Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
File: bseKTlkP6xA9XRu00HnGhBVZK_k.mft (raw, json)
Hash identifier: Ga8vNOlGQNNr/mq01yP0/DhNAOadyyEnP0Wz9V6El0g=
Subject key identifier: EC:2F:AD:C6:15:1A:95:93:7B:A7:DA:B2:A5:DD:14:82:07:41:89:18
Authority key identifier: 6E:C7:8A:4E:59:0F:EB:10:3D:5D:1B:B4:D0:79:C6:84:15:59:2B:F9
Certificate issuer: /CN=6ec78a4e590feb103d5d1bb4d079c68415592bf9
Certificate serial: 01A0BAD3CC9EA93825AE42346FEFEE5AA91C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bseKTlkP6xA9XRu00HnGhBVZK_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
Manifest number: DA
Signing time: Sat 19 Sep 2026 18:00:37 +0000
Manifest this update: Sat 19 Sep 2026 18:00:37 +0000
Manifest next update: Sun 20 Sep 2026 18:00:37 +0000
Files and hashes: 1: HVmNUcJUz6eHLCWqv73qDc20l-I.roa (hash: Ku0nK986i55PU61Q1Y0z3xgl417ibJovalrFntQb3zE=)
2: bseKTlkP6xA9XRu00HnGhBVZK_k.crl (hash: 0Cx+/Aq6wkFxz/CjjNZOY9tPN9p8cARZQs6//8HOyzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bseKTlkP6xA9XRu00HnGhBVZK_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 15:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ba:d3:cc:9e:a9:38:25:ae:42:34:6f:ef:ee:5a:a9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec78a4e590feb103d5d1bb4d079c68415592bf9
Validity
Not Before: Sep 19 18:00:37 2026 GMT
Not After : Sep 20 18:00:37 2026 GMT
Subject: CN=ec2fadc6151a95937ba7dab2a5dd148207418918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:f5:6f:ac:9b:42:9e:2b:06:7d:9d:20:83:
d0:e1:9c:e9:7c:2d:6b:ce:bc:22:a6:aa:65:4e:13:
4c:44:a5:4c:82:72:67:df:da:22:df:bf:19:70:11:
1e:44:6d:e6:cb:06:47:29:42:6a:b3:06:4e:85:ce:
80:ee:7c:ca:af:47:ed:11:3d:b3:97:fb:2c:c2:3d:
c3:bd:6b:1f:c4:74:d2:0e:a1:6e:0f:e2:ef:0d:58:
e4:aa:5c:e3:63:2e:c6:8d:17:88:9d:db:46:04:73:
32:3d:72:f1:59:bc:7b:f8:99:ec:44:03:a2:21:42:
c4:2c:29:d9:1d:28:80:64:33:94:54:65:3b:9b:0e:
f8:67:1a:c0:14:f1:3f:fa:f2:71:ef:21:93:3a:72:
95:e5:e3:6d:c9:9d:1a:d5:61:63:11:a6:c7:a2:60:
de:f6:22:32:02:91:80:c6:c8:1a:0d:6f:02:cd:0c:
ae:92:a5:e4:05:45:47:16:b6:d7:0f:db:f6:8e:86:
a9:bd:aa:0b:47:79:77:8d:0b:7d:ef:89:06:67:9d:
da:d2:ce:78:13:41:c4:bb:53:76:8a:59:38:56:41:
ac:8b:9e:24:ee:2a:db:3c:a9:cc:94:3a:a2:c0:14:
0c:44:f2:5d:f6:37:67:d7:8e:b6:b3:1c:91:b0:8b:
ba:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2F:AD:C6:15:1A:95:93:7B:A7:DA:B2:A5:DD:14:82:07:41:89:18
X509v3 Authority Key Identifier:
keyid:6E:C7:8A:4E:59:0F:EB:10:3D:5D:1B:B4:D0:79:C6:84:15:59:2B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bseKTlkP6xA9XRu00HnGhBVZK_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0d:b0:ec:dd:69:e5:3e:5d:64:5b:e4:f3:c4:16:bf:25:32:
3d:61:b2:70:50:33:77:b1:b7:5d:e1:16:62:44:ac:4b:37:fb:
00:0b:58:5f:1a:95:39:29:7b:92:07:ab:31:ee:4b:8c:b9:fc:
19:b1:16:8a:f8:54:58:37:ab:f2:42:dc:e7:23:62:57:b0:50:
56:a2:4f:22:59:56:f4:f5:1d:35:92:ab:c1:1e:30:8a:70:3f:
8a:44:b5:d4:5e:d2:9f:3d:1f:65:9f:84:86:ad:23:a6:4e:7f:
c1:60:d4:09:4b:83:9b:ff:9b:02:60:a8:b6:c9:78:9b:4d:b0:
a2:37:19:08:85:7e:33:85:75:d3:81:d9:21:ee:38:9a:e4:cd:
3f:a3:79:27:6d:a2:cd:4e:0c:40:d3:81:20:21:94:75:c4:f2:
c0:1f:7e:fd:74:f8:fb:81:93:73:bf:d1:3e:b1:49:7d:7f:bb:
97:8f:4b:c3:a5:83:6f:da:87:5d:99:19:a7:31:94:b9:6d:5a:
b8:75:f7:98:f3:d1:39:05:15:69:6a:9e:5b:89:fa:bb:f6:5c:
13:ff:cc:94:dd:b7:1b:08:11:ca:ad:d6:42:ef:8a:c8:f1:e8:
8d:d9:13:75:0d:d8:f3:d8:ae:8e:c5:55:3a:32:9b:d8:5e:92:
e1:fa:a5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 23:32:59 2026 by rpki-client