Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
File: bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft (raw, json)
Hash identifier: tJXHTU4hpFOcd7jDguhmL7BQHQUcvigz0YDQaFZ0pmM=
Subject key identifier: 8C:AF:BA:3B:F3:4A:B7:52:D0:1B:15:B2:0C:10:7A:4A:70:07:12:13
Authority key identifier: 6E:44:28:F7:F1:7B:19:C1:50:68:CA:B9:39:D3:77:94:0E:8D:4C:70
Certificate issuer: /CN=6e4428f7f17b19c15068cab939d377940e8d4c70
Certificate serial: 019D97E2556F2F3F4ACA342AFB87CCCACE4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
Manifest number: 0672
Signing time: Thu 16 Apr 2026 20:01:25 +0000
Manifest this update: Thu 16 Apr 2026 20:01:25 +0000
Manifest next update: Fri 17 Apr 2026 20:01:25 +0000
Files and hashes: 1: N6W-eQiPRjqw3-6I_QmctyffMuY.roa (hash: Zu+HeLoruNEi/OX9srfF84zysLGJyEcbFNJHAud3tiU=)
2: bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl (hash: 6F1pdSVtl0dufmW/yIH0YubEmh6ZXiO7W2eSUJxVWDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:55:6f:2f:3f:4a:ca:34:2a:fb:87:cc:ca:ce:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4428f7f17b19c15068cab939d377940e8d4c70
Validity
Not Before: Apr 16 20:01:25 2026 GMT
Not After : Apr 17 20:01:25 2026 GMT
Subject: CN=8cafba3bf34ab752d01b15b20c107a4a70071213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:9d:b9:4d:10:be:46:5c:c1:61:8a:13:06:
59:f3:bc:87:95:a7:e6:38:50:f7:c4:d9:66:1c:85:
2d:0b:8e:8c:b8:b7:a3:ee:4a:30:99:a7:99:46:71:
71:9b:02:ad:10:f7:40:a9:e9:6f:d2:8c:6c:0b:ce:
ae:1a:e0:eb:4e:d5:e4:df:2c:8b:09:b9:cd:d4:6e:
80:08:af:4b:eb:b3:65:ff:2e:e7:ac:1b:4a:79:22:
5b:32:04:52:2d:0b:db:bc:a9:fa:ad:6a:5a:58:a1:
e2:c3:0d:51:76:74:d9:e6:7e:a2:93:4b:ab:8f:cd:
e5:52:2f:c3:28:fd:ac:04:f9:b0:18:f1:c7:50:fb:
05:c7:d6:07:a7:7c:fc:ad:3e:28:6c:a4:aa:79:12:
31:25:ec:a3:64:52:5e:46:16:91:d9:3a:d6:e7:57:
5b:42:6f:49:de:40:4f:90:31:f0:78:16:60:2e:d2:
48:76:c8:b1:60:97:f6:02:bb:c4:a6:79:2f:4f:75:
fd:a6:95:fc:35:ad:04:88:88:ee:d9:ee:27:9e:c2:
e4:b3:1e:17:23:e2:67:91:ab:ee:e3:e8:31:eb:2c:
31:ef:f5:94:fc:3d:b9:c5:2b:ff:62:b7:1f:fa:18:
b5:c2:91:58:92:f5:2f:eb:eb:4b:38:f3:83:7c:fc:
14:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AF:BA:3B:F3:4A:B7:52:D0:1B:15:B2:0C:10:7A:4A:70:07:12:13
X509v3 Authority Key Identifier:
keyid:6E:44:28:F7:F1:7B:19:C1:50:68:CA:B9:39:D3:77:94:0E:8D:4C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5b:ea:c2:12:76:7c:31:ee:26:8c:c8:0d:3b:46:29:0f:f9:
68:a7:96:b7:46:10:db:a7:d6:74:c2:78:92:ff:ff:c8:0f:14:
76:b0:d0:23:d6:44:38:f8:fb:8f:3c:e4:74:40:7c:6c:04:60:
bf:ff:f6:e2:a7:30:27:ed:34:13:5d:8d:1d:5a:1f:8a:87:09:
c1:c2:92:72:86:99:d2:1b:7e:27:9a:a3:21:0f:6d:a1:1a:8b:
c0:b9:60:47:8a:27:a6:a1:27:b8:a3:b2:23:d1:7b:03:7f:e8:
92:aa:6a:89:c6:98:3d:db:72:84:cc:25:b4:ee:51:20:33:a3:
48:80:88:8f:b0:32:45:9b:17:65:51:36:b9:31:c0:9d:39:5c:
aa:25:ab:14:6e:ae:3a:2c:71:76:7d:bd:40:7f:6f:14:e9:d2:
2d:7a:df:9e:f2:70:83:aa:36:57:08:2b:4e:ba:2b:68:97:c2:
45:e8:45:12:03:9f:21:1d:3c:a1:02:fc:82:19:cc:fd:d3:1d:
cf:1e:7b:61:7f:53:1a:c4:46:9d:bd:d9:10:31:42:f2:0e:9a:
3a:65:61:da:78:cc:c7:99:34:6a:8d:c6:26:a7:08:49:2f:4f:
c3:42:ec:77:96:58:3a:2e:0c:15:be:2b:9b:eb:3c:e4:ac:b5:
8d:56:2a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:30 2026 by rpki-client