Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
File: bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft (raw, json)
Hash identifier: QvURa+DWY8TEWkvDlt4JF13CRHjhj0BiNc6iFDuhYbQ=
Subject key identifier: 73:51:85:74:1D:08:68:C1:AA:FB:4F:29:9E:8B:C2:40:40:C7:4E:BB
Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
Certificate issuer: /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Certificate serial: 019D38654FB4724E7B7AFE447268763DF42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:00:56 +0000
Manifest this update: Sun 29 Mar 2026 07:00:56 +0000
Manifest next update: Mon 30 Mar 2026 07:00:56 +0000
Files and hashes: 1: _HzxSZR90lf9BYmEm2VupOU1Vas.roa (hash: Ugm9+I27Dta4vBt0cYoky3PGDm0q/WYMbNn8zxEdBlA=)
2: bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl (hash: b91P+uhyPKu7ZgWFUwp6Ey/hQHIoxbYILD6gvLff8Y8=)
3: wgHQmaQij3F-nK5W4X8CVxaOPm0.roa (hash: sBWiBVt4sHrg4hhwrk19Ek9irYUlBrf3WzJ8I2XR+Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:4f:b4:72:4e:7b:7a:fe:44:72:68:76:3d:f4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Validity
Not Before: Mar 29 07:00:56 2026 GMT
Not After : Mar 30 07:00:56 2026 GMT
Subject: CN=735185741d0868c1aafb4f299e8bc24040c74ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:22:10:09:9c:17:2f:78:5d:ad:28:1c:81:
45:51:80:6f:77:5f:ed:d4:51:05:96:c3:5e:c8:b3:
ef:9a:e3:f4:76:07:0d:96:88:39:67:a3:34:76:48:
4b:b1:09:7b:7c:39:42:f5:7b:5a:73:2e:2e:82:ff:
44:f1:ee:50:1c:01:28:90:53:39:0b:e6:f4:79:e8:
8b:db:31:cb:bd:0a:69:fa:76:f9:30:73:75:39:d1:
7c:5f:3d:88:cd:82:00:ee:2b:f8:59:90:20:5b:23:
88:63:29:af:fc:80:41:cc:10:ad:f1:8c:c2:0e:65:
f5:4a:e4:67:ef:81:31:5f:09:52:1b:1a:f2:20:e9:
58:ff:4c:c2:88:19:46:12:48:44:b3:d9:64:c6:79:
42:df:b7:e8:88:e8:ad:85:ee:6d:20:c0:94:36:96:
f8:dd:e4:c9:ad:d4:28:dd:74:82:21:59:1c:66:23:
e2:d3:c3:53:6e:50:92:81:73:9f:7f:10:a0:2d:23:
36:c0:d9:92:56:87:26:ad:1f:ea:10:91:9e:17:ce:
68:7c:d6:9f:ae:ad:e8:de:e7:5a:1b:3a:47:1b:f4:
0b:91:c3:36:7c:ed:89:04:06:a9:1f:ff:20:d7:bc:
dd:5e:76:c8:6d:b5:88:d2:37:08:51:c9:5a:2c:95:
7f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:51:85:74:1D:08:68:C1:AA:FB:4F:29:9E:8B:C2:40:40:C7:4E:BB
X509v3 Authority Key Identifier:
keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9b:29:97:07:1b:47:be:9a:b8:93:97:00:4c:1f:ad:e6:33:
20:63:43:31:3d:a5:02:a6:7e:ce:20:d3:7d:0c:58:ad:c3:a0:
19:5e:10:c9:2b:cb:62:27:24:ef:68:2c:59:7a:05:58:8f:16:
eb:39:a1:82:db:82:48:f4:b5:4e:de:0a:5f:ad:81:f8:7c:2a:
d6:11:fd:14:dd:4d:d4:06:0e:a3:37:03:35:c0:84:1e:97:a8:
e0:46:51:97:74:6d:30:e3:3f:2a:b9:11:39:d4:ee:63:0b:2d:
e7:d2:f3:12:60:ec:bf:e7:30:0a:81:13:d5:f1:23:bc:08:ee:
a1:66:0c:d3:1c:c4:d2:d2:58:d2:14:92:62:80:38:f2:66:7a:
8a:22:c7:35:58:1e:bb:cf:8c:fa:96:c3:7d:0d:c1:a6:80:e1:
06:ee:55:72:80:7b:35:7f:3f:23:13:7f:b1:59:af:ee:2a:5c:
dd:18:15:85:af:b7:b7:21:49:93:89:e2:aa:d4:7b:1c:ca:68:
c6:c6:fe:66:15:c8:b7:ad:3d:e1:07:10:27:c7:b7:f1:93:6c:
40:56:ee:11:51:90:77:49:07:de:7d:59:a0:60:5b:42:cf:87:
90:0e:9a:a0:11:b0:2c:cc:c6:d6:69:15:bd:6a:48:c2:e1:2b:
e9:a6:4a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:53:47 2026 by rpki-client