Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
File: bkIT73VQqt75F5PcnRS-h0ceTBI.mft (raw, json)
Hash identifier: 4VsHNs9Dpmhsg3IaUX5K/WcEs8kONZ8hdSIm1Zrd16w=
Subject key identifier: 89:49:01:89:EB:1C:54:B8:9D:21:D2:F0:09:A9:43:41:82:2C:82:6F
Authority key identifier: 6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
Certificate issuer: /CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Certificate serial: 019FA8991FC17C33711438C24D9D51CDB40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
Manifest number: 01D6
Signing time: Tue 28 Jul 2026 12:00:35 +0000
Manifest this update: Tue 28 Jul 2026 12:00:35 +0000
Manifest next update: Wed 29 Jul 2026 12:00:35 +0000
Files and hashes: 1: Aw9tXveR8BkFdyjJFk7_AmnfBwY.roa (hash: qR8wHawnouYoCzeQOakk7xfrAyq4fC7VhBjSSJYeEBQ=)
2: bkIT73VQqt75F5PcnRS-h0ceTBI.crl (hash: /xVTVkP5KVep7YvbXm0eNrrQdmVRWliC2cwraZiqNbU=)
3: t-pysyXW9DMYW3dIdVXL1kuI-lk.asa (hash: PkLiAsSP6O1ZogB6nCzsRUHVv6ZGFXVfkqaqouAY69U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:1f:c1:7c:33:71:14:38:c2:4d:9d:51:cd:b4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Validity
Not Before: Jul 28 12:00:35 2026 GMT
Not After : Jul 29 12:00:35 2026 GMT
Subject: CN=89490189eb1c54b89d21d2f009a94341822c826f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:07:f4:d6:06:27:0f:cd:d1:b5:c7:c1:7c:
45:e8:0a:a9:5d:7e:33:2a:f9:59:49:bc:ee:cd:95:
27:2e:7f:88:78:de:0e:01:06:69:2c:a3:ae:b5:c1:
63:95:1d:a7:11:40:a5:da:29:62:d9:9f:58:8d:a5:
58:01:1a:cc:72:fa:c2:57:b6:1c:3b:a6:ce:6a:4b:
2a:d7:44:0e:ef:1a:2b:cf:81:b7:7d:0c:7a:57:4d:
00:aa:5a:6c:6e:c3:bb:c6:9f:66:22:3e:68:ed:2c:
99:0b:8a:ee:2d:7e:ff:bc:db:27:2d:31:d8:4f:a7:
ad:f9:54:2e:e7:42:1c:3b:06:38:4f:db:a2:97:e8:
9c:d4:a5:d6:bb:0d:dd:70:8c:86:62:c1:5d:98:6a:
8f:64:18:a8:72:57:a7:44:15:58:28:d9:53:ed:e2:
9d:74:dd:06:13:91:65:52:61:2a:7c:8e:ac:73:7f:
c9:3b:85:12:92:30:0a:23:5d:de:e7:54:2f:a7:b9:
82:e1:72:1c:42:e1:f4:43:e6:37:32:06:ae:38:7e:
02:0a:8c:8c:eb:64:78:be:f4:10:02:fd:ca:5b:ae:
0f:20:a2:08:21:44:2d:ff:5a:e6:a2:48:a6:f8:1a:
47:e9:3a:4d:04:b6:76:ff:bd:d2:d3:68:69:cb:f0:
e5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:49:01:89:EB:1C:54:B8:9D:21:D2:F0:09:A9:43:41:82:2C:82:6F
X509v3 Authority Key Identifier:
keyid:6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:54:13:6c:86:38:32:4e:53:b2:59:fc:1c:2f:00:ff:64:e7:
46:3a:d2:f3:7e:07:ea:43:45:de:21:5e:17:7a:5e:da:46:0a:
c5:7f:84:0f:73:52:df:b8:52:6d:78:f4:a8:99:0d:bc:09:ce:
a9:73:50:61:21:6b:8f:34:09:25:2d:c4:10:82:0e:cb:71:74:
ad:7e:59:75:ec:b3:84:91:7f:c9:7d:6e:fe:e8:d9:1c:fc:a8:
c3:b2:25:ad:31:7f:c7:bf:9d:c5:43:1b:9e:a3:a0:fc:51:16:
b9:6b:5b:81:f4:67:f2:79:d4:ed:be:78:f3:0e:5c:15:89:cb:
f4:33:af:bf:03:ef:ef:bb:b3:2a:eb:0e:e0:c0:5f:d8:ca:26:
a7:dd:7f:25:95:89:a1:32:e4:49:6d:ad:1d:bd:c6:70:77:64:
94:bc:08:8e:81:ce:8e:06:2e:4e:d7:50:db:fe:30:53:5c:9a:
cf:18:7b:9d:33:4f:f1:4d:de:01:13:55:7e:cc:6c:3b:71:67:
94:be:9e:97:48:ee:f1:b3:c0:59:96:9e:c8:62:23:21:99:ad:
fa:9e:2d:bd:09:95:14:6d:a8:da:11:ec:5a:36:a7:6c:ac:91:
00:d9:da:9c:9a:e8:fc:82:f6:b7:8b:76:aa:4e:2c:15:2d:92:
39:11:c4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:49:52 2026 by rpki-client