Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/142e24-aaaf-4d35-9c0f-d81c77ab0c43/1/bKEUWWE3FGPWv3mUTSgeDPpqAJ0.mft
File: bKEUWWE3FGPWv3mUTSgeDPpqAJ0.mft (raw, json)
Hash identifier: o1C33PWrhL8/u2lTfht6cIvRHn9JyC6VYTuny3OfaL8=
Subject key identifier: 44:51:CF:FE:7E:43:90:1F:2C:81:A6:CD:56:58:6F:DE:12:EA:D6:0F
Authority key identifier: 6C:A1:14:59:61:37:14:63:D6:BF:79:94:4D:28:1E:0C:FA:6A:00:9D
Certificate issuer: /CN=6ca1145961371463d6bf79944d281e0cfa6a009d
Certificate serial: 019D326383D7D1E49BD67A6365FADC03DE63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKEUWWE3FGPWv3mUTSgeDPpqAJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/142e24-aaaf-4d35-9c0f-d81c77ab0c43/1/bKEUWWE3FGPWv3mUTSgeDPpqAJ0.mft
Manifest number: 16
Signing time: Sat 28 Mar 2026 03:01:15 +0000
Manifest this update: Sat 28 Mar 2026 03:01:15 +0000
Manifest next update: Sun 29 Mar 2026 03:01:15 +0000
Files and hashes: 1: bKEUWWE3FGPWv3mUTSgeDPpqAJ0.crl (hash: 6xJKj1U3uX87gjmCuLUDd4Y6Dzc8Oc6AzZg9SOygqNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/142e24-aaaf-4d35-9c0f-d81c77ab0c43/1/bKEUWWE3FGPWv3mUTSgeDPpqAJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/142e24-aaaf-4d35-9c0f-d81c77ab0c43/1/bKEUWWE3FGPWv3mUTSgeDPpqAJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKEUWWE3FGPWv3mUTSgeDPpqAJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:83:d7:d1:e4:9b:d6:7a:63:65:fa:dc:03:de:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca1145961371463d6bf79944d281e0cfa6a009d
Validity
Not Before: Mar 28 03:01:15 2026 GMT
Not After : Mar 29 03:01:15 2026 GMT
Subject: CN=4451cffe7e43901f2c81a6cd56586fde12ead60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:27:10:ab:7e:5e:e6:fa:48:d8:9a:8b:3e:
28:d6:f2:01:c4:5f:c5:a4:79:78:2a:5c:da:24:e9:
cb:99:dc:79:fa:02:90:43:30:03:51:b0:fc:07:84:
2f:58:42:f3:5c:6f:66:02:71:8d:f6:8c:e1:07:ee:
72:53:10:ea:b4:06:6c:cb:a6:01:ef:46:c7:5b:a9:
c2:8d:7a:cd:ee:8f:cd:8e:b3:bc:84:0d:8b:6f:e7:
0f:07:ef:83:fe:dd:00:8e:76:ab:96:c7:96:b8:d8:
dd:8b:1f:32:49:0d:d4:42:8b:eb:3d:67:30:7f:2a:
bb:c3:14:8f:19:41:c0:ae:80:d9:a5:1c:05:78:bd:
fc:a7:c8:6a:a2:45:6f:04:fe:d4:61:ff:ca:4c:be:
79:0f:45:6f:0c:c2:b0:17:6f:9e:c8:7e:9a:0d:0f:
ed:89:c4:3e:4b:d0:de:9f:98:60:10:c1:e7:86:1a:
94:33:3b:fd:3b:0a:c5:82:1f:c6:b4:43:05:0d:39:
9e:3b:71:49:b9:81:1a:fd:37:34:cb:4e:7d:0c:b9:
84:1f:c7:8a:02:4d:18:7a:d9:f7:3a:d0:ca:dd:0b:
69:03:73:a1:a2:1a:67:45:95:b8:4c:41:2e:3e:85:
86:97:74:10:f7:5e:0d:ea:8d:46:1c:50:38:98:65:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:51:CF:FE:7E:43:90:1F:2C:81:A6:CD:56:58:6F:DE:12:EA:D6:0F
X509v3 Authority Key Identifier:
keyid:6C:A1:14:59:61:37:14:63:D6:BF:79:94:4D:28:1E:0C:FA:6A:00:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKEUWWE3FGPWv3mUTSgeDPpqAJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/142e24-aaaf-4d35-9c0f-d81c77ab0c43/1/bKEUWWE3FGPWv3mUTSgeDPpqAJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/142e24-aaaf-4d35-9c0f-d81c77ab0c43/1/bKEUWWE3FGPWv3mUTSgeDPpqAJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:44:da:62:85:43:7b:a1:12:11:e7:4d:b9:e4:a7:26:20:c4:
b1:f0:fb:15:2b:98:0d:d9:9e:c7:76:63:f3:9e:c9:23:39:1d:
43:b0:0e:24:13:d6:3f:9c:b3:c7:fa:ae:ab:52:30:21:64:5a:
da:70:e7:be:3d:a9:68:97:b1:8a:26:a3:25:0c:08:61:51:1d:
9a:5e:a2:86:6c:30:5c:d6:0e:37:a3:ac:69:0e:38:e8:ba:af:
96:98:a7:7e:14:f3:13:c1:3e:5f:f1:b7:54:3f:b9:1c:b4:36:
50:f2:fb:78:59:80:7f:16:f9:2a:1c:c8:8b:65:0b:7f:4e:f1:
f8:2d:b3:be:16:b5:3b:45:7b:38:13:4c:ec:a7:02:93:63:63:
d3:45:07:a3:df:7c:3e:79:29:74:83:5a:4f:ed:6c:fd:59:cf:
12:2f:24:14:b5:36:75:8c:73:87:c8:99:8b:8c:3c:d2:e2:2c:
fa:16:1b:be:bc:33:0e:4d:c2:89:48:74:43:66:70:50:c5:aa:
5d:5b:89:3f:0d:b0:43:51:6c:d5:d1:7e:94:5a:55:42:61:bb:
a0:8f:e5:49:4b:14:10:7a:fc:cd:2a:e9:41:66:5d:be:73:0e:
6c:f3:94:4e:34:68:dc:fc:26:0d:2f:6a:21:29:6a:a6:61:2d:
4a:1a:8b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:28:06 2026 by rpki-client