Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
File: bkIT73VQqt75F5PcnRS-h0ceTBI.mft (raw, json)
Hash identifier: iT+brWW9Sty6oB150adry7VkDe8ICh5EWOmpg+8eAmA=
Subject key identifier: 4A:D5:6F:96:9D:6B:7C:E0:F4:5E:EC:08:3A:31:F1:A7:88:92:62:3E
Authority key identifier: 6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
Certificate issuer: /CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Certificate serial: 01A03D4E1DE42C436C19D1918044424FB14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
Manifest number: 0223
Signing time: Wed 26 Aug 2026 09:02:04 +0000
Manifest this update: Wed 26 Aug 2026 09:02:04 +0000
Manifest next update: Thu 27 Aug 2026 09:02:04 +0000
Files and hashes: 1: Aw9tXveR8BkFdyjJFk7_AmnfBwY.roa (hash: qR8wHawnouYoCzeQOakk7xfrAyq4fC7VhBjSSJYeEBQ=)
2: bkIT73VQqt75F5PcnRS-h0ceTBI.crl (hash: 30k0RfSOj4kfvLrV/4I65H27aePgB9RaVPjkd9jD4mU=)
3: t-pysyXW9DMYW3dIdVXL1kuI-lk.asa (hash: PkLiAsSP6O1ZogB6nCzsRUHVv6ZGFXVfkqaqouAY69U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:4e:1d:e4:2c:43:6c:19:d1:91:80:44:42:4f:b1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Validity
Not Before: Aug 26 09:02:04 2026 GMT
Not After : Aug 27 09:02:04 2026 GMT
Subject: CN=4ad56f969d6b7ce0f45eec083a31f1a78892623e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:d7:60:3d:2e:9a:bc:3d:8c:f2:25:05:e1:
80:4b:39:fd:a0:3a:12:26:96:ee:1b:a4:17:88:27:
60:f5:d3:87:fa:26:b4:6a:d1:05:fc:18:e9:96:6a:
bd:e0:40:4f:f8:fc:14:ea:f5:f8:b3:17:38:c3:9a:
a7:d1:17:28:a8:9c:1c:99:97:f7:25:7a:9c:bf:22:
e8:12:f4:f0:10:1b:b5:ab:ca:b8:f3:be:a4:4c:a8:
ad:82:e3:75:f7:c0:70:f9:44:fa:5f:91:e9:44:a6:
f9:46:88:99:08:01:00:5f:07:82:12:0f:5e:e9:db:
69:5c:53:33:f8:15:d7:6e:bc:9d:f4:e6:ae:03:3f:
49:63:5e:bf:de:ff:97:e6:96:b5:65:6a:fb:63:e7:
8b:f7:a3:fd:e6:ba:8c:81:7b:d2:20:3b:5e:b2:a0:
48:7f:d6:c9:4a:92:39:92:9b:84:e7:f6:da:20:c0:
01:b1:b0:6f:87:04:3b:ff:8a:ed:63:22:8d:9a:c5:
12:21:ae:42:8f:1e:de:57:ea:35:cb:b7:d0:cf:5a:
21:0c:6a:e6:69:4e:ab:26:02:9e:b4:cd:09:b8:db:
36:b3:cd:a5:4d:c3:a1:4b:53:ed:cf:33:89:1d:eb:
d0:ad:80:1c:83:61:a5:a4:75:3a:51:53:3b:70:8a:
9e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D5:6F:96:9D:6B:7C:E0:F4:5E:EC:08:3A:31:F1:A7:88:92:62:3E
X509v3 Authority Key Identifier:
keyid:6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e3:ef:aa:d6:03:09:c6:c7:c5:61:14:d3:70:60:2f:ea:85:
05:c6:fb:55:bc:92:e2:a0:87:1a:0d:9e:1c:de:6f:57:95:d7:
76:c6:b0:58:44:26:3c:d4:c4:c1:95:b1:e3:ba:85:1e:44:e8:
4a:27:d2:4a:d1:9b:26:98:54:1e:14:13:49:04:e5:f3:fd:bb:
77:bc:25:b2:e2:e2:d2:18:fb:48:6d:3f:89:7c:03:d5:a8:bd:
11:d5:6f:b5:e6:7b:6f:10:4c:2e:3a:36:56:aa:38:d3:34:72:
05:c3:82:36:08:38:a9:bb:7f:74:52:f3:0c:83:fd:f2:1a:57:
fe:0f:61:df:3b:b0:9a:93:48:ca:8f:25:e3:e3:54:92:a7:f5:
41:fa:42:ef:5e:ba:3e:b6:58:a6:9a:45:ea:88:d7:eb:b8:a2:
e1:5c:c9:dc:cf:50:7a:e3:43:fc:7f:43:1c:0f:55:7f:ca:cc:
50:2a:4f:9c:ce:9d:28:c0:d9:54:dc:1d:2b:3a:90:e3:49:8e:
a9:d0:e7:02:63:c3:36:04:bd:8b:34:f4:1d:40:8a:36:40:7d:
84:e4:5c:e0:05:30:8a:d3:6d:99:d3:c0:47:9c:cd:83:15:ce:
f4:a8:94:ba:2d:f5:e3:78:d8:ae:b7:2d:8e:7b:71:99:79:1c:
10:a1:68:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:06:44 2026 by rpki-client