Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
File: bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft (raw, json)
Hash identifier: 700KAMjZdu+DrAf/pffuonCnbUwpq1dfT+usjZ4lWY0=
Subject key identifier: 17:5D:96:99:56:FB:14:B0:37:52:9D:8D:2E:55:05:D8:54:75:7C:AD
Authority key identifier: 6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
Certificate issuer: /CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Certificate serial: 019D2960D38FAE16D1FFE671B15F55C7BEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 09:01:44 +0000
Manifest this update: Thu 26 Mar 2026 09:01:44 +0000
Manifest next update: Fri 27 Mar 2026 09:01:44 +0000
Files and hashes: 1: 7hearCPqGkH82yrPNdhtkZ4kgBM.roa (hash: 1K1XiEzCyji1A9po78V8w/DyD+zeqIlOg07kZeCGl6g=)
2: bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl (hash: aLMsBWW7uaieqYXQgBmJqS+AVyM2ApJwuYYSxAsNLYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:d3:8f:ae:16:d1:ff:e6:71:b1:5f:55:c7:be:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Validity
Not Before: Mar 26 09:01:44 2026 GMT
Not After : Mar 27 09:01:44 2026 GMT
Subject: CN=175d969956fb14b037529d8d2e5505d854757cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:55:4b:d9:69:47:fa:6d:75:f3:23:47:66:18:
3f:a0:fc:ca:66:a1:a8:1c:96:51:dc:fa:7c:6e:54:
c5:80:c8:d9:46:1c:a5:e3:93:f5:f1:ed:93:aa:db:
16:c9:43:24:51:82:02:2a:0c:b2:7c:30:d6:87:0f:
fb:7b:c8:41:dd:7c:9b:51:91:7a:6a:9f:c1:64:25:
e3:3d:ae:da:0f:d4:ea:02:61:81:09:79:1e:b1:ab:
5c:94:58:df:41:a1:54:dd:f8:e4:7d:f4:ca:99:d2:
8f:90:67:82:76:e9:80:77:91:85:fb:e0:36:71:45:
b2:24:35:0c:7d:8b:0a:64:01:30:36:75:44:b5:d4:
83:09:a6:92:8e:ba:dc:01:6c:1d:d2:89:b1:65:1e:
ac:da:83:53:0e:b0:2d:5b:28:88:85:0f:0d:c9:d5:
2f:56:db:9c:16:dc:af:2d:56:1a:cd:b2:46:d1:9b:
2a:ab:11:43:23:7d:16:6b:2f:02:e5:44:59:67:4b:
b0:1a:7d:10:80:ea:5e:1a:a5:38:82:71:93:7c:08:
bf:06:80:d1:d4:10:b1:18:86:d1:65:fa:e9:4e:91:
b2:db:c5:a2:9a:fe:81:ab:cc:cf:f0:de:13:f3:2c:
d5:76:78:33:b2:84:c3:bb:a3:55:78:03:b8:1b:b6:
69:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5D:96:99:56:FB:14:B0:37:52:9D:8D:2E:55:05:D8:54:75:7C:AD
X509v3 Authority Key Identifier:
keyid:6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:dc:fe:5e:0f:f9:5a:50:a8:c6:17:f2:50:70:c7:47:26:1e:
1d:89:8a:da:86:89:d3:b4:1c:f4:76:7c:41:2f:b9:8f:f5:0b:
32:35:18:e8:09:46:27:9c:01:cc:f0:5f:04:1f:ca:08:d1:27:
6e:ab:eb:24:8a:dd:2b:4a:82:b0:74:34:0d:ba:9d:78:c7:99:
47:21:99:e3:dc:dd:da:28:d1:ae:2b:32:83:6f:4a:3e:67:dc:
cc:e1:87:e8:ed:13:cd:b0:40:79:38:29:02:07:c0:84:5f:66:
e2:c3:8d:5c:80:c8:be:dc:8d:43:ef:2d:ec:5b:c3:e7:a4:0f:
78:9c:9d:a1:35:2c:a6:39:d5:c8:fe:cc:a5:a0:2b:3b:00:ce:
11:5d:8b:94:68:86:b6:40:d8:94:51:5b:a9:6b:b0:3c:7c:56:
56:ba:14:39:5c:a0:4d:11:25:d0:89:4c:c0:56:80:a7:c7:9d:
09:b2:4c:8f:e5:42:6c:36:62:2f:44:7d:62:7e:7a:32:67:e4:
66:d2:f6:7e:7a:6c:9c:e1:70:4c:ff:69:b6:ac:ac:47:64:2f:
8e:30:c6:b9:b2:a1:d6:1f:71:b8:81:76:dd:1b:24:43:6c:aa:
85:ea:d7:6d:44:57:ba:97:ce:2e:d6:09:4e:5b:df:de:9c:ca:
f0:8e:5d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:32 2026 by rpki-client