Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
File: BkAThp4LzSd4EEBTjflc-mfhFy4.mft (raw, json)
Hash identifier: 7hINFkit9T8TPo5C346QmQfSYPnn/+4YQ67xP2SYM3o=
Subject key identifier: 8F:EA:BF:64:A0:C9:1D:61:1A:F0:C1:6F:45:96:39:67:84:54:04:E1
Authority key identifier: 06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E
Certificate issuer: /CN=064013869e0bcd27781040538df95cfa67e1172e
Certificate serial: 019F183042700F212317C563930DAD7D8E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
Manifest number: 070F
Signing time: Tue 30 Jun 2026 11:00:43 +0000
Manifest this update: Tue 30 Jun 2026 11:00:43 +0000
Manifest next update: Wed 01 Jul 2026 11:00:43 +0000
Files and hashes: 1: BkAThp4LzSd4EEBTjflc-mfhFy4.crl (hash: 1BbM/fCg35npQGgb6JsqvaaSDyTYRcmnrcz22sxuLvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:42:70:0f:21:23:17:c5:63:93:0d:ad:7d:8e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064013869e0bcd27781040538df95cfa67e1172e
Validity
Not Before: Jun 30 11:00:43 2026 GMT
Not After : Jul 1 11:00:43 2026 GMT
Subject: CN=8feabf64a0c91d611af0c16f45963967845404e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:de:e7:7a:55:96:36:21:ca:81:1d:f6:2a:
80:38:d9:88:3c:2b:9a:73:52:c0:73:e9:fa:17:5e:
37:da:74:dd:a6:01:12:56:ef:c0:89:7c:ce:bf:c1:
8a:58:8e:67:48:04:78:93:cb:34:9b:53:65:6e:f5:
a1:12:6c:1a:a5:e8:db:72:ff:c1:c7:3f:24:ae:6f:
88:db:5d:4f:6a:c2:a0:f9:7d:92:c7:e8:05:19:d8:
e2:43:4e:b2:e0:22:d0:2b:9d:f8:26:cd:ae:dd:34:
ff:b0:47:8e:f1:a1:0e:19:2f:c8:4f:e7:66:27:b7:
6c:d3:02:22:38:0b:6d:ba:8b:2a:a1:95:98:88:b2:
fe:69:4e:05:6e:8d:0f:66:50:39:ad:48:ac:89:04:
1c:13:dd:ba:b2:90:86:1c:d8:17:65:f2:25:a4:21:
d2:87:82:3b:2f:b7:7e:b6:4d:ef:19:7b:9c:3b:63:
5a:fc:3a:7c:ad:96:67:7d:6a:82:91:12:04:f5:43:
8d:ec:89:d5:a8:72:2e:cb:44:89:c1:ec:9d:8f:49:
d1:72:22:4b:99:f8:e7:d1:70:33:74:dc:03:90:0b:
e6:71:21:ff:70:bf:e9:6d:40:8c:4c:b3:d1:ac:a9:
98:9c:d1:0a:03:8a:63:32:0e:af:b8:76:76:26:78:
22:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EA:BF:64:A0:C9:1D:61:1A:F0:C1:6F:45:96:39:67:84:54:04:E1
X509v3 Authority Key Identifier:
keyid:06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f4:e4:4d:ac:6a:38:00:cb:a4:eb:ee:bd:3d:08:f2:b2:dc:
db:9c:d3:79:06:e5:60:75:cd:ae:0e:0d:0a:60:bd:21:fb:38:
98:1e:e7:ae:e3:a6:f1:36:4e:2d:46:18:c4:cb:a6:2d:e6:34:
69:26:93:c3:3d:2d:78:3b:45:09:6c:eb:e8:69:47:37:2d:11:
c8:f7:a1:03:d0:87:56:83:42:4a:4c:a1:b8:62:f8:f5:97:12:
15:c2:1d:8b:96:44:1b:9f:9c:3a:12:37:c8:21:ee:90:04:8a:
b7:2f:27:7c:2b:d2:e1:e7:e0:f3:86:9a:bd:d9:4d:c9:93:24:
74:1c:6f:5d:7f:8d:c2:39:ba:cd:d2:65:37:17:65:a5:0f:f3:
02:d3:c9:e8:7d:43:13:26:5a:e1:91:33:a0:ce:f8:b0:ad:27:
53:fe:d1:d9:40:73:84:56:f2:2f:e0:a0:b0:fa:63:b1:82:3f:
d8:79:ff:e0:9b:23:b2:28:01:0d:22:3b:fd:d7:68:4b:78:f3:
54:bd:7e:09:16:6a:c8:b0:32:8b:b0:0c:4d:20:54:1f:5e:c6:
46:37:1e:8d:7a:f8:86:76:47:bf:04:e5:f4:83:90:47:a5:e6:
d0:87:aa:ee:01:34:ce:fa:bd:3b:61:d7:fc:87:29:4d:ca:28:
87:45:d8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:35 2026 by rpki-client