Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft
File: K-BKLRVsHGjDUjj26DAauu8AvfE.mft (raw, json)
Hash identifier: e1QaSsVzWm54Wn4mfbNNi/lHPz+mkiiNPGuAaZ7sUsU=
Subject key identifier: A6:2C:67:00:0B:EE:59:7C:4A:2C:62:76:4A:DF:6F:53:78:CD:F2:D6
Authority key identifier: 2B:E0:4A:2D:15:6C:1C:68:C3:52:38:F6:E8:30:1A:BA:EF:00:BD:F1
Certificate issuer: /CN=2be04a2d156c1c68c35238f6e8301abaef00bdf1
Certificate serial: 01A1686B42C387CAF9D79E9A158BAD8A42A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-BKLRVsHGjDUjj26DAauu8AvfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft
Manifest number: 0378
Signing time: Fri 23 Oct 2026 11:00:22 +0000
Manifest this update: Fri 23 Oct 2026 11:00:22 +0000
Manifest next update: Sat 24 Oct 2026 11:00:22 +0000
Files and hashes: 1: 476Pd4BcXq6cpIo0miCe9jXiXQI.roa (hash: DDfZDiInG5mai4tv/HuAutPNdZsBHHTAZwEhmg4P5tk=)
2: IUND_ZJvUj1CtcpArBHxe8bv1p4.roa (hash: n/xeReedDwJALLUqAUfHidJssa5b4nfOPmZ83oYT4CQ=)
3: K-BKLRVsHGjDUjj26DAauu8AvfE.crl (hash: cdlQ2M9txfDqlLfeeSfr0RFsM1wsMXUGM+u2JhPcqm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-BKLRVsHGjDUjj26DAauu8AvfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:6b:42:c3:87:ca:f9:d7:9e:9a:15:8b:ad:8a:42:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be04a2d156c1c68c35238f6e8301abaef00bdf1
Validity
Not Before: Oct 23 11:00:22 2026 GMT
Not After : Oct 24 11:00:22 2026 GMT
Subject: CN=a62c67000bee597c4a2c62764adf6f5378cdf2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:73:4f:83:3a:31:f3:a5:e4:cd:d7:d7:22:
82:14:e3:71:b8:a8:67:2c:24:3e:c0:85:23:15:b7:
ca:2e:f1:ff:17:28:c4:9a:0b:7f:bb:23:0a:20:b1:
55:7e:2f:56:16:46:21:f7:2f:18:4c:45:ee:ba:a7:
a5:9d:58:df:00:25:af:bd:ac:3a:f4:85:fd:1a:c9:
05:55:4f:9f:64:4b:cd:c6:f9:01:ce:3c:e3:59:26:
c3:83:3d:af:cb:69:fa:34:a1:38:16:1b:4d:90:85:
e0:f5:e4:0c:f4:d9:dc:93:19:98:6b:0e:c5:77:d1:
24:ae:bd:1f:2b:22:b7:b5:38:de:06:78:61:0d:2e:
f0:72:b8:5c:92:e9:3b:0f:21:5b:f8:13:ff:f4:89:
f9:ae:d0:02:b7:b7:a7:49:ca:cb:79:46:cc:6f:82:
9d:07:26:a8:e7:6d:ef:e1:08:d6:a8:37:91:49:74:
a1:a8:8f:64:8d:30:99:6e:0a:84:4a:2e:aa:c9:d6:
dd:e6:4c:05:d2:f1:ca:07:35:8c:86:d5:a7:60:c4:
cc:9d:b2:e2:d4:c9:ae:14:08:bb:33:54:68:48:47:
51:38:8c:c7:f2:49:0c:d7:4b:9c:a6:c9:b0:4e:db:
0e:60:e3:62:d9:77:f6:9e:77:c5:24:25:9b:a9:4f:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2C:67:00:0B:EE:59:7C:4A:2C:62:76:4A:DF:6F:53:78:CD:F2:D6
X509v3 Authority Key Identifier:
keyid:2B:E0:4A:2D:15:6C:1C:68:C3:52:38:F6:E8:30:1A:BA:EF:00:BD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-BKLRVsHGjDUjj26DAauu8AvfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:06:34:41:fb:ec:58:d4:21:ca:0f:00:db:27:01:4e:d9:60:
0a:4a:97:6c:ea:c1:34:b2:b5:fe:f5:08:4c:45:67:d0:a1:21:
43:2e:3a:9a:4a:63:f0:1c:4c:c1:45:b1:88:c0:f1:13:a5:87:
9e:80:dd:e0:8c:8a:9a:0f:88:82:f1:a3:2c:dd:24:96:1b:11:
de:39:14:89:d0:67:b1:bd:89:8a:12:b4:17:bd:19:b2:5e:e1:
c8:63:8e:86:14:cd:7f:e0:28:2e:d0:2b:09:8a:ad:0c:e2:8f:
bf:fc:a3:ba:2a:7d:12:be:06:c4:9a:95:8e:39:69:b9:85:a4:
c5:ed:9d:72:2d:b9:ee:39:a6:da:8b:c9:43:b1:a0:3e:08:61:
07:32:ef:f2:1d:0e:8f:07:e3:04:83:80:97:60:53:53:cc:74:
dd:d0:38:a7:49:6c:22:c3:0e:af:bb:5d:2f:49:ba:f7:0e:23:
81:8e:ea:f9:0b:9e:25:1e:aa:b5:3c:b1:5d:97:78:ce:44:79:
dc:a6:0e:e8:f6:27:af:30:41:3d:5c:42:62:37:5d:c4:20:45:
73:00:ee:bf:5c:1c:79:09:a1:5f:fa:d0:17:5c:39:3b:c5:d0:
00:ae:f0:2e:46:20:81:2c:4f:16:f2:67:7e:a7:e5:4d:1f:d7:
1a:20:e4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 15:35:28 2026 by rpki-client