Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json)
Hash identifier: 5erbThXrCyomXH2TRvvBg+22TxvYv0ICaVxnz0o4h6k=
Subject key identifier: 7A:E7:3E:46:78:4F:E0:11:C4:18:CA:D8:EE:3B:96:07:EF:BF:F7:15
Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Certificate serial: 019DA7F9B628C2AE6F5311E8F456D91090F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
Manifest number: 0E93
Signing time: Sun 19 Apr 2026 23:00:53 +0000
Manifest this update: Sun 19 Apr 2026 23:00:53 +0000
Manifest next update: Mon 20 Apr 2026 23:00:53 +0000
Files and hashes: 1: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: NsNxa268Bz+3rnwkeMkGLTjVdvVbx2a/K6aTQ6T6UWc=)
2: fYQ8diFS0pMi17AAJonCpFXTGqg.roa (hash: IlQw7JdR5Y+EO+F9R5RY7SSoodskPtpA7HFrW9NLQp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:f9:b6:28:c2:ae:6f:53:11:e8:f4:56:d9:10:90:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Validity
Not Before: Apr 19 23:00:53 2026 GMT
Not After : Apr 20 23:00:53 2026 GMT
Subject: CN=7ae73e46784fe011c418cad8ee3b9607efbff715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:60:6f:97:63:84:90:e6:21:39:03:6b:0a:
79:90:fb:0d:f5:cd:30:27:33:b1:7a:20:d3:38:fd:
2d:96:6e:47:d9:5f:bb:bb:99:a8:35:51:a3:1d:cf:
20:8f:15:b5:ef:c7:15:04:bf:58:52:d4:15:74:33:
78:d6:c3:50:70:28:37:4e:99:03:b4:07:9d:01:3e:
c5:3e:89:3a:55:b4:1a:fa:60:c0:96:20:16:d7:4b:
07:a2:24:a5:12:b9:46:51:01:7f:04:9e:7e:ac:fc:
ad:93:79:0b:25:5c:ec:ba:23:f7:d3:ad:90:12:52:
b5:df:ef:d2:f7:64:20:08:a4:8b:9c:ba:8e:a1:3a:
fb:73:7c:13:f7:2d:6f:58:37:4e:80:4e:7e:65:35:
81:1d:2c:6d:93:0a:0f:73:3c:ed:c2:c7:84:41:fd:
27:7c:05:93:85:c7:bd:37:42:62:70:b9:d7:15:be:
f8:86:5a:0b:53:17:8a:8a:28:cf:3d:12:ee:42:83:
bd:2f:b4:1c:b4:3e:c8:ab:d6:75:75:3b:c9:e2:26:
91:39:6e:59:79:b5:b4:1f:c0:63:5e:c1:a3:31:70:
d2:7d:a7:be:5f:82:9c:cb:ad:04:8c:dc:49:b4:38:
85:66:32:4c:db:c0:0b:fc:d8:a1:d9:96:6c:dd:91:
5e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E7:3E:46:78:4F:E0:11:C4:18:CA:D8:EE:3B:96:07:EF:BF:F7:15
X509v3 Authority Key Identifier:
keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fe:93:e5:38:98:50:f6:45:c3:40:aa:f5:a0:ad:ee:28:db:
33:2d:cc:25:74:5b:f7:e5:48:f6:14:f5:d6:6c:35:78:91:15:
e5:37:49:06:49:6e:92:5e:9c:0f:b7:e5:96:45:47:44:7d:6e:
2c:88:27:d4:d9:13:4f:3c:60:c3:5c:4f:ef:4b:72:cc:b6:45:
c7:1e:11:51:e7:68:86:07:0a:8a:aa:46:0d:40:90:76:7f:61:
ec:48:00:c8:fb:3c:f9:4f:46:e8:3d:30:c6:a0:69:c9:89:48:
a8:39:e8:f0:8e:eb:19:3d:97:77:f2:08:88:5f:67:a5:e5:a7:
90:b2:32:26:e6:9b:39:42:31:a0:8f:c6:1e:d4:c8:9b:77:8d:
b2:ff:ed:ac:e4:42:d6:f0:02:c1:d0:f1:33:08:41:dc:d7:3f:
dd:aa:f0:fc:ac:11:3c:4e:84:84:63:ef:5b:90:e1:17:68:e9:
23:73:97:02:1c:97:cb:97:ed:2e:40:b0:a4:43:08:b7:76:9b:
59:27:f7:3f:ea:ad:29:fd:70:77:fb:e9:61:61:62:40:eb:c0:
23:84:45:c1:42:71:4d:8b:cf:2b:ed:a9:9f:4b:d0:07:49:e8:
86:8c:ab:dc:db:43:c3:8b:8a:db:99:17:3d:32:c3:d1:86:09:
3c:77:99:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2n+bYowq5vUxHo9FbZEJDzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYTk0NGVhYTljN2Y2ZDQ1NzQwNmYxNDJjNmUyOGNmNWFj
YzZhYzgwHhcNMjYwNDE5MjMwMDUzWhcNMjYwNDIwMjMwMDUzWjAzMTEwLwYDVQQD
Eyg3YWU3M2U0Njc4NGZlMDExYzQxOGNhZDhlZTNiOTYwN2VmYmZmNzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIpgb5djhJDmITkDawp5kPsN9c0w
JzOxeiDTOP0tlm5H2V+7u5moNVGjHc8gjxW178cVBL9YUtQVdDN41sNQcCg3TpkD
tAedAT7FPok6VbQa+mDAliAW10sHoiSlErlGUQF/BJ5+rPytk3kLJVzsuiP3062Q
ElK13+/S92QgCKSLnLqOoTr7c3wT9y1vWDdOgE5+ZTWBHSxtkwoPczztwseEQf0n
fAWThce9N0JicLnXFb74hloLUxeKiijPPRLuQoO9L7QctD7Iq9Z1dTvJ4iaROW5Z
ebW0H8BjXsGjMXDSfae+X4Kcy60EjNxJtDiFZjJM28AL/Nih2ZZs3ZFeSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrnPkZ4T+ARxBjK2O47lgfvv/cVMB8GA1UdIwQY
MBaAFGypROqpx/bUV0BvFCxuKM9azGrIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8wZWRjMGItN2ViYi00NzBhLWIwNTYt
M2RlNDRmYzhiM2I1LzEvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8wZWRjMGItN2ViYi00NzBhLWIwNTYtM2RlNDRmYzhiM2I1
LzEvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjf6T5TiY
UPZFw0Cq9aCt7ijbMy3MJXRb9+VI9hT11mw1eJEV5TdJBklukl6cD7fllkVHRH1u
LIgn1NkTTzxgw1xP70tyzLZFxx4RUedohgcKiqpGDUCQdn9h7EgAyPs8+U9G6D0w
xqBpyYlIqDno8I7rGT2Xd/IIiF9npeWnkLIyJuabOUIxoI/GHtTIm3eNsv/trORC
1vACwdDxMwhB3Nc/3arw/KwRPE6EhGPvW5DhF2jpI3OXAhyXy5ftLkCwpEMIt3ab
WSf3P+qtKf1wd/vpYWFiQOvAI4RFwUJxTYvPK+2pn0vQB0nohoyr3NtDw4uK25kX
PTLD0YYJPHeZmg==
-----END CERTIFICATE-----
Generated at Mon Apr 20 03:28:54 2026 by rpki-client