Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
File: bIkO9qiKsz-logZ2B2jdMlHCOK8.mft (raw, json)
Hash identifier: c3VWaTaIQEEPcmaqUh0cnns5J9pfVVVOi1r0q3VACkU=
Subject key identifier: 7B:D1:F3:84:16:1D:A4:8C:89:B5:E1:5A:77:83:22:9E:3F:CE:59:BE
Authority key identifier: 6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
Certificate issuer: /CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Certificate serial: 019FA1BBB92D20C6BCCA7D94FAE0355B39E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
Manifest number: 19D2
Signing time: Mon 27 Jul 2026 04:01:01 +0000
Manifest this update: Mon 27 Jul 2026 04:01:01 +0000
Manifest next update: Tue 28 Jul 2026 04:01:01 +0000
Files and hashes: 1: bIkO9qiKsz-logZ2B2jdMlHCOK8.crl (hash: K1Prfs2AmlYLA1KhbCRvjXwr9NdFgvhx8O1ClV8TjbA=)
2: u5hJOCynJQAu4PH5D56C-AeKtEc.roa (hash: 53JyrjI2rSv7IJ0kdQIBEc2NY8BsRGlwPaWvUaVHA/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:b9:2d:20:c6:bc:ca:7d:94:fa:e0:35:5b:39:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Validity
Not Before: Jul 27 04:01:01 2026 GMT
Not After : Jul 28 04:01:01 2026 GMT
Subject: CN=7bd1f384161da48c89b5e15a7783229e3fce59be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:ac:ef:b7:a2:f9:78:24:71:e2:56:4b:18:
9a:ad:4a:20:eb:4d:0b:b2:a8:6a:c6:a3:ab:40:19:
2c:f7:1d:dd:77:86:7b:5a:32:d3:dc:83:e4:d6:69:
f8:da:27:97:e4:24:6d:2c:66:b3:f7:4c:b3:92:7f:
f3:2d:64:82:57:27:fa:2d:db:75:bd:fa:fe:b6:e3:
7f:2f:82:18:88:58:04:2f:c9:ef:e0:12:d3:c8:8c:
d8:82:bc:2b:6a:da:73:44:7e:f4:12:32:8a:0a:24:
f5:d3:3c:f4:4f:77:69:b9:b0:78:fc:8f:de:5a:7e:
b9:85:b2:1a:3a:61:12:c9:89:54:41:47:8e:04:1d:
74:e7:b6:86:78:8a:6e:fc:a0:0e:a0:45:a2:bc:d0:
38:e4:0d:57:d8:8b:54:2f:d5:ad:7b:9f:09:1f:aa:
a3:bc:16:d3:62:ad:88:40:b1:d7:c0:0d:79:74:6f:
3b:06:bc:55:08:bb:11:0b:dd:d7:78:7d:93:79:d8:
d9:53:34:3f:cf:d8:6c:a5:4a:1b:4b:bf:7a:96:b8:
35:e2:e6:a4:3b:d8:58:af:c8:1c:5c:5f:06:31:ef:
eb:0e:ed:c9:a6:09:95:c4:50:fa:a8:aa:0f:c0:6c:
ec:55:ea:e9:9e:41:c3:ee:5b:a7:79:bb:03:4d:b4:
e1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D1:F3:84:16:1D:A4:8C:89:B5:E1:5A:77:83:22:9E:3F:CE:59:BE
X509v3 Authority Key Identifier:
keyid:6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:32:fd:ed:f1:4b:7d:95:15:ff:6a:5e:17:d7:ff:07:8c:10:
97:83:e7:37:2a:47:91:46:6b:bf:28:f4:f1:27:46:a3:f2:c4:
c5:89:c8:a0:14:31:1b:43:a6:5b:ed:03:16:93:db:cd:0f:14:
45:e3:61:96:54:f4:aa:ea:76:3f:35:71:e1:90:46:9b:12:63:
45:db:1c:2a:bc:ae:cd:d6:c7:74:ae:b0:3a:a8:44:5e:cc:a0:
b1:83:29:21:cf:c5:b4:e7:c5:25:ff:be:c5:5f:10:d8:41:76:
b2:69:23:3e:dc:ec:69:6f:12:b2:1e:04:73:3f:f6:13:8f:17:
86:b7:dc:8d:d6:18:62:2f:b9:06:7e:5b:51:22:6c:99:40:84:
bb:3d:79:f7:72:7d:c8:3e:a7:93:d9:92:80:fa:15:76:29:c5:
0b:d7:84:41:24:9a:fe:08:34:d0:d0:ec:44:64:db:7e:0f:a2:
8f:36:8a:bb:2e:63:a4:aa:5b:62:be:50:6f:81:8b:8c:49:b2:
bd:f6:12:50:a8:da:67:f0:a8:51:76:e8:4c:e0:71:12:ee:a9:
24:ce:32:14:49:62:b5:7b:48:e5:60:c6:4d:c9:1e:d4:4b:e0:
2f:c8:38:77:74:8f:b6:77:d2:a5:c9:a7:9c:a4:05:7a:c4:a2:
37:b7:57:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:42 2026 by rpki-client