
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
File: bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft (raw, json)
Hash identifier: NBt05AAR3P67S+LDXoQbCsgthhZSC/JCe2sHhwGxJvE=
Subject key identifier: 98:2D:BE:95:5F:58:4D:30:0D:C2:76:55:5A:91:40:CC:D0:FE:55:68
Authority key identifier: 6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
Certificate issuer: /CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Certificate serial: 019CE59143C54F03B87E276D8788B2E145E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
Manifest number: 1860
Signing time: Fri 13 Mar 2026 05:00:28 +0000
Manifest this update: Fri 13 Mar 2026 05:00:28 +0000
Manifest next update: Sat 14 Mar 2026 05:00:28 +0000
Files and hashes: 1: bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl (hash: YgyYelw7sWn1g/5PyWQDScWFqONuEdWS6WX7T8Y+VHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:43:c5:4f:03:b8:7e:27:6d:87:88:b2:e1:45:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4b3510f004e454dfbc1f1a28c459d918d1513c
Validity
Not Before: Mar 13 05:00:28 2026 GMT
Not After : Mar 14 05:00:28 2026 GMT
Subject: CN=982dbe955f584d300dc276555a9140ccd0fe5568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8b:48:28:cd:df:33:bc:d2:bb:f0:6b:3f:67:
d2:17:16:24:ee:16:3a:18:1c:f1:25:02:fb:36:f5:
47:2f:db:d9:07:7c:7d:d5:91:b3:d1:0f:c7:2b:8e:
c9:bd:7c:66:68:8e:4d:5d:a8:fb:45:67:41:28:4c:
9b:d6:86:7d:79:19:c6:60:a4:53:b1:96:ff:79:f9:
ac:ab:be:73:55:8a:74:e7:ea:9a:be:b2:3c:22:94:
d2:07:c4:dc:b1:74:68:be:ca:0b:51:8a:a7:b5:c0:
74:b3:48:61:76:96:85:d2:1f:e2:f1:d1:92:20:08:
49:d5:bf:4e:ac:4d:05:1f:f0:79:a8:6b:fb:4f:01:
c1:5c:ee:20:7c:d7:11:3e:3f:70:4f:3e:5d:e2:4c:
ce:7d:20:10:2b:39:69:7c:0b:9a:34:22:28:0f:d3:
e4:54:c1:af:0a:98:6d:02:e9:3c:29:a5:0c:f3:d0:
b0:17:0a:dd:b2:88:0a:37:4d:9d:2e:14:64:4b:d7:
7e:c8:3a:10:76:05:8b:5f:35:c0:c9:be:49:d7:35:
ce:12:22:8e:ef:71:48:18:7b:a7:6b:1a:33:19:b3:
64:fc:6c:8d:3d:e7:f9:2d:eb:53:d5:a9:59:36:ca:
0e:e9:86:64:11:b7:32:45:62:52:26:6e:39:04:6b:
5f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2D:BE:95:5F:58:4D:30:0D:C2:76:55:5A:91:40:CC:D0:FE:55:68
X509v3 Authority Key Identifier:
keyid:6E:4B:35:10:F0:04:E4:54:DF:BC:1F:1A:28:C4:59:D9:18:D1:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bks1EPAE5FTfvB8aKMRZ2RjRUTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ffcce0-3116-4cfc-8a99-8f33476a08a3/1/bks1EPAE5FTfvB8aKMRZ2RjRUTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ce:aa:ab:31:43:36:cc:db:43:f4:58:ba:55:dd:49:e1:2f:
eb:ad:07:7a:64:d6:8e:f2:b8:f3:41:64:1c:83:20:4f:a7:64:
aa:e3:df:f4:5f:f4:61:d1:f9:f8:c5:62:9e:16:e5:f2:d0:04:
c4:ee:77:2b:35:6f:b2:f8:cb:be:09:bb:88:f2:db:0d:48:1f:
79:b8:a1:a9:14:32:7b:da:53:df:9c:01:85:8a:ff:ee:3b:4f:
38:34:5b:f3:27:4c:fe:80:c1:d2:ea:df:2e:5a:e7:92:de:89:
0c:a3:da:e7:63:62:ba:3f:aa:64:44:e0:67:2a:68:23:bf:bb:
bf:b4:56:ce:80:2a:fc:9d:2a:d0:72:cf:e9:8e:d5:44:26:12:
35:5c:1b:84:49:85:35:ea:22:fa:c2:09:a7:24:31:b1:94:2d:
a8:74:c3:41:96:8c:04:28:7f:12:b2:6c:b1:fd:5b:1a:a9:65:
2d:f5:ad:74:77:25:c5:3b:ab:91:4b:6d:2f:24:b0:2e:61:5d:
99:bd:9b:8a:ff:29:4a:6e:46:12:4f:ce:be:b3:22:7c:d8:15:
c2:bb:84:36:82:ab:9f:d2:68:32:cd:e6:2d:81:bb:b8:bc:4b:
83:00:db:42:74:48:e3:13:ed:a8:6c:9e:06:b0:0f:a8:d2:47:
f5:4f:36:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:29:44 2026 by rpki-client