Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
File: bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft (raw, json)
Hash identifier: ScTwNf0GZbTcd0voUtZctzIkN8bGITT2ojkqfzDRmXA=
Subject key identifier: 22:A2:95:85:88:2C:9D:0F:C3:02:E6:FE:45:68:AE:14:50:93:D5:D5
Authority key identifier: 6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
Certificate issuer: /CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Certificate serial: 019DA30A85652BED563BB05297245E6C0A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
Manifest number: 18CC
Signing time: Sun 19 Apr 2026 00:01:08 +0000
Manifest this update: Sun 19 Apr 2026 00:01:08 +0000
Manifest next update: Mon 20 Apr 2026 00:01:08 +0000
Files and hashes: 1: 7hearCPqGkH82yrPNdhtkZ4kgBM.roa (hash: 1K1XiEzCyji1A9po78V8w/DyD+zeqIlOg07kZeCGl6g=)
2: bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl (hash: WsXGT0PX4QoNOgx48b7Cx3pwesqfPNGkcODdXkHh7cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:85:65:2b:ed:56:3b:b0:52:97:24:5e:6c:0a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Validity
Not Before: Apr 19 00:01:08 2026 GMT
Not After : Apr 20 00:01:08 2026 GMT
Subject: CN=22a29585882c9d0fc302e6fe4568ae145093d5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5c:30:42:1c:09:29:58:58:b2:ce:fa:0c:fa:
71:0b:d0:41:b8:59:ed:cf:96:1f:82:3b:df:08:dd:
5c:38:7d:b8:a4:55:96:22:27:7f:4d:e7:65:d5:f9:
8d:67:69:21:f0:72:70:f5:6a:e0:f2:9a:f7:13:a0:
5d:df:a0:4d:1e:dd:71:9c:d3:c6:33:44:1c:56:9b:
ac:fe:4d:94:99:90:15:e6:ad:93:a6:9e:ca:30:d9:
37:f3:62:db:c8:8b:d4:ae:89:f4:51:4b:7e:b5:19:
ca:b8:60:06:0f:00:8e:ff:d2:83:72:96:5b:ae:6a:
aa:7c:0a:2a:d8:09:36:ba:02:cf:cb:fe:e7:44:78:
4e:ea:5d:9e:89:61:35:a5:42:bd:48:d6:37:3a:a4:
c1:7a:cb:58:d3:61:e0:63:00:a8:58:77:78:85:b0:
d4:8f:bf:47:ad:d2:a1:d8:2a:61:48:56:29:e2:cc:
d0:99:88:b8:5b:74:a3:62:6a:58:f2:67:60:8a:bd:
23:60:2a:bf:de:98:03:20:a3:6d:f1:a7:11:28:03:
3d:c0:56:88:18:3a:42:18:8e:13:1d:cc:90:22:0d:
ff:0f:71:7b:7a:35:ab:25:ec:29:62:13:e9:2c:dd:
07:fd:16:9f:4e:e7:e2:34:bf:50:54:df:29:e6:fe:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A2:95:85:88:2C:9D:0F:C3:02:E6:FE:45:68:AE:14:50:93:D5:D5
X509v3 Authority Key Identifier:
keyid:6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:49:f9:30:0a:88:0e:34:f4:fc:80:1b:0f:d2:7f:73:3c:c0:
ee:95:be:da:dc:e0:a6:9c:fc:4b:51:bc:96:07:42:4f:d2:94:
55:f0:c1:7d:6a:c0:f2:35:02:b3:34:fd:f6:f1:c9:bb:4d:06:
60:ea:dc:f4:ae:af:ab:03:99:9b:03:67:1f:95:ed:ce:6a:85:
0b:68:34:79:0c:f0:54:c8:7f:57:7a:85:b4:f5:c8:9e:2d:c5:
c4:0e:7a:17:a4:63:5d:64:f4:38:29:88:cd:1a:71:47:95:ff:
a7:f5:b1:70:ca:00:e9:90:c8:10:fb:4f:c9:8e:e3:f9:91:42:
1a:43:e1:d1:7a:d7:77:09:69:78:b9:fb:5f:45:e8:b5:16:66:
b5:63:a5:89:cc:f1:4c:81:59:7d:a6:4f:0b:c4:05:ed:9d:45:
49:28:8f:0a:52:98:21:23:d7:47:f7:4d:d9:d8:f0:47:80:df:
d7:ff:75:3e:dc:60:ac:ba:2e:44:e2:84:f2:ca:a5:25:0c:ac:
d5:51:b3:34:b7:43:5c:a1:29:e0:64:65:a4:9b:39:29:d9:c5:
84:b6:89:4f:99:74:d9:47:f8:b6:34:b1:a4:f5:6b:d5:d7:4a:
c0:87:a6:e0:d4:6d:4d:42:14:fe:7a:09:66:20:0c:0f:89:c5:
1c:b8:11:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:27 2026 by rpki-client