Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
File: bseKTlkP6xA9XRu00HnGhBVZK_k.mft (raw, json)
Hash identifier: +7dIw4hRSNMvGkS+joFWKfXy/eahkZy3bsZdD/MlY44=
Subject key identifier: 4F:34:39:A1:28:5C:CC:7D:AB:9C:F2:56:1E:A7:65:6D:0F:7B:A0:99
Authority key identifier: 6E:C7:8A:4E:59:0F:EB:10:3D:5D:1B:B4:D0:79:C6:84:15:59:2B:F9
Certificate issuer: /CN=6ec78a4e590feb103d5d1bb4d079c68415592bf9
Certificate serial: 019FD127D8CC11125146B8B47D16CDF57763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bseKTlkP6xA9XRu00HnGhBVZK_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
Manifest number: 61
Signing time: Wed 05 Aug 2026 09:01:17 +0000
Manifest this update: Wed 05 Aug 2026 09:01:17 +0000
Manifest next update: Thu 06 Aug 2026 09:01:17 +0000
Files and hashes: 1: HVmNUcJUz6eHLCWqv73qDc20l-I.roa (hash: Ku0nK986i55PU61Q1Y0z3xgl417ibJovalrFntQb3zE=)
2: bseKTlkP6xA9XRu00HnGhBVZK_k.crl (hash: V188LcY4EJWS5CBPKKpYPad1DBpq3TOK8gr+qZ3wdHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bseKTlkP6xA9XRu00HnGhBVZK_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:27:d8:cc:11:12:51:46:b8:b4:7d:16:cd:f5:77:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec78a4e590feb103d5d1bb4d079c68415592bf9
Validity
Not Before: Aug 5 09:01:17 2026 GMT
Not After : Aug 6 09:01:17 2026 GMT
Subject: CN=4f3439a1285ccc7dab9cf2561ea7656d0f7ba099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5d:fa:5a:d3:de:61:fe:3e:eb:92:90:5a:41:
14:7e:bf:8a:00:7b:cc:1f:cb:3e:49:34:bc:eb:97:
7b:6c:90:e7:0f:90:d2:9b:12:40:35:f5:70:4c:3b:
76:97:41:a8:b8:93:1a:c9:ed:1d:32:bd:c5:f2:bc:
32:80:d4:36:bd:11:2c:bc:e9:a5:1a:71:75:1d:bf:
fb:70:1a:b7:65:04:43:ef:cf:8c:c2:21:bc:8f:ee:
22:08:b9:ac:9b:6e:9c:e3:3b:49:99:a1:32:9a:ab:
3e:50:e7:0e:08:47:c3:ac:64:fd:a0:41:4d:7b:ed:
05:a8:40:c1:b6:fd:a9:bc:89:54:9d:e3:88:4a:fe:
af:9e:cf:a0:bb:f7:ca:a3:14:63:6a:70:80:b7:c0:
81:15:0f:6c:20:d3:09:79:f2:b6:71:b4:99:3a:43:
fc:ef:26:e4:99:df:19:67:8d:87:51:af:31:39:8b:
6b:4e:18:46:ce:3c:15:76:92:2c:61:a5:26:15:7d:
44:9c:a3:cb:3e:14:62:e8:cc:5e:a1:18:fe:5a:ea:
f6:9e:33:07:41:87:50:d8:a2:7e:e9:2e:45:16:3e:
db:5d:66:31:fa:75:53:56:6f:a7:2d:d9:89:30:f9:
46:8d:f1:bc:08:31:a9:2f:aa:8a:e5:1b:dd:6d:c1:
e7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:34:39:A1:28:5C:CC:7D:AB:9C:F2:56:1E:A7:65:6D:0F:7B:A0:99
X509v3 Authority Key Identifier:
keyid:6E:C7:8A:4E:59:0F:EB:10:3D:5D:1B:B4:D0:79:C6:84:15:59:2B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bseKTlkP6xA9XRu00HnGhBVZK_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/bseKTlkP6xA9XRu00HnGhBVZK_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9a:ef:4f:a7:21:8b:7b:8a:82:ec:9f:71:fb:28:d6:de:8a:
68:7e:8f:41:d2:df:f6:90:85:37:1e:7b:d4:6d:33:eb:c2:8a:
47:b7:25:02:b3:be:fc:49:e1:4d:9c:ad:5f:2d:83:fa:d3:3e:
79:d4:07:35:74:76:02:fc:1e:24:eb:81:33:54:10:e3:bf:e3:
25:c9:7b:ae:a1:be:ca:63:a3:2d:9a:fd:43:c4:a4:6f:c6:d1:
56:ef:a1:1b:70:4c:0b:33:17:18:35:06:28:96:5a:ed:9f:28:
bb:a5:8f:11:c0:21:bc:a4:ed:97:a4:77:42:0b:c3:46:4b:a9:
13:0d:e1:c3:af:32:39:ec:3b:36:16:05:3e:bd:77:c7:64:7b:
26:02:bd:f3:c1:48:14:e2:bb:23:14:5f:6e:a4:90:d5:14:64:
b8:98:fa:bc:97:14:dd:94:99:54:3a:3f:d9:1d:df:8b:c4:07:
2d:f0:dc:78:57:c4:e3:93:2c:b3:79:50:48:41:36:ec:97:5f:
80:8a:31:fa:f8:ab:e1:e5:b7:70:f9:0a:df:d0:4c:d3:16:4a:
05:47:33:9e:8d:70:f4:35:1a:02:b0:92:7a:1a:36:59:4e:8b:
b4:74:c0:51:ee:d2:a3:cd:0a:d1:72:44:cb:25:96:87:fb:90:
86:20:ce:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 15:00:01 2026 by rpki-client