Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
File: bseKTlkP6xA9XRu00HnGhBVZK_k.mft (raw, json)
Hash identifier: 8HUctXMd2iojYQUd2HAy5XJpOlhtsClU1RKqT0Hz2YQ=
Subject key identifier: CB:8C:C3:E1:8E:F6:81:5A:29:55:BC:27:33:00:E5:34:28:8B:A6:2F
Authority key identifier: 6E:C7:8A:4E:59:0F:EB:10:3D:5D:1B:B4:D0:79:C6:84:15:59:2B:F9
Certificate issuer: /CN=6ec78a4e590feb103d5d1bb4d079c68415592bf9
Certificate serial: 01A130A1C547E3C469DDC651C5429F6921E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bseKTlkP6xA9XRu00HnGhBVZK_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
Manifest number: 0117
Signing time: Mon 12 Oct 2026 15:01:10 +0000
Manifest this update: Mon 12 Oct 2026 15:01:10 +0000
Manifest next update: Tue 13 Oct 2026 15:01:10 +0000
Files and hashes: 1: HVmNUcJUz6eHLCWqv73qDc20l-I.roa (hash: Ku0nK986i55PU61Q1Y0z3xgl417ibJovalrFntQb3zE=)
2: bseKTlkP6xA9XRu00HnGhBVZK_k.crl (hash: CkJ8KPc1z5gTLFulbseW9RKqHAVrweIkgeMypXJFriA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bseKTlkP6xA9XRu00HnGhBVZK_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a1:c5:47:e3:c4:69:dd:c6:51:c5:42:9f:69:21:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec78a4e590feb103d5d1bb4d079c68415592bf9
Validity
Not Before: Oct 12 15:01:10 2026 GMT
Not After : Oct 13 15:01:10 2026 GMT
Subject: CN=cb8cc3e18ef6815a2955bc273300e534288ba62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:34:35:d8:80:f3:4e:1a:ae:22:31:35:51:af:
30:fb:46:78:58:87:6a:1b:f6:d1:c0:86:21:00:d5:
13:95:66:09:7b:36:d0:d9:e6:c3:d4:66:53:fb:83:
98:ba:76:53:78:2c:0a:0c:10:1a:4d:a6:96:d1:f7:
af:7d:03:d4:80:c9:03:03:b3:c3:e5:a0:ce:16:f2:
1e:2e:60:58:a1:f6:50:96:77:75:84:c0:c1:fb:5a:
1b:a5:0d:51:cb:7b:0b:d5:6b:ac:09:bb:b0:d0:0b:
ec:70:4f:bd:89:0b:5d:71:00:16:86:87:31:d1:57:
49:a2:c7:00:fd:9b:00:4a:4d:4d:5d:2b:ac:a8:9d:
94:61:7b:7c:4d:8b:61:7c:fe:00:74:c4:ec:1a:86:
3d:1a:c5:12:8b:de:76:27:97:6a:2f:50:7f:20:f3:
96:91:e6:6e:52:57:5c:55:66:07:48:45:b8:54:bf:
19:2c:86:5a:e2:9c:2d:10:4e:d2:ff:4a:5f:a8:b3:
14:62:fe:ef:3e:52:32:db:54:67:8a:95:46:08:9b:
7a:87:e2:e2:d9:f2:95:f4:e2:ae:31:f0:f4:48:5c:
7c:d1:22:22:28:ac:7e:d8:fe:d0:01:35:83:fa:c6:
85:0b:37:43:b5:8d:3a:73:22:0c:29:9a:ae:fa:b0:
88:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8C:C3:E1:8E:F6:81:5A:29:55:BC:27:33:00:E5:34:28:8B:A6:2F
X509v3 Authority Key Identifier:
keyid:6E:C7:8A:4E:59:0F:EB:10:3D:5D:1B:B4:D0:79:C6:84:15:59:2B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bseKTlkP6xA9XRu00HnGhBVZK_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e4:b6:32:e8:7d:c1:92:99:5f:b6:e9:ef:07:1e:f8:e2:f3:
34:8a:73:9a:45:52:71:69:d5:be:48:c1:a3:f6:d9:dc:29:17:
29:4b:7c:9e:6d:f0:25:cb:85:26:ae:fd:e2:2a:d4:a7:a4:d0:
97:9d:fc:14:98:0b:20:70:c0:41:ac:dc:0e:0f:5a:91:7d:02:
02:d3:21:ef:47:39:b8:33:e5:d5:28:f3:c9:28:ff:b6:3c:a7:
b7:c7:34:3f:06:30:8b:c6:e4:a6:b2:cd:8d:71:d9:b9:4f:a8:
58:3c:98:3b:85:d2:cc:c6:33:44:95:9d:93:fb:c7:f1:ca:13:
ed:75:7b:7b:90:ce:dc:cb:e5:d3:69:31:08:9c:e5:06:a4:04:
e1:ee:99:9b:a1:e8:21:fa:a2:c4:47:4f:14:2e:03:d1:da:f9:
e1:1e:e4:5a:99:5f:c4:ea:e0:b3:1e:d5:9d:60:b8:ce:53:71:
68:d8:59:64:be:62:f8:31:f1:ca:e0:c7:e8:3e:7b:77:20:58:
16:82:17:e3:74:0f:b9:7e:f0:4d:1a:07:49:4c:44:ca:23:44:
dc:be:70:01:3a:6a:5c:a7:f6:7a:a8:07:b4:a3:4a:e4:47:7f:
a9:3f:a2:80:55:79:e7:f7:80:8f:83:e9:3c:6d:14:dd:11:4f:
a6:48:39:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:22:54 2026 by rpki-client