Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
File: bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft (raw, json)
Hash identifier: HbNwhGi4a0DfresmatguV00lfEatvdm1/AZJevp89Kc=
Subject key identifier: 46:D4:D4:90:5F:2E:DA:B5:A4:48:9A:CC:36:37:0A:FA:51:C3:22:D8
Authority key identifier: 6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
Certificate issuer: /CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Certificate serial: 01A17DAA37DB52AD54460225581D8DE82154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
Manifest number: 1AC1
Signing time: Tue 27 Oct 2026 14:01:09 +0000
Manifest this update: Tue 27 Oct 2026 14:01:09 +0000
Manifest next update: Wed 28 Oct 2026 14:01:09 +0000
Files and hashes: 1: bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl (hash: kFVpJOe8FKvOnQHUcKS0zm79nf0GGFq8IHGn9EKWUSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:37:db:52:ad:54:46:02:25:58:1d:8d:e8:21:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Validity
Not Before: Oct 27 14:01:09 2026 GMT
Not After : Oct 28 14:01:09 2026 GMT
Subject: CN=46d4d4905f2edab5a4489acc36370afa51c322d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:61:9d:be:37:48:19:dc:47:6f:a0:9c:64:
99:fa:bd:2c:e3:df:a8:a1:05:fe:37:3a:21:c7:8c:
92:3f:a9:e0:e3:b0:16:16:e4:32:c2:16:aa:96:54:
8e:1c:06:15:96:2b:84:7e:c6:ce:63:8a:00:5b:c6:
2f:6a:df:d4:b4:ee:26:9c:d7:f7:58:22:6c:11:8a:
d2:e6:79:da:2f:d0:8e:a4:8c:64:e8:41:1e:51:19:
5b:94:a3:86:35:a8:23:82:3a:09:7e:b0:c6:d2:fd:
fd:34:e0:ad:e4:16:19:4f:ab:55:53:ea:3e:e3:ef:
07:50:84:29:af:4d:1b:53:c4:94:84:56:62:2f:a2:
26:4c:16:e0:91:71:05:58:f2:ea:25:dc:6c:36:06:
6a:88:a2:57:2d:ae:49:e0:1b:1c:57:5b:0a:9e:b8:
38:75:78:9a:c8:66:d3:6b:4d:92:cb:0e:c2:d4:2a:
61:6f:e0:23:da:8d:da:cc:c7:6a:6d:83:af:bf:94:
1c:e1:3e:63:3d:b4:4c:94:81:8c:61:95:85:2b:e3:
de:aa:c5:e3:7c:31:3c:34:e9:b5:c9:67:e6:0d:6c:
4e:6e:4f:68:11:08:96:a6:6b:a0:3d:e4:4e:3e:ce:
7f:a0:a0:b6:85:5c:5a:5d:72:38:f3:52:49:44:d4:
b1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D4:D4:90:5F:2E:DA:B5:A4:48:9A:CC:36:37:0A:FA:51:C3:22:D8
X509v3 Authority Key Identifier:
keyid:6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:5e:8a:4f:98:7c:61:d2:6c:fe:f4:6f:14:d2:91:bd:d5:1f:
52:5e:3f:46:7f:79:ae:40:d4:8c:c9:2c:0c:9a:30:10:db:6f:
52:47:33:c0:51:b0:cc:a3:8c:8f:b5:c4:a3:01:21:ad:e5:44:
38:1d:3e:a7:37:5c:dc:49:6e:59:aa:b4:86:41:bf:a3:64:b6:
f1:ca:54:0e:ef:7f:ac:78:f1:5d:c9:15:f9:c2:67:22:7b:6b:
a4:42:e1:3e:10:39:fd:67:8b:5f:2d:98:a1:f2:16:81:e8:fd:
78:e6:7f:ea:d0:54:ea:6d:cf:b5:b3:13:69:eb:51:1b:90:e8:
e2:d3:9a:3e:75:a7:fa:67:3a:97:3b:78:a3:93:8a:fc:ad:65:
e3:6b:46:de:92:04:b1:d5:9c:1b:37:df:f4:f4:f0:02:2a:4b:
81:cf:87:73:b2:8b:c0:c2:c0:b3:9c:e9:ae:f5:a1:f3:e9:c9:
2a:36:3f:50:c3:00:e5:72:e3:7b:3d:22:47:47:f1:fd:cd:35:
15:23:76:42:1e:43:d4:e9:d7:d4:68:4f:e8:07:e0:93:17:9e:
7f:48:56:1c:86:c6:9b:f8:b1:25:a6:ac:ac:5b:d0:24:11:40:
6b:d1:10:6b:06:5a:17:e6:06:35:1d:cd:01:aa:82:d8:67:70:
f4:46:18:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9qjfbUq1URgIlWB2N6CFUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNGIzNTEwZjAwNGU0NTRkZmJjMWYxYTI4YzQ1OWQ5MThk
MTUxM2MwHhcNMjYxMDI3MTQwMTA5WhcNMjYxMDI4MTQwMTA5WjAzMTEwLwYDVQQD
Eyg0NmQ0ZDQ5MDVmMmVkYWI1YTQ0ODlhY2MzNjM3MGFmYTUxYzMyMmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjphnb43SBncR2+gnGSZ+r0s49+o
oQX+Nzohx4ySP6ng47AWFuQywhaqllSOHAYVliuEfsbOY4oAW8Yvat/UtO4mnNf3
WCJsEYrS5nnaL9COpIxk6EEeURlblKOGNagjgjoJfrDG0v39NOCt5BYZT6tVU+o+
4+8HUIQpr00bU8SUhFZiL6ImTBbgkXEFWPLqJdxsNgZqiKJXLa5J4BscV1sKnrg4
dXiayGbTa02Syw7C1Cphb+Aj2o3azMdqbYOvv5Qc4T5jPbRMlIGMYZWFK+PeqsXj
fDE8NOm1yWfmDWxObk9oEQiWpmugPeROPs5/oKC2hVxaXXI481JJRNSxAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbU1JBfLtq1pEiazDY3CvpRwyLYMB8GA1UdIwQY
MBaAFG5LNRDwBORU37wfGijEWdkY0VE8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmtzMUVQQUU1RlRmdkI4YUtNUloyUmpSVVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mZmNjZTAtMzExNi00Y2ZjLThhOTkt
OGYzMzQ3NmEwOGEzLzEvYmtzMUVQQUU1RlRmdkI4YUtNUloyUmpSVVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mZmNjZTAtMzExNi00Y2ZjLThhOTktOGYzMzQ3NmEwOGEz
LzEvYmtzMUVQQUU1RlRmdkI4YUtNUloyUmpSVVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuF6KT5h8
YdJs/vRvFNKRvdUfUl4/Rn95rkDUjMksDJowENtvUkczwFGwzKOMj7XEowEhreVE
OB0+pzdc3EluWaq0hkG/o2S28cpUDu9/rHjxXckV+cJnIntrpELhPhA5/WeLXy2Y
ofIWgej9eOZ/6tBU6m3PtbMTaetRG5Do4tOaPnWn+mc6lzt4o5OK/K1l42tG3pIE
sdWcGzff9PTwAipLgc+Hc7KLwMLAs5zprvWh8+nJKjY/UMMA5XLjez0iR0fx/c01
FSN2Qh5D1OnX1GhP6Afgkxeef0hWHIbGm/ixJaasrFvQJBFAa9EQawZaF+YGNR3N
AaqC2Gdw9EYYsA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:26:05 2026 by rpki-client