Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
File: bkIT73VQqt75F5PcnRS-h0ceTBI.mft (raw, json)
Hash identifier: OgqHyDM2UfBha/B9jKN8CiyuOQE/mEhKDQc81t7L5SA=
Subject key identifier: E5:52:55:9D:A1:42:E5:CA:52:9E:40:89:D4:69:71:D0:F4:8A:FF:61
Authority key identifier: 6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
Certificate issuer: /CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Certificate serial: 019E284B3668CB23281072CD0CEE5FA08C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
Manifest number: 010F
Signing time: Thu 14 May 2026 21:01:18 +0000
Manifest this update: Thu 14 May 2026 21:01:18 +0000
Manifest next update: Fri 15 May 2026 21:01:18 +0000
Files and hashes: 1: Aw9tXveR8BkFdyjJFk7_AmnfBwY.roa (hash: qR8wHawnouYoCzeQOakk7xfrAyq4fC7VhBjSSJYeEBQ=)
2: bkIT73VQqt75F5PcnRS-h0ceTBI.crl (hash: 1FYM1QdndJ3QzyIVIbNQngUlQbKoBm2W00Lzf6dln80=)
3: t-pysyXW9DMYW3dIdVXL1kuI-lk.asa (hash: PkLiAsSP6O1ZogB6nCzsRUHVv6ZGFXVfkqaqouAY69U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:4b:36:68:cb:23:28:10:72:cd:0c:ee:5f:a0:8c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Validity
Not Before: May 14 21:01:18 2026 GMT
Not After : May 15 21:01:18 2026 GMT
Subject: CN=e552559da142e5ca529e4089d46971d0f48aff61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:b0:81:11:07:5e:3b:c4:a8:72:6b:e9:3c:
5a:c3:c9:43:3c:eb:9d:c6:4b:d8:5d:cf:e3:d6:0e:
99:27:91:28:69:7f:bb:be:3f:a7:fa:33:6e:c4:72:
8c:2d:1b:dc:72:d5:76:c1:9b:6e:a8:6d:c5:9b:99:
2d:26:c2:a5:74:7e:ad:48:d6:61:5e:08:36:e8:85:
90:a7:0d:84:85:ff:23:d6:f6:f4:f6:d2:e8:15:6c:
aa:3e:f8:d7:05:d4:2d:a3:36:57:46:b0:0d:bf:ab:
e1:f0:f5:12:7c:97:d6:22:53:fa:46:2c:79:ff:6e:
a9:09:ea:fb:38:de:b6:87:f3:34:1d:71:ce:32:5c:
6a:17:35:6f:45:99:29:ec:34:7b:dd:fd:b1:96:c3:
14:9f:37:9c:ae:fa:26:19:a8:c7:ce:bd:7a:f9:3f:
e3:d8:ef:34:61:8e:fa:b2:39:b9:f1:9d:6f:0e:45:
4f:16:34:27:7e:c8:9d:ca:ee:29:a1:08:47:cd:61:
cb:2b:cd:e6:1c:98:90:06:d6:19:9e:cb:73:44:a3:
24:8e:7b:e5:1f:a7:ee:c0:a1:32:4a:9d:c9:7d:c4:
eb:9d:d0:13:77:54:55:af:8b:0c:36:52:43:b6:b2:
54:85:73:c7:84:5a:9f:bb:77:cd:45:5a:00:70:32:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:52:55:9D:A1:42:E5:CA:52:9E:40:89:D4:69:71:D0:F4:8A:FF:61
X509v3 Authority Key Identifier:
keyid:6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9e:ca:28:97:b1:65:3a:b4:3b:01:39:36:0e:92:aa:c8:c1:
2d:5e:0b:a7:d5:5d:5f:9e:12:b0:a9:36:30:2b:dd:fe:74:4d:
e5:f8:9d:91:ce:95:4e:93:ba:33:a5:2c:0a:fb:80:a6:7d:c1:
24:b8:b7:e4:90:26:18:aa:87:6b:d1:df:b0:c3:8a:14:e9:80:
a1:6e:62:bf:6a:86:93:82:cb:d8:8a:31:4d:33:87:7b:67:ad:
37:72:52:dd:c1:f9:d5:09:cd:1e:44:90:b3:98:39:9d:78:72:
7d:cb:52:46:82:0a:f3:72:30:c7:37:a3:ef:be:77:0e:78:ae:
ad:64:2b:49:b0:5f:45:7d:b6:1c:30:85:62:d8:f9:2a:da:d3:
18:a0:c6:b3:af:61:69:7e:0e:f3:87:ef:c0:80:92:95:74:aa:
1b:d7:8e:be:4d:7b:9e:c3:88:8c:54:ad:27:58:f0:42:af:72:
4e:67:b6:9c:79:9b:0c:88:87:33:d4:cc:e2:b3:c2:dc:96:cb:
d5:ba:89:89:6a:f3:53:b0:12:81:de:f8:43:c3:ee:f5:a7:43:
f5:2b:57:3a:ed:eb:7e:cc:ce:b2:44:ac:a1:3f:9a:c0:75:c2:
68:e4:0b:df:05:fe:07:0a:15:11:2f:32:b6:19:ab:9e:ec:d8:
ae:48:2a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:46 2026 by rpki-client