Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
File: bkIT73VQqt75F5PcnRS-h0ceTBI.mft (raw, json)
Hash identifier: YBon3u9t8cODj2xjFU7kQKuX4ehCTHFjWuae0lYQoLw=
Subject key identifier: 9F:D5:A4:CA:C4:CD:76:24:82:E4:64:0E:19:38:62:05:4F:1E:31:8D
Authority key identifier: 6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
Certificate issuer: /CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Certificate serial: 019CA78EDC3A0332C0B94C06C80FE6663DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
Manifest number: 47
Signing time: Sun 01 Mar 2026 04:01:23 +0000
Manifest this update: Sun 01 Mar 2026 04:01:23 +0000
Manifest next update: Mon 02 Mar 2026 04:01:23 +0000
Files and hashes: 1: Aw9tXveR8BkFdyjJFk7_AmnfBwY.roa (hash: qR8wHawnouYoCzeQOakk7xfrAyq4fC7VhBjSSJYeEBQ=)
2: YdkB7DJ0vzC2DF1bGjsVkqImbJY.asa (hash: N2GRq0IColjaIvdhm3nHxdbYRQhr4pwGW38LFrYugKs=)
3: bkIT73VQqt75F5PcnRS-h0ceTBI.crl (hash: BrNfSzh/xOr4arFzTMVQNVWHdp2rdo3J8KrD7aHh3oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:8e:dc:3a:03:32:c0:b9:4c:06:c8:0f:e6:66:3d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Validity
Not Before: Mar 1 04:01:23 2026 GMT
Not After : Mar 2 04:01:23 2026 GMT
Subject: CN=9fd5a4cac4cd762482e4640e193862054f1e318d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:c6:45:3d:83:55:35:d2:d2:5c:57:0d:b9:
65:23:03:f5:3d:3a:2e:1e:e3:d7:4f:67:26:6a:2a:
be:54:a7:e0:3c:2e:40:03:f3:d4:c0:02:6f:88:06:
47:49:63:84:6c:7e:a6:1a:fe:27:71:15:f9:02:81:
3e:b6:46:ca:98:83:c3:e6:8a:a7:4c:ef:d3:54:9f:
b0:1a:02:cf:bd:5b:05:d4:04:92:98:3c:77:04:9e:
eb:a2:4b:be:27:ec:24:73:2f:29:57:ab:47:6d:d3:
09:b4:7c:64:18:57:55:5c:9b:14:d4:88:db:64:be:
13:22:8d:60:9a:0a:1f:05:60:a2:59:ae:99:bb:2f:
05:86:02:1e:5e:07:6e:8c:cb:72:ab:b2:2b:d4:3f:
1d:6e:2b:6b:43:81:d6:0c:f4:39:c3:06:c9:7e:86:
d0:48:74:25:86:29:42:7c:4d:c8:77:a7:05:62:47:
5c:0c:ab:02:fe:80:3d:b9:9d:b6:49:a8:df:9a:a1:
4b:a4:a3:ef:e9:4a:58:67:aa:6a:8b:dc:43:1d:ea:
99:e2:31:aa:90:9f:e4:ff:71:ad:4d:4f:c2:80:a1:
80:a4:97:55:8c:4f:e1:ff:86:09:d6:85:95:ce:1d:
29:da:aa:f4:4e:a7:f3:26:09:a6:99:a0:0a:02:0a:
c7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D5:A4:CA:C4:CD:76:24:82:E4:64:0E:19:38:62:05:4F:1E:31:8D
X509v3 Authority Key Identifier:
keyid:6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:38:99:db:f0:2a:38:96:b3:78:c7:84:5c:6e:5d:b0:80:e6:
e7:7f:98:0b:6c:9f:3b:40:82:67:e1:a9:34:2b:63:ee:52:f2:
e6:bf:08:2f:d7:01:af:1f:15:b3:fd:40:f1:b4:64:97:ca:81:
cb:00:4f:a9:49:14:60:65:21:71:dd:e1:df:57:b8:59:69:82:
1d:a2:20:25:6e:6b:37:94:df:48:96:68:ea:7b:94:0d:46:7a:
f3:91:7b:20:47:05:64:0f:2d:74:1b:33:bc:f1:c2:da:48:55:
87:c5:f9:97:d4:0b:29:98:6a:fa:75:84:c6:14:55:1f:63:e6:
7b:98:2e:6e:2e:e1:10:b1:de:1a:53:c6:5f:6e:75:cf:f4:52:
7c:39:9b:a3:08:63:47:96:4e:6a:83:a0:45:c9:14:40:b9:9c:
01:bf:6f:38:24:a9:16:d5:1f:54:12:22:df:94:c0:c3:a5:0f:
7d:fa:7f:c3:0d:4a:c6:c8:fa:61:ef:70:04:c5:08:38:f2:5c:
59:6f:f1:91:28:14:a2:13:79:2f:f9:dd:b9:a1:64:c7:94:97:
16:c3:9c:95:71:56:4e:0d:da:8a:ac:bb:c6:3f:af:a4:68:ba:
7e:43:ab:21:92:e9:54:95:b6:5e:c6:71:d2:29:3f:c9:88:af:
f5:f3:ff:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:32 2026 by rpki-client