Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json)
Hash identifier: zu3XFYs2ZWbjH0Ry3orff2U0uQL0UPh8XeUZIlr+jZA=
Subject key identifier: 3F:96:B8:2E:31:54:0D:1F:33:00:0B:3C:F6:DE:8A:6C:89:F2:5C:71
Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Certificate serial: 019CBE4CDBED4BD04FC1D54AB3BDEA47C3A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
Manifest number: 0E1A
Signing time: Thu 05 Mar 2026 14:00:33 +0000
Manifest this update: Thu 05 Mar 2026 14:00:33 +0000
Manifest next update: Fri 06 Mar 2026 14:00:33 +0000
Files and hashes: 1: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: Stj/L8uHe6s96jmFvShZcJiBwpS26SaOF6KNtEU5MIs=)
2: fYQ8diFS0pMi17AAJonCpFXTGqg.roa (hash: IlQw7JdR5Y+EO+F9R5RY7SSoodskPtpA7HFrW9NLQp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:4c:db:ed:4b:d0:4f:c1:d5:4a:b3:bd:ea:47:c3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Validity
Not Before: Mar 5 14:00:33 2026 GMT
Not After : Mar 6 14:00:33 2026 GMT
Subject: CN=3f96b82e31540d1f33000b3cf6de8a6c89f25c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7f:50:a7:15:ee:ac:04:33:89:8c:c6:ac:27:
7f:82:71:ea:c7:e8:22:84:7a:7c:1f:42:0b:3d:5f:
62:fa:c8:32:ad:02:35:a8:44:05:e4:fa:95:c6:7e:
92:40:17:c1:1f:d4:9a:96:4f:1d:1e:88:a0:2d:21:
82:e9:93:24:b1:a2:2c:bd:df:01:0e:fd:9f:40:c4:
1b:12:42:12:cb:68:89:1b:79:67:8b:47:f0:79:73:
2c:b5:17:0d:bf:db:f7:19:96:0e:37:47:c3:7d:85:
cb:01:f0:88:62:db:5b:87:2b:e8:39:e9:d6:fe:2c:
ad:56:5d:99:b0:b5:f3:8b:be:9c:98:89:b8:38:95:
87:e7:21:6d:f2:ff:34:72:76:0f:2a:fa:ae:4a:02:
8a:28:cb:7a:07:dd:bb:30:70:df:57:3e:22:f2:40:
ce:31:1b:88:63:66:51:09:ec:af:b5:e5:2a:79:2f:
0a:43:85:fc:ad:3f:0e:91:1e:f5:c7:24:4a:3c:aa:
3b:7d:d3:2e:b0:95:a2:5a:3c:c9:6e:53:a3:63:4d:
dc:f3:02:31:85:87:f2:95:0b:d5:46:78:17:76:c2:
dc:02:96:ea:e7:30:c6:05:26:2d:67:a1:3a:d2:47:
0b:78:e9:b4:87:d0:fc:80:04:2c:f4:59:6e:1d:78:
a1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:96:B8:2E:31:54:0D:1F:33:00:0B:3C:F6:DE:8A:6C:89:F2:5C:71
X509v3 Authority Key Identifier:
keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2a:11:a3:17:d3:5e:b7:93:c2:83:f8:5b:9f:04:9a:4d:02:
3a:db:39:fa:97:43:32:43:fa:63:75:a4:63:23:0e:cc:4d:a7:
93:c8:0b:1d:59:d4:50:b9:e9:aa:b6:10:59:59:58:86:91:1e:
be:0f:b1:2c:71:15:39:67:74:04:f1:37:81:43:08:e3:50:30:
21:c1:37:fd:e5:95:ec:b2:8e:41:38:0d:3f:5f:96:6b:83:7b:
f8:3e:f7:cd:93:55:00:d9:7e:cd:cc:f5:d3:fa:f7:92:62:59:
e6:c3:f7:12:a5:83:ce:08:e3:17:82:0a:1d:43:8d:d1:52:d3:
eb:a4:f1:57:98:4e:18:01:71:32:72:53:85:92:f4:06:dc:6d:
58:cc:c7:ee:ba:ae:23:be:de:8a:36:02:db:df:c0:12:c4:3a:
4b:5f:ac:fb:86:99:71:e5:b6:a9:f7:96:f2:ed:01:90:f9:d4:
64:b4:56:dd:c0:03:31:02:60:47:dc:a4:b9:8f:8a:ea:25:6c:
52:b4:28:81:0a:29:78:a8:51:65:d8:a9:00:bb:52:17:c1:39:
cb:d9:00:bf:b9:ef:14:16:18:2c:3c:c4:bd:16:5f:a8:94:59:
23:1b:0f:fb:c2:d4:c8:8f:10:a7:5d:e0:cb:a4:6a:6a:3c:f9:
d9:12:c6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:32:12 2026 by rpki-client