Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json)
Hash identifier: hx4Spon1T1hx6APFxr0N89wsjzkvhXdRKPaw7H53eBQ=
Subject key identifier: E5:D1:59:5D:4E:38:7F:76:E0:59:71:4F:42:47:85:DF:86:52:A8:6B
Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Certificate serial: 019CACEB6772F34CFC556DE303EDB9642CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
Manifest number: 0E11
Signing time: Mon 02 Mar 2026 05:00:34 +0000
Manifest this update: Mon 02 Mar 2026 05:00:34 +0000
Manifest next update: Tue 03 Mar 2026 05:00:34 +0000
Files and hashes: 1: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: euvHqvSTwfkt/1O/GwfODjIMei6bcRhPddZazbRtBVg=)
2: fYQ8diFS0pMi17AAJonCpFXTGqg.roa (hash: IlQw7JdR5Y+EO+F9R5RY7SSoodskPtpA7HFrW9NLQp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:67:72:f3:4c:fc:55:6d:e3:03:ed:b9:64:2c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Validity
Not Before: Mar 2 05:00:34 2026 GMT
Not After : Mar 3 05:00:34 2026 GMT
Subject: CN=e5d1595d4e387f76e059714f424785df8652a86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:93:27:53:76:ef:9f:cd:fd:f1:f9:a0:17:
41:09:47:57:d8:0a:5e:d2:9b:4e:81:31:23:d3:77:
01:c5:3e:2c:cc:47:1d:39:25:a4:90:91:91:ba:80:
6a:b5:1c:33:0b:39:05:1f:9d:61:03:0c:9e:36:4b:
fc:c2:3e:34:18:3c:8c:a5:7a:be:c8:c0:6e:06:56:
39:91:5a:ae:1c:ee:5d:10:cc:02:e5:51:49:d3:c2:
94:a1:47:e9:01:4e:02:12:44:a3:29:53:a4:a2:ad:
88:f7:a1:3b:78:b2:f0:f7:08:02:f5:58:31:c1:65:
40:7a:14:0a:8b:2c:4b:c9:17:11:3a:12:95:28:81:
ab:f7:1b:aa:1e:8d:eb:56:99:6f:b7:3c:dd:16:b0:
be:ed:9e:93:e0:e5:1a:d7:0e:3d:76:ae:71:e5:8d:
b2:49:ec:5c:56:f4:7b:b0:82:ff:4d:04:e0:6f:da:
a5:ba:5e:1f:64:13:91:9a:7a:ba:a9:81:80:24:f0:
83:d2:9c:73:6c:eb:bb:2b:53:0d:84:63:2b:1f:9a:
e2:bd:c1:ae:83:8c:4d:49:98:67:64:6c:1b:d8:41:
d0:92:66:17:f9:4f:e1:dd:e9:e1:5d:08:c3:ee:4b:
01:4b:d5:c4:6b:4d:a0:4f:9a:6b:28:54:bf:30:98:
87:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D1:59:5D:4E:38:7F:76:E0:59:71:4F:42:47:85:DF:86:52:A8:6B
X509v3 Authority Key Identifier:
keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:20:40:07:33:c2:b7:7a:5e:25:4d:19:f4:d9:7a:91:22:30:
5d:68:42:f5:79:aa:24:49:fc:2a:c2:a6:39:5e:27:06:4d:f1:
ab:5e:c4:06:15:55:61:a3:bf:ad:21:64:f5:2c:3f:9d:5b:0b:
2e:49:4f:1d:a2:a0:c3:e7:37:09:42:76:3c:5e:a5:ae:65:e6:
8a:d3:34:1d:18:bc:81:6a:36:c2:e4:0d:ae:b3:73:cb:03:df:
0e:6a:c8:e0:bf:36:f8:a7:2c:15:25:e5:88:b9:71:81:88:57:
07:fc:b1:87:42:8c:3c:26:7e:67:69:5b:a1:a5:30:15:31:2e:
50:09:39:c4:ad:05:8c:f2:3d:a9:8b:64:2f:60:fe:bc:f9:d7:
e5:7a:a1:f1:cd:e0:1a:f9:8e:12:9d:c6:c4:2a:bc:b3:07:e0:
2b:d7:bc:0e:35:7e:0b:18:3c:69:63:fe:af:8b:5e:3d:a9:c9:
ff:23:f6:0d:0b:9e:a6:2a:d4:b2:ea:69:78:04:86:09:b1:70:
ce:3e:8f:b5:95:3f:10:01:3e:dd:14:d1:ec:67:1c:ce:e0:26:
b3:8f:9c:b4:82:5f:43:cd:0c:ac:4b:1c:21:39:b5:de:2d:74:
8a:6a:3a:0a:42:f6:e7:e6:e4:25:4f:11:f2:4a:18:43:f6:38:
58:2c:ca:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:37:52 2026 by rpki-client