Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
File: bkIT73VQqt75F5PcnRS-h0ceTBI.mft (raw, json)
Hash identifier: 52lutqqQXyTye0VQ6BIX0VP/Y0DC+rgyNCeLFUnrkm8=
Subject key identifier: 6A:5C:2C:70:B1:AC:C2:A9:7D:30:4B:AA:0D:BE:68:C7:EB:C4:BA:DD
Authority key identifier: 6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
Certificate issuer: /CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Certificate serial: 019F11F77D59C4EB7C43422DB4DF17B8C68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
Manifest number: 0188
Signing time: Mon 29 Jun 2026 06:00:59 +0000
Manifest this update: Mon 29 Jun 2026 06:00:59 +0000
Manifest next update: Tue 30 Jun 2026 06:00:59 +0000
Files and hashes: 1: Aw9tXveR8BkFdyjJFk7_AmnfBwY.roa (hash: qR8wHawnouYoCzeQOakk7xfrAyq4fC7VhBjSSJYeEBQ=)
2: bkIT73VQqt75F5PcnRS-h0ceTBI.crl (hash: t5Sji+y7C1x83owBbytsiFjIJRcGi3KxcL2CI+lFwI8=)
3: t-pysyXW9DMYW3dIdVXL1kuI-lk.asa (hash: PkLiAsSP6O1ZogB6nCzsRUHVv6ZGFXVfkqaqouAY69U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:7d:59:c4:eb:7c:43:42:2d:b4:df:17:b8:c6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4213ef7550aadef91793dc9d14be87471e4c12
Validity
Not Before: Jun 29 06:00:59 2026 GMT
Not After : Jun 30 06:00:59 2026 GMT
Subject: CN=6a5c2c70b1acc2a97d304baa0dbe68c7ebc4badd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:ad:b7:6c:4b:d8:33:04:8a:7c:52:21:93:
11:fd:a8:2a:5c:6e:da:63:1b:95:c7:1a:18:94:4a:
e9:54:59:b7:52:1e:d4:65:ae:1c:46:f5:ef:1a:cc:
a5:94:19:a4:32:3f:1a:2d:0e:3f:ce:f5:bd:6d:e5:
74:9c:30:d4:48:6d:23:3b:32:0a:fa:45:ed:8f:66:
ac:28:c2:af:87:cd:4a:2f:f0:e0:88:03:62:92:8f:
c6:9d:ce:2d:8b:fb:38:d8:2c:eb:64:88:40:63:62:
08:98:03:c5:2c:23:d4:6e:d3:9a:ad:b4:88:60:a7:
12:dd:4d:94:78:6c:72:95:c0:19:84:ff:bf:25:a2:
89:7d:e8:eb:5b:c9:26:75:19:26:42:96:c7:d3:fe:
2a:88:6a:5c:b0:50:be:9b:27:99:6f:f0:bc:f2:c1:
5c:27:3e:e4:ef:96:6c:ea:b0:b8:f0:e0:80:cf:18:
1e:3c:3f:a6:c7:d9:31:4e:49:e7:47:c7:05:0d:17:
97:2b:f6:74:79:b5:5a:de:65:d0:ce:5f:aa:82:3b:
f6:35:71:38:db:36:86:79:23:07:db:af:63:bc:98:
15:f2:0f:09:fe:f8:bb:1f:d8:10:de:20:2a:50:24:
37:4a:2f:b0:7d:a8:b8:72:68:af:05:3f:39:a0:36:
c0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5C:2C:70:B1:AC:C2:A9:7D:30:4B:AA:0D:BE:68:C7:EB:C4:BA:DD
X509v3 Authority Key Identifier:
keyid:6E:42:13:EF:75:50:AA:DE:F9:17:93:DC:9D:14:BE:87:47:1E:4C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkIT73VQqt75F5PcnRS-h0ceTBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/073dda-0314-4eaf-bd04-21fe8b29d3d6/1/bkIT73VQqt75F5PcnRS-h0ceTBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:04:ac:87:d9:46:12:35:36:56:9e:4c:cf:f2:ea:fe:ff:a8:
56:ee:4d:74:bb:dc:f0:14:e4:02:c2:2d:15:54:db:e7:e2:47:
fd:37:9f:e4:b8:3e:9e:5a:41:39:f1:44:ea:cd:cd:15:a4:ba:
90:81:de:d5:16:f4:03:94:22:02:1a:b6:16:c6:0d:3e:12:69:
c2:8a:5b:ff:85:43:b1:44:22:24:94:0f:d5:e8:64:51:f0:14:
b7:51:da:8a:6d:94:46:6a:cb:a3:50:cf:8d:8b:e1:55:f6:37:
cf:d4:20:c4:b7:20:40:76:5f:de:9c:c6:3b:ef:9d:5a:de:3c:
7f:bd:fa:7b:12:53:c8:a9:19:47:e6:5b:0c:9b:98:f4:86:6f:
77:b5:4b:ee:f9:6b:2c:92:81:aa:aa:35:97:b2:43:d9:e9:15:
e0:76:a6:8d:83:ac:d8:37:d5:d7:e3:2f:90:a1:d3:b7:e8:1b:
0e:a7:3f:cd:55:6e:e1:ac:3b:c7:97:cd:f4:bd:d2:bc:16:cf:
72:03:d5:7c:99:fe:bf:a5:13:d4:cb:13:eb:79:13:48:75:d8:
78:49:dc:6c:02:93:f2:18:84:77:ff:78:69:e5:a9:6b:33:d1:
61:c2:c8:6e:3e:4d:1a:9f:fa:13:f5:38:7b:d0:6e:b3:38:24:
d0:fe:ff:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:19 2026 by rpki-client