Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
File: bkIT73VQqt75F5PcnRS-h0ceTBI.mft (raw, json)
Hash identifier: yIKeaEL61BSpHTXgIvC5JgyHtkDNI5d9B3J2M6EmxNQ=
Subject key identifier: 6B:DD:9F:03:65:8E:C9:51:D5:E5:41:01:B8:C8:25:9B:37:EE:94:E8
Authority key identifier: 6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
Certificate issuer: /CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Certificate serial: 01A0C66A2E95CBCD5B7AE5E7C65A9501227D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
Manifest number: 026A
Signing time: Tue 22 Sep 2026 00:00:42 +0000
Manifest this update: Tue 22 Sep 2026 00:00:42 +0000
Manifest next update: Wed 23 Sep 2026 00:00:42 +0000
Files and hashes: 1: Aw9tXveR8BkFdyjJFk7_AmnfBwY.roa (hash: qR8wHawnouYoCzeQOakk7xfrAyq4fC7VhBjSSJYeEBQ=)
2: bkIT73VQqt75F5PcnRS-h0ceTBI.crl (hash: qKNAY5Tg8RTj0sSKlX0ukrRx+LPz7ww/SAkrRt5QEDM=)
3: t-pysyXW9DMYW3dIdVXL1kuI-lk.asa (hash: PkLiAsSP6O1ZogB6nCzsRUHVv6ZGFXVfkqaqouAY69U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:2e:95:cb:cd:5b:7a:e5:e7:c6:5a:95:01:22:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Validity
Not Before: Sep 22 00:00:42 2026 GMT
Not After : Sep 23 00:00:42 2026 GMT
Subject: CN=6bdd9f03658ec951d5e54101b8c8259b37ee94e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1b:83:b1:b6:f7:37:ed:cb:20:fe:6d:09:00:
6b:04:bc:e9:73:b8:ea:ab:76:a3:8e:bf:2d:d8:f0:
cd:98:ab:dc:6c:3e:62:21:f9:81:03:ce:9a:49:87:
c2:b3:50:f8:df:c3:13:c0:12:03:37:4d:da:1b:3e:
3b:1f:97:71:61:ac:1d:08:a8:52:d8:2b:a8:00:67:
aa:a0:1f:a3:4b:63:22:bd:7d:9a:aa:5a:70:7e:9d:
5b:1d:03:8f:5e:56:a1:1f:76:3d:ff:43:ae:21:ea:
fa:a7:82:55:13:65:55:94:3f:81:ea:68:5b:b8:19:
b9:9e:73:76:a0:10:98:72:00:2d:4d:db:4d:4d:53:
7d:d1:31:4a:ef:2d:6d:54:c7:ae:69:0d:a4:eb:e2:
fe:67:b4:28:ee:b5:22:b1:10:fc:21:e0:f2:45:68:
c1:09:35:b1:6c:fe:eb:ea:83:36:a6:b8:51:db:07:
e2:5f:d2:dc:e6:79:bd:89:45:1a:03:23:aa:ba:e4:
59:c0:95:af:4b:d7:c1:6f:cf:7a:1a:18:da:f5:49:
17:db:f5:2f:a3:f2:0b:a6:9f:42:01:8e:d0:bc:9f:
58:c2:84:a0:68:8e:16:38:44:08:34:7a:7c:d5:89:
26:cc:96:00:b6:b2:6e:5e:e1:9b:7c:7f:25:8b:6d:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DD:9F:03:65:8E:C9:51:D5:E5:41:01:B8:C8:25:9B:37:EE:94:E8
X509v3 Authority Key Identifier:
keyid:6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:09:9a:4a:5c:ee:c6:1d:d9:3a:78:da:45:1c:3e:ab:d7:b6:
f8:c1:1b:be:4f:9b:23:5b:f8:58:cd:5c:5e:19:1d:c2:5c:66:
be:7c:c8:e5:0a:6d:70:00:6d:df:f2:4d:5a:27:0f:80:96:80:
30:14:b4:ec:32:62:a8:78:95:5a:e0:8b:77:da:58:15:1f:ba:
93:3d:0e:50:59:73:18:c6:cf:de:05:5f:61:57:7b:32:2d:12:
17:d4:2b:fc:58:0d:d7:5a:74:62:c2:9e:5d:02:86:cb:94:3b:
b5:d3:51:6d:ca:c4:a4:8d:5a:df:6a:52:ee:bf:95:a6:19:a3:
18:de:d4:ca:10:7e:42:e5:b6:d0:91:8a:fd:ed:e0:59:f3:7d:
4e:15:22:60:09:09:62:12:22:44:9e:cb:eb:0d:99:ba:8c:b0:
52:bf:e5:32:82:07:3b:34:9e:80:b3:d3:81:a7:fd:99:bb:a5:
80:7d:bf:17:7f:e0:d2:66:32:da:c0:65:1f:ba:d1:0d:b5:04:
2a:72:3b:c5:0b:11:36:00:89:52:9b:d0:b8:01:3b:03:13:1b:
9e:e6:8a:e9:4e:29:be:8c:67:cf:90:ca:21:f0:95:2a:e0:c9:
61:29:a5:e5:ea:ea:f7:82:bd:0e:0c:99:bd:03:a5:01:0a:f5:
46:ba:43:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:04:26 2026 by rpki-client