Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json)
Hash identifier: rb+X9iij+JCsG01YTwko/Lb6w/QBdSxqb2X1pDEdd/k=
Subject key identifier: 30:DE:6B:BF:F0:70:50:59:CA:CF:61:03:C0:B8:C3:35:7D:4E:E6:44
Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Certificate serial: 01A15854371574C279BE9D6FC507D996A848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
Manifest number: 107C
Signing time: Tue 20 Oct 2026 08:01:16 +0000
Manifest this update: Tue 20 Oct 2026 08:01:16 +0000
Manifest next update: Wed 21 Oct 2026 08:01:16 +0000
Files and hashes: 1: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: BeplP5m5FKW7WcoTnyAkHvxPCZx1ofUlTVdcgSwVEzI=)
2: fYQ8diFS0pMi17AAJonCpFXTGqg.roa (hash: IlQw7JdR5Y+EO+F9R5RY7SSoodskPtpA7HFrW9NLQp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:54:37:15:74:c2:79:be:9d:6f:c5:07:d9:96:a8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Validity
Not Before: Oct 20 08:01:16 2026 GMT
Not After : Oct 21 08:01:16 2026 GMT
Subject: CN=30de6bbff0705059cacf6103c0b8c3357d4ee644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:f6:27:0b:3f:0a:87:60:1a:5c:8b:53:0a:
6e:72:4f:a6:39:82:f7:fd:6e:08:29:b5:f2:04:63:
54:c6:59:a4:3c:f5:24:9c:15:42:95:9f:9d:24:7c:
4b:4a:26:a4:01:02:82:de:76:bc:31:9c:e0:4c:3b:
be:5d:a3:0b:96:b0:41:32:a3:51:21:21:47:56:07:
93:63:ed:b8:bd:71:d8:19:4c:d1:60:fc:84:9e:77:
78:f0:36:19:3e:58:e3:7c:68:5c:17:16:0a:e5:7c:
5f:0a:02:32:45:f4:a3:4e:00:e3:92:e3:a9:7d:c6:
f8:46:37:0d:b1:c0:44:d5:a2:67:d2:ed:0a:ca:c0:
08:4c:c2:97:e5:86:a7:d7:4b:34:5c:8f:ad:5a:e4:
5f:0e:19:68:39:4c:0b:f7:ea:7d:a2:c3:7f:bd:86:
d4:be:55:d4:5c:b7:c0:4a:db:c1:ec:24:cb:65:bb:
9e:91:51:e2:33:08:5d:dc:39:59:c2:ac:a7:07:f1:
3a:1f:19:f2:cc:1a:19:ad:2d:21:a7:7f:07:eb:f8:
8c:d1:dd:42:b8:e2:47:0c:fd:3b:18:89:3a:ea:52:
93:2b:2c:11:85:d8:77:4b:64:ee:be:ad:46:b7:80:
57:c0:66:20:47:91:fc:f3:03:58:e3:91:70:f5:00:
09:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DE:6B:BF:F0:70:50:59:CA:CF:61:03:C0:B8:C3:35:7D:4E:E6:44
X509v3 Authority Key Identifier:
keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:84:fd:7b:e4:3e:d2:3f:3c:64:5f:c1:81:36:ae:61:ce:ba:
1b:3e:a2:28:4d:c7:f9:d1:40:5a:03:83:4d:02:99:58:1e:17:
9a:41:36:7e:b5:96:02:0a:44:24:b0:71:85:73:10:11:ca:f3:
1b:bf:05:d0:81:57:96:bd:a8:b1:54:6d:3c:aa:73:1b:25:b0:
73:21:2b:d4:8e:6b:9d:cd:f7:01:4d:59:e8:b0:48:5f:b1:90:
7c:c4:65:04:04:7b:02:db:9b:6a:54:99:34:2e:74:50:25:cc:
76:14:fb:04:9f:7f:d4:8c:38:aa:aa:51:31:a2:a7:79:40:2d:
a4:a8:e3:d7:6a:a7:e2:62:ee:16:a5:d4:d0:e3:72:1a:a3:21:
be:fe:36:f3:00:f3:a7:fa:77:0d:b0:61:db:19:a6:1a:43:2f:
f9:27:8c:6c:1a:f8:55:1e:48:25:1c:f5:34:64:e6:bd:63:04:
e6:63:86:f1:1f:f7:7e:e6:ef:42:9b:d1:f0:c3:22:06:f7:2c:
f3:3b:43:e5:7f:05:2d:f7:86:97:79:cf:19:13:ca:eb:39:52:
8d:c3:cf:3f:34:1e:b7:7e:15:75:b3:db:a4:11:d9:1b:71:1e:
81:26:7a:9c:7b:49:36:de:80:d0:58:75:a5:6b:fd:b6:0d:e8:
da:be:1b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:46:47 2026 by rpki-client