aa:d9:b1:3e:e9:8d:83:f6:8a:2f:13:a8:07:
d2:cf:ae:ba:7e:8b:e7:39:81:44:f9:9b:1b:15:b5:
88:95:0d:37:ba:10:fa:0d:b2:f7:a7:bd:ed:30:f9:
fe:b4:94:f9:8e:e7:78:46:f6:d9:33:42:fa:63:71:
bc:34:00:3f:15:b5:ad:07:6c:da:c9:5c:b9:ad:33:
8f:7e:b9:bf:88:d7:66:a9:1a:d4:1b:85:0c:2e:f3:
1c:c8:a4:3a:b8:cc:c4:23:e4:b5:86:4e:78:5f:17:
4f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2F:48:76:1C:4C:50:B7:12:52:D2:5E:A2:46:C4:42:C7:F8:2D:28
X509v3 Authority Key Identifier:
keyid:2B:E0:4A:2D:15:6C:1C:68:C3:52:38:F6:E8:30:1A:BA:EF:00:BD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-BKLRVsHGjDUjj26DAauu8AvfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2c:42:86:cb:44:53:dc:d9:58:3e:8b:e7:ac:32:eb:de:19:
55:b5:20:d4:0a:50:78:8f:2e:44:dc:77:fb:0e:ad:51:7f:54:
04:fe:bd:67:f8:68:1f:af:68:ef:39:94:45:ae:57:5e:68:3b:
5f:55:88:36:01:a0:3e:d8:3a:f1:11:5a:02:df:7f:7f:dc:b6:
d7:2f:38:0c:61:78:ad:41:f5:0f:01:dc:99:87:07:70:40:1e:
0f:6f:4a:75:da:2b:98:f9:a2:9f:2f:e9:5a:b8:84:e9:c7:26:
a2:1b:f3:d0:30:57:57:9b:c2:70:9f:d8:b2:9f:43:e2:fb:1c:
a3:d6:7d:2c:f9:2b:8d:52:d8:dd:65:2c:22:4f:bf:27:fa:dc:
b0:95:3e:7e:84:e6:ba:65:c9:76:61:09:e9:a9:a2:91:ae:ca:
e7:ad:4e:89:87:16:41:a8:54:dc:7f:0a:90:cd:b1:dd:e3:a1:
72:a2:f6:56:8c:b1:70:48:3f:b3:3e:f0:60:49:18:4c:8c:16:
4d:32:29:b7:a6:e1:d3:21:9e:c9:44:be:70:69:b8:a1:5d:d5:
7b:bc:b6:4f:64:d7:00:01:d3:05:15:81:d9:c1:8e:25:b1:ca:
d4:bf:19:3b:fd:3f:34:c8:3d:8d:ca:e7:44:31:8b:e7:f8:45:
0c:6e:96:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nckvVkwXtVMqQezZiXOL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZTA0YTJkMTU2YzFjNjhjMzUyMzhmNmU4MzAxYWJhZWYw
MGJkZjEwHhcNMjYwMzI2MDAwMTM1WhcNMjYwMzI3MDAwMTM1WjAzMTEwLwYDVQQD
EyhmNTJmNDg3NjFjNGM1MGI3MTI1MmQyNWVhMjQ2YzQ0MmM3ZjgyZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Q1kdJ9Q7q3xSPWfUfhFmMShhvW7
k0vPNBQ2dhFPvDkJk6wjzTZ4wUP/EbTuyyvwTWNd5bHj7Tf7UjQnZ8AeHyCLxkc2
dJ6M6AoFlg/tFSACra6lD+9oP+fog0i9aghxLAkrjCXauBr0HNwMTPN0jxuKpjSx
69hOKVBaA01+A29vfnhLtdMaJB+3gZp2D22/z81oMyL7q6rZsT7pjYP2ii8TqAfS
z666fovnOYFE+ZsbFbWIlQ03uhD6DbL3p73tMPn+tJT5jud4RvbZM0L6Y3G8NAA/
FbWtB2zayVy5rTOPfrm/iNdmqRrUG4UMLvMcyKQ6uMzEI+S1hk54XxdPIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUvSHYcTFC3ElLSXqJGxELH+C0oMB8GA1UdIwQY
MBaAFCvgSi0VbBxow1I49ugwGrrvAL3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy1CS0xSVnNIR2pEVWpqMjZEQWF1dThBdmZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82MWNmZDItYjBjMi00NTNhLWI2NTgt
MzIxODA1YzdlMjBmLzEvSy1CS0xSVnNIR2pEVWpqMjZEQWF1dThBdmZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi82MWNmZDItYjBjMi00NTNhLWI2NTgtMzIxODA1YzdlMjBm
LzEvSy1CS0xSVnNIR2pEVWpqMjZEQWF1dThBdmZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSxChstE
U9zZWD6L56wy694ZVbUg1ApQeI8uRNx3+w6tUX9UBP69Z/hoH69o7zmURa5XXmg7
X1WINgGgPtg68RFaAt9/f9y21y84DGF4rUH1DwHcmYcHcEAeD29KddormPminy/p
WriE6ccmohvz0DBXV5vCcJ/Ysp9D4vsco9Z9LPkrjVLY3WUsIk+/J/rcsJU+foTm
umXJdmEJ6amika7K561OiYcWQahU3H8KkM2x3eOhcqL2VoyxcEg/sz7wYEkYTIwW
TTIpt6bh0yGeyUS+cGm4oV3Ve7y2T2TXAAHTBRWB2cGOJbHK1L8ZO/0/NMg9jcrn
RDGL5/hFDG6WFw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:06 2026 by rpki-client