Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
File: bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft (raw, json)
Hash identifier: H3+PNpVOZ39J+qzSn2W1FUfvf+yciYttuS6PYOKN458=
Subject key identifier: F2:C5:41:07:D0:EA:53:CA:D6:06:D5:49:F9:35:35:EE:F0:AE:84:CC
Authority key identifier: 6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
Certificate issuer: /CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Certificate serial: 019DCF3DDC3A4CD0DA585F419B288F1B2BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
Manifest number: 18D9
Signing time: Mon 27 Apr 2026 14:00:30 +0000
Manifest this update: Mon 27 Apr 2026 14:00:30 +0000
Manifest next update: Tue 28 Apr 2026 14:00:30 +0000
Files and hashes: 1: bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl (hash: sZdYFMthO2IxB60tp6GMDzjRcXWTGWQbSOnpoq+epxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3d:dc:3a:4c:d0:da:58:5f:41:9b:28:8f:1b:2b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Validity
Not Before: Apr 27 14:00:30 2026 GMT
Not After : Apr 28 14:00:30 2026 GMT
Subject: CN=f2c54107d0ea53cad606d549f93535eef0ae84cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:04:74:0d:9e:4e:03:5f:66:85:92:5e:3b:37:
7e:bb:5c:9c:7e:bd:b5:16:4d:23:f5:09:f0:2d:65:
45:73:df:fd:43:7a:4b:10:dd:0f:3a:17:05:c6:fd:
2c:bf:e4:38:2f:22:ce:d8:68:cc:bb:7b:c3:c5:a4:
72:3f:35:6b:80:f5:ac:b4:49:28:a8:43:43:a6:b3:
ea:64:01:7e:a5:3e:d4:12:3f:0d:5c:d3:b3:ec:6b:
94:c6:8b:dc:e7:e7:8e:d3:f2:85:e0:39:cc:30:60:
f9:0b:fe:aa:0a:d5:c3:61:b4:05:e9:8c:2e:f4:37:
26:a9:45:a0:f8:f3:84:f5:5f:29:10:58:7d:97:b6:
7e:fa:07:df:54:43:df:c6:c8:0c:75:a1:4f:1b:5a:
16:7d:3f:5e:8a:5d:8d:52:75:2b:06:1f:e9:15:36:
25:17:ef:a6:0f:7a:6d:19:af:62:e4:e4:6b:02:48:
f6:e5:b1:d2:02:97:06:7a:b1:87:a9:b2:d3:6d:29:
09:b8:1a:a6:40:5d:0e:c4:12:eb:fb:f2:69:44:0b:
b5:13:d7:22:b4:8d:ae:af:52:78:b3:ac:a6:5a:ee:
ea:da:41:45:ac:94:78:b0:30:01:d9:e3:4a:6c:93:
1a:35:64:34:c1:45:e3:09:d3:79:07:7e:9b:6c:76:
a5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C5:41:07:D0:EA:53:CA:D6:06:D5:49:F9:35:35:EE:F0:AE:84:CC
X509v3 Authority Key Identifier:
keyid:6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4c:67:28:04:36:64:a1:ba:fd:57:91:51:24:a3:ba:f0:88:
b6:7b:cd:ef:bb:5c:53:aa:b0:61:30:15:e4:9c:fd:9e:76:ad:
18:fd:a5:98:d9:09:83:1f:6b:fd:c3:4a:bd:6d:fd:ec:4d:44:
ed:90:78:05:14:d8:e0:c8:3d:54:1b:3d:7a:24:26:2d:79:aa:
51:f9:cf:b4:6f:4d:d6:30:37:3f:db:b7:e0:7e:2c:d8:de:67:
5c:bb:cc:49:a6:a0:c3:bc:07:07:cc:9c:d7:68:95:4b:e5:30:
51:3a:47:f4:20:ab:58:d3:98:85:fe:75:62:25:93:f9:a2:c8:
df:fc:79:f2:6d:5b:3f:07:57:e9:7f:06:8a:f3:22:0c:a2:5e:
ec:03:4a:32:dd:3e:60:34:37:0f:5c:77:64:63:29:8a:67:78:
a4:9f:ae:db:31:00:49:f9:ac:75:43:c3:54:14:de:d0:30:41:
a7:9a:66:63:44:a5:ed:38:60:dc:71:0c:ac:48:a8:d7:73:0f:
ee:cb:07:06:34:77:7e:3d:5f:ea:b2:ce:d4:56:19:0a:fc:9e:
8e:9d:9b:e3:9a:97:2b:67:ee:3c:1a:0c:94:ec:26:df:ac:47:
68:50:35:0e:25:83:ae:89:f7:a3:fc:de:ac:aa:2b:0b:6f:fa:
1d:47:9a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:51:24 2026 by rpki-client