Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
File: bkif4cfiCgsMY4QsRcFsV2MXhdM.mft (raw, json)
Hash identifier: aXvk3Uaxda0Gn8I23Q2FWOm9qkM3rTxBtCbkqDafxMQ=
Subject key identifier: 0C:37:0E:CA:43:30:2D:3E:B9:5B:81:A1:9A:C7:11:1A:84:29:5D:64
Authority key identifier: 6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
Certificate issuer: /CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Certificate serial: 019D389BE962E68F589568E12139D182FFEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:35 +0000
Manifest this update: Sun 29 Mar 2026 08:00:35 +0000
Manifest next update: Mon 30 Mar 2026 08:00:35 +0000
Files and hashes: 1: 7y9hj1vi8evyxMWsiJIGH1_53AM.roa (hash: Q69uQTzaOq7UQxdu+Czlq7rx75YhJrEs8hTR3Ul9WN0=)
2: bkif4cfiCgsMY4QsRcFsV2MXhdM.crl (hash: NQmbEAbLndNTNL3Y0qCVvDvtyoj1Bic62V4mAjiBZkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e9:62:e6:8f:58:95:68:e1:21:39:d1:82:ff:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Validity
Not Before: Mar 29 08:00:35 2026 GMT
Not After : Mar 30 08:00:35 2026 GMT
Subject: CN=0c370eca43302d3eb95b81a19ac7111a84295d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:1d:ec:1a:b9:85:09:69:04:d3:2a:95:0a:
7c:32:74:65:03:d1:cb:ee:72:56:7d:19:57:80:0f:
17:ae:0b:9a:55:b2:aa:13:dc:04:34:df:a0:a1:8e:
92:80:f0:64:31:1f:a3:c3:85:17:58:fa:de:94:b7:
a8:83:fc:5c:e9:83:b7:18:1e:69:1c:59:94:96:ea:
80:fe:28:3f:57:57:8a:d5:2a:26:9a:bc:e0:2e:f1:
ea:25:e2:22:8e:82:17:4a:52:94:e3:37:24:e0:0e:
0e:1d:c8:4b:65:87:6b:8f:79:47:fc:d0:97:73:90:
1a:8f:94:73:ba:a3:53:f7:f3:a8:ab:64:95:64:5c:
19:fe:2e:d2:30:5a:ac:03:f4:f8:aa:22:5e:9a:f9:
be:bb:53:5f:3b:24:9a:cf:69:9e:cf:e9:11:f5:bd:
26:60:3c:12:0c:0d:33:e2:49:c0:78:74:f6:47:7e:
46:bb:74:96:35:91:a2:21:24:50:46:52:80:b5:1d:
bd:38:6a:bd:1d:f4:97:50:16:1b:b6:d6:3b:95:52:
59:52:02:37:10:47:21:95:17:c4:dd:f9:b3:e8:5e:
5c:01:94:c0:4b:47:36:70:b4:0e:4f:17:19:45:86:
f5:a6:9f:1b:64:09:e3:c2:2c:cc:32:5e:0a:26:ed:
47:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:37:0E:CA:43:30:2D:3E:B9:5B:81:A1:9A:C7:11:1A:84:29:5D:64
X509v3 Authority Key Identifier:
keyid:6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:27:7b:1f:71:59:f0:2e:45:38:e5:a2:74:99:9a:4a:88:86:
aa:6b:19:1a:a4:b3:80:aa:da:ed:1d:5c:3b:b3:56:da:c2:b2:
80:66:e4:36:77:59:d8:1d:dd:be:2d:23:ab:73:70:39:53:0b:
fb:d5:81:14:eb:be:41:26:b4:e8:0c:d8:04:e1:9c:b7:5e:d6:
5b:4d:a9:51:a9:64:2f:ac:f1:cb:fb:f2:32:24:a8:0b:a9:7a:
5b:71:59:2c:79:6d:7c:14:82:0d:be:3e:e5:d5:fe:b4:3a:2e:
b0:23:29:7c:95:04:3b:87:e2:ea:d4:78:07:9c:d1:11:92:0f:
87:41:0d:43:e2:cd:60:e7:a6:ea:32:11:9a:9f:02:bb:93:ec:
fb:c9:ec:57:aa:71:b1:ca:14:63:ab:1c:12:25:39:13:75:45:
da:f9:ff:25:29:12:80:aa:b2:6e:e6:be:44:4c:f2:eb:11:c4:
68:0f:19:b3:90:66:94:b5:d9:a9:67:c7:9b:8a:5b:d9:42:d7:
66:93:61:f0:f4:51:d1:e0:96:30:67:71:d5:1f:b4:1c:1e:6e:
a0:74:26:cf:13:63:0e:26:27:c4:3b:15:f7:a2:55:59:6a:ff:
3e:6f:92:fa:a1:82:d5:5d:93:55:c1:61:cd:59:e5:32:21:42:
de:2d:ea:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:47 2026 by rpki-client