Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
File: bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft (raw, json)
Hash identifier: ES//Z50nmKgLkvA7MiNdbz1pUxQXd/cTe71NgpKYFAU=
Subject key identifier: 9A:36:AD:26:CE:77:BF:49:3C:DC:E5:BE:B1:10:C1:98:9D:39:F1:D1
Authority key identifier: 6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7
Certificate issuer: /CN=6c29244ac40267eec47a91708f89cf5366eaa8d7
Certificate serial: 01A08C0CC2D53B03AD5A04DD40405E23C942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
Manifest number: 12DC
Signing time: Thu 10 Sep 2026 16:00:41 +0000
Manifest this update: Thu 10 Sep 2026 16:00:41 +0000
Manifest next update: Fri 11 Sep 2026 16:00:41 +0000
Files and hashes: 1: bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl (hash: SPX1fO5jYhvUU1GM1PnB1EVEWGrU34NeooWQTzDrwwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:c2:d5:3b:03:ad:5a:04:dd:40:40:5e:23:c9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c29244ac40267eec47a91708f89cf5366eaa8d7
Validity
Not Before: Sep 10 16:00:41 2026 GMT
Not After : Sep 11 16:00:41 2026 GMT
Subject: CN=9a36ad26ce77bf493cdce5beb110c1989d39f1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:38:75:85:0b:55:d3:e1:9a:a6:e8:22:ff:eb:
85:cf:aa:fe:48:0a:af:04:86:d8:c3:44:1f:d8:4f:
39:87:14:81:bf:45:7b:de:68:d5:23:2c:cd:b2:64:
bf:cb:35:f6:0a:2f:88:12:ea:06:a2:e2:ef:9e:ea:
b0:c1:44:ed:22:fb:83:6c:11:1f:55:91:38:7d:a1:
30:3b:c1:a7:3a:a9:ab:99:76:b9:18:9b:b8:1d:5f:
e3:72:da:55:c1:2f:a6:88:3d:1b:ab:40:b9:df:25:
b1:64:ce:70:61:e6:a3:a0:89:b8:1b:23:c4:42:92:
75:dd:18:dc:84:32:8a:78:40:55:16:52:0e:b6:41:
f6:32:19:7f:04:c4:53:4f:30:42:1a:49:26:c6:04:
71:38:23:4b:82:b8:5b:4d:02:3d:63:14:bf:ec:77:
26:31:3f:b9:3b:22:45:ae:37:df:ad:17:84:64:b3:
42:6b:bf:53:c5:28:25:40:5a:c9:ac:cc:57:ff:d2:
1b:86:7a:21:7a:42:6e:9e:a7:78:fd:6a:cd:ad:b2:
b8:16:9a:5e:8d:e6:00:95:ce:4c:52:ac:7e:8a:58:
1a:44:d5:5f:66:c0:01:ed:7c:82:29:7f:d5:eb:b9:
02:55:c4:66:e1:75:eb:91:03:26:9f:ff:5d:b8:03:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:36:AD:26:CE:77:BF:49:3C:DC:E5:BE:B1:10:C1:98:9D:39:F1:D1
X509v3 Authority Key Identifier:
keyid:6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:56:28:05:21:fb:7f:d0:81:34:0e:cb:c3:b6:a2:52:ea:52:
3a:05:76:f3:31:95:de:fd:96:8a:33:a2:97:75:39:5e:ec:8c:
c9:9e:44:8b:c3:8b:a8:19:e0:4b:42:94:33:92:a2:fa:fd:1e:
96:4a:2f:7c:71:2e:b3:55:36:ab:52:a5:59:99:05:b2:46:b2:
b7:90:0c:0d:03:61:6e:c7:9f:3a:2f:f0:85:e5:8f:52:43:e1:
d6:3d:c8:34:5c:ad:81:54:66:18:f8:ed:a6:63:cd:1e:fa:db:
5a:f2:0c:f0:ce:e1:55:37:f0:96:bf:a5:0a:59:c6:18:e9:49:
3b:96:a9:58:08:0a:35:ff:b7:be:4e:4b:8d:7d:61:1b:4a:36:
ee:13:23:ff:80:72:0f:8c:bf:22:17:66:57:fa:c6:a9:38:6d:
97:33:0e:94:6a:2f:04:b5:67:1b:b7:8f:e1:47:b4:93:5f:76:
f8:87:30:87:11:75:71:b5:6e:fc:8d:8a:ad:c4:9d:90:c5:2d:
6a:7f:5f:68:4a:89:c6:a3:25:4d:c0:76:57:07:4f:6f:9f:24:
b5:28:f1:bb:b7:9e:cb:fc:f7:b9:85:9b:2f:61:d1:1d:af:aa:
b6:0d:18:5e:3e:e7:cf:e1:c9:bc:e2:c2:42:64:fc:65:c4:be:
75:7b:8a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:01:38 2026 by rpki-client