Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json)
Hash identifier: ihXACxxh/245IXnvorA4Jj6mQAvhDLRVFaxyzPMR7Yo=
Subject key identifier: 66:95:2B:60:17:EA:2D:AC:8C:BE:71:12:62:EA:DC:59:8F:AC:A1:2E
Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Certificate serial: 019D9A75059084DD731C69B6A6105E59F28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
Manifest number: 0E8C
Signing time: Fri 17 Apr 2026 08:00:53 +0000
Manifest this update: Fri 17 Apr 2026 08:00:53 +0000
Manifest next update: Sat 18 Apr 2026 08:00:53 +0000
Files and hashes: 1: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: f1Okyoy5mLyRx2xmT5icKAxF33ye8fCJoxpnMBAiFPw=)
2: fYQ8diFS0pMi17AAJonCpFXTGqg.roa (hash: IlQw7JdR5Y+EO+F9R5RY7SSoodskPtpA7HFrW9NLQp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:05:90:84:dd:73:1c:69:b6:a6:10:5e:59:f2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Validity
Not Before: Apr 17 08:00:53 2026 GMT
Not After : Apr 18 08:00:53 2026 GMT
Subject: CN=66952b6017ea2dac8cbe711262eadc598faca12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ff:64:3e:cf:e8:e1:bd:8f:e4:fc:6a:39:1b:
7a:c3:b2:e3:4b:05:04:30:24:8a:90:58:b1:7c:fb:
4b:41:40:94:44:19:b7:30:97:bb:39:62:57:5b:b2:
02:44:1e:1e:a7:ab:1d:1d:0f:a4:62:1d:8c:cc:54:
8f:f2:ff:51:ea:81:6a:d6:1f:4e:a6:37:d3:eb:6a:
dc:6d:e1:e3:0a:2d:f3:75:c8:40:59:a7:6c:b8:5d:
c7:8d:b8:a2:83:e1:be:c4:29:1a:2c:25:63:da:22:
e2:26:39:2c:20:84:5e:db:df:71:56:ec:28:38:b4:
6d:75:24:7a:79:64:68:75:4c:14:9c:d8:ae:05:52:
9e:fb:ae:db:bf:01:31:3f:72:2c:10:8a:73:95:df:
dd:83:6b:b1:1e:ad:2d:ef:db:42:ec:bf:48:29:2b:
03:0c:a0:1d:0f:fc:ca:56:5b:9d:c2:6b:95:fc:73:
5c:0d:c2:c6:ee:c9:c3:73:e9:2c:97:3c:0f:44:7e:
f7:39:63:3d:c4:00:31:d8:e5:d1:56:d0:06:2a:c3:
dd:51:f5:d5:58:51:40:ab:74:bf:48:e1:cc:6a:98:
d1:f5:6a:c2:89:e5:54:78:e3:95:e6:c6:ab:ed:ad:
88:22:8e:62:26:98:7b:5a:18:93:d5:8b:b5:2b:3a:
2f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:95:2B:60:17:EA:2D:AC:8C:BE:71:12:62:EA:DC:59:8F:AC:A1:2E
X509v3 Authority Key Identifier:
keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d5:e0:1e:d2:d0:aa:bb:e2:f1:56:e5:25:a2:02:c3:c5:be:
84:b8:4a:01:24:01:60:88:d1:74:3b:7b:3e:ca:37:99:5c:b9:
44:76:a4:b7:ee:7e:bd:06:fd:26:eb:9e:1b:78:d1:3a:6d:4d:
e9:2e:d1:6b:8d:68:ea:d2:9f:33:32:9f:58:46:76:9c:ad:72:
a2:3d:30:65:2d:b9:35:b1:02:0c:e6:7d:9b:92:9e:e9:22:f7:
b1:59:d9:f6:1b:4b:1e:04:04:7c:db:20:7d:84:73:72:d5:08:
13:b0:82:14:b6:a2:48:f7:91:19:89:bb:da:c3:08:7c:8a:77:
c6:f5:fe:54:52:84:f4:dc:1c:70:68:b7:0f:ba:61:d3:91:b8:
05:48:dd:35:62:83:a3:89:10:00:2a:57:63:ec:89:74:fb:e0:
23:1c:bf:47:51:b9:d3:8c:47:37:41:3f:43:98:a7:a6:f1:f9:
d5:58:a0:37:a0:a8:cb:84:d6:5f:01:0e:b4:53:b4:29:1c:7b:
a1:e0:3a:38:e5:86:24:c8:98:ec:5e:7a:d2:64:3d:90:1e:8f:
e1:58:06:92:ca:01:f8:93:18:fa:7e:80:c0:40:b8:8c:c3:f1:
fb:7f:01:7d:a2:fe:54:1e:1a:c7:a9:e4:c7:de:c7:ba:8b:ac:
6c:5d:f1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:42 2026 by rpki-client