Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
File: bkIT73VQqt75F5PcnRS-h0ceTBI.mft (raw, json)
Hash identifier: W5eYztPu3cNDi3bXo9Ylag89EWueMCy8XUwaU1WcPXE=
Subject key identifier: 5B:DA:FF:2C:BB:BA:71:ED:41:04:BF:B2:8A:92:24:71:9D:6B:31:48
Authority key identifier: 6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
Certificate issuer: /CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Certificate serial: 019D9D3F39E7EDC9B36083D5765916D4365C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
Manifest number: C7
Signing time: Fri 17 Apr 2026 21:00:59 +0000
Manifest this update: Fri 17 Apr 2026 21:00:59 +0000
Manifest next update: Sat 18 Apr 2026 21:00:59 +0000
Files and hashes: 1: Aw9tXveR8BkFdyjJFk7_AmnfBwY.roa (hash: qR8wHawnouYoCzeQOakk7xfrAyq4fC7VhBjSSJYeEBQ=)
2: bkIT73VQqt75F5PcnRS-h0ceTBI.crl (hash: qJTVGnxJT3K0A2WGqsWNFTNf3HtJcjBCryS9Jmcj+Zs=)
3: t-pysyXW9DMYW3dIdVXL1kuI-lk.asa (hash: PkLiAsSP6O1ZogB6nCzsRUHVv6ZGFXVfkqaqouAY69U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:39:e7:ed:c9:b3:60:83:d5:76:59:16:d4:36:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Validity
Not Before: Apr 17 21:00:59 2026 GMT
Not After : Apr 18 21:00:59 2026 GMT
Subject: CN=5bdaff2cbbba71ed4104bfb28a9224719d6b3148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:97:42:c3:3b:44:07:1e:55:e2:52:56:d3:5e:
14:02:27:8d:dd:49:58:25:1b:14:bf:92:6e:03:b4:
c6:9a:0d:98:65:27:fa:07:c5:ad:25:99:34:f1:c3:
3b:d3:69:21:26:cc:28:04:f6:a7:b6:71:7d:23:1b:
33:a5:d4:58:b9:e4:0d:96:57:5c:2b:d0:9f:2f:f5:
66:57:b4:4d:f7:fe:91:2f:7d:0b:f4:82:2c:f1:9b:
1b:d9:9a:1f:9e:da:fb:b9:a0:78:ea:4d:c9:c7:ca:
83:5a:f8:0a:eb:27:4b:3a:ec:6c:48:c0:ce:8b:a1:
49:bb:d6:53:c8:ae:27:66:ab:87:79:2f:4b:e1:b0:
8a:ef:96:a8:7f:c8:93:58:a2:3b:1d:93:38:dc:93:
a6:23:6e:92:0f:fc:92:ba:e1:32:ae:5f:b3:c8:58:
f8:53:f4:95:9f:a0:58:51:fa:6b:5b:a1:d4:24:84:
cc:fd:bd:09:a0:ba:70:5d:77:58:a1:3d:74:10:5b:
2e:85:4f:08:cf:76:50:e4:cd:89:2e:4a:93:7f:1b:
c8:c3:b9:17:93:38:6e:f5:80:c9:b1:5a:24:09:14:
d7:ce:6f:65:c0:16:8f:49:dd:c1:b3:ca:67:45:2e:
57:b1:df:7a:4d:4e:ba:34:06:7c:a1:37:f4:b2:81:
9e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DA:FF:2C:BB:BA:71:ED:41:04:BF:B2:8A:92:24:71:9D:6B:31:48
X509v3 Authority Key Identifier:
keyid:6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:52:18:08:97:40:95:4f:d6:9f:ea:4f:fb:02:95:9e:1c:90:
42:e4:9e:a0:a3:7f:e7:e1:b5:df:e8:93:57:b7:ce:73:26:3f:
e1:57:09:75:89:df:d1:d0:bd:02:d0:c8:45:b0:f7:12:e6:5a:
1b:67:e2:53:b7:3a:96:f4:0c:96:21:4a:a9:01:6e:03:b7:3a:
a0:a8:08:bd:cd:60:c4:5d:5c:a1:fc:ae:7d:e7:1d:25:39:7f:
ea:1d:66:22:17:00:c8:fa:3c:1f:05:f1:24:3d:ac:8d:28:1d:
01:86:bc:00:2e:03:af:7b:d6:38:94:89:e7:dc:2f:5e:89:76:
8d:a0:a9:29:75:b3:9d:95:a2:7b:d8:4d:83:6e:0a:1f:29:1e:
3b:8f:d4:d8:ef:ab:50:ba:e2:65:28:9b:61:04:05:4f:df:e1:
cd:da:30:cc:22:ef:ba:19:0c:bd:b1:22:be:27:89:ef:95:a2:
fc:a3:8b:60:7a:22:59:f4:b5:89:6f:4e:58:89:28:c9:4d:c0:
c5:43:d8:b3:30:c3:10:66:bc:ea:85:82:0c:84:65:c6:05:a3:
e2:4a:15:2b:9f:77:88:e6:b8:e8:90:c1:55:44:67:ec:cc:f5:
a5:69:56:40:f0:0c:e4:20:da:18:ec:31:29:c4:3f:d8:6d:75:
46:88:6f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:36:34 2026 by rpki-client