Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
File: bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft (raw, json)
Hash identifier: 8tim6vcIJN6Ue6jlxywB9pRmrQn7X7IzXBhNtaB78D8=
Subject key identifier: CA:81:7A:5B:BB:7A:19:D7:5A:19:0A:4D:A0:AC:CC:F8:86:92:BA:E1
Authority key identifier: 6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7
Certificate issuer: /CN=6c29244ac40267eec47a91708f89cf5366eaa8d7
Certificate serial: 01A17B84CC1E8307E0D4796E70DE1E3503BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
Manifest number: 1358
Signing time: Tue 27 Oct 2026 04:01:02 +0000
Manifest this update: Tue 27 Oct 2026 04:01:02 +0000
Manifest next update: Wed 28 Oct 2026 04:01:02 +0000
Files and hashes: 1: bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl (hash: WVrbqzfCrZwh/m9LlDcrn+Dv2RB6Raiv8b6vPd0Oxic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:cc:1e:83:07:e0:d4:79:6e:70:de:1e:35:03:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c29244ac40267eec47a91708f89cf5366eaa8d7
Validity
Not Before: Oct 27 04:01:02 2026 GMT
Not After : Oct 28 04:01:02 2026 GMT
Subject: CN=ca817a5bbb7a19d75a190a4da0acccf88692bae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:5c:a8:ca:54:06:5e:6f:bf:9a:3b:be:7c:
b4:f9:88:ef:60:92:63:eb:d5:a8:c9:a3:a0:1e:00:
6f:38:b1:4a:32:41:47:6a:10:61:ec:8f:72:a4:cd:
2c:c8:7d:47:d1:dd:3d:6e:de:16:0b:c4:e1:7d:90:
20:da:ee:1c:a1:58:dd:e3:bf:e2:c2:45:44:36:06:
ef:7a:63:39:d8:41:30:96:51:ae:79:db:98:90:e8:
82:b1:0e:e2:a7:77:79:f4:29:55:93:ae:4a:02:b7:
42:6d:2a:cb:00:5d:ac:f4:f3:9b:42:ee:3e:2a:cb:
a0:63:a2:b7:56:07:14:59:23:0e:fb:53:9d:d9:4b:
2c:9e:64:37:8d:fa:cd:d8:b0:bc:91:8d:94:6d:6a:
7b:fe:93:ec:37:25:b7:2a:7a:82:e2:8e:10:84:8e:
ff:ff:06:5d:70:df:f8:e8:56:63:a3:94:c0:a8:85:
9a:42:a3:05:26:2b:64:ea:2b:3f:f4:fa:02:28:b0:
da:b1:d6:9c:3a:47:1a:1d:ef:7e:d5:70:e5:14:13:
26:d4:e4:c6:9e:2c:20:5e:1a:2d:77:01:23:6b:af:
24:db:2c:9d:12:6f:34:9a:15:17:c4:df:14:e6:17:
dd:69:11:3b:a4:b7:c3:db:cd:02:5c:fb:a0:8f:7d:
28:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:81:7A:5B:BB:7A:19:D7:5A:19:0A:4D:A0:AC:CC:F8:86:92:BA:E1
X509v3 Authority Key Identifier:
keyid:6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:26:a7:67:c5:1d:ad:29:97:7a:f9:e0:53:bb:f1:aa:09:14:
1d:63:df:a5:72:86:9a:42:01:ff:b5:3a:c3:50:35:d1:09:db:
6e:b1:64:6c:15:90:82:91:6c:54:ca:42:c5:c3:f9:f0:68:c2:
08:09:3d:13:e4:36:c6:be:0f:31:df:f6:ca:d6:bc:e3:c1:06:
61:bc:a9:47:1a:39:8f:3c:f8:16:3c:a1:86:19:3b:0b:bf:07:
67:00:25:0c:55:12:26:d6:2c:35:0f:f0:78:ea:d6:06:d2:e4:
23:82:ff:88:a4:ac:e9:33:08:28:68:3a:76:91:d5:81:ff:ee:
08:08:1b:74:a7:56:d3:9a:62:f5:8e:5e:2a:7a:37:46:e5:f3:
f1:b6:5f:b9:47:df:e0:b5:ab:3b:89:57:9d:e8:60:6b:07:f9:
23:77:03:de:0e:a9:de:a7:f7:32:48:ad:95:08:55:4c:bb:37:
25:06:da:1d:ec:74:0c:b8:98:10:df:c4:62:05:f4:27:e3:d0:
e0:81:e3:2e:15:f1:a7:ac:f1:fb:1a:77:63:ab:c2:53:ac:4b:
ab:e3:d1:47:01:b9:fe:d1:a7:08:e4:b6:2b:d3:4c:d3:91:af:
df:7e:ae:b9:21:b4:80:dd:ad:7c:7f:cf:2d:56:44:b6:10:1d:
0d:72:6a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:17:38 2026 by rpki-client