Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft
File: K-BKLRVsHGjDUjj26DAauu8AvfE.mft (raw, json)
Hash identifier: Mp1FLzMfkpc7udhrzox8SllMCqZvGFoiOrEBJVenKfA=
Subject key identifier: 2D:C7:2A:0B:3F:66:98:87:69:4C:10:19:0C:88:5A:FD:A8:7E:79:66
Authority key identifier: 2B:E0:4A:2D:15:6C:1C:68:C3:52:38:F6:E8:30:1A:BA:EF:00:BD:F1
Certificate issuer: /CN=2be04a2d156c1c68c35238f6e8301abaef00bdf1
Certificate serial: 019D38D394D48FBB63BE4F3EFA2914DA0955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-BKLRVsHGjDUjj26DAauu8AvfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft
Manifest number: 014C
Signing time: Sun 29 Mar 2026 09:01:23 +0000
Manifest this update: Sun 29 Mar 2026 09:01:23 +0000
Manifest next update: Mon 30 Mar 2026 09:01:23 +0000
Files and hashes: 1: K-BKLRVsHGjDUjj26DAauu8AvfE.crl (hash: WvbHRspBPizhTQC1KCAW/9FeewEHYgF/MZnjcEVdJpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-BKLRVsHGjDUjj26DAauu8AvfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:94:d4:8f:bb:63:be:4f:3e:fa:29:14:da:09:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be04a2d156c1c68c35238f6e8301abaef00bdf1
Validity
Not Before: Mar 29 09:01:23 2026 GMT
Not After : Mar 30 09:01:23 2026 GMT
Subject: CN=2dc72a0b3f669887694c10190c885afda87e7966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b7:61:93:3e:2c:6c:cb:f0:ef:47:d7:79:f0:
d3:40:63:97:37:96:74:6c:69:fb:85:b7:11:61:94:
dd:48:c4:9d:34:68:f8:ee:18:05:85:84:2a:ad:0d:
3a:c8:70:c1:d5:5f:de:c7:af:04:01:8b:da:68:52:
e1:57:a4:2e:30:99:43:5d:61:cd:b4:51:a4:d7:c8:
ba:85:f2:b9:59:ee:ea:5a:f6:f0:e9:65:3c:c3:4b:
c0:4e:72:6f:69:05:1a:20:bc:06:eb:3c:c7:11:b3:
94:e8:8b:9d:54:80:1c:d3:32:68:50:b1:7f:02:43:
84:c2:f2:2b:b2:aa:e0:b4:88:21:8b:d6:2b:59:e1:
8f:23:16:18:a1:ce:3d:39:e4:be:75:ac:8a:e3:f4:
5c:13:98:c0:89:ee:c5:53:16:1f:91:bd:91:c7:0a:
93:bb:63:bb:b4:a7:30:ae:42:65:0e:9f:9f:e4:68:
ba:c8:5d:89:6c:70:95:b9:62:6b:cf:0b:8c:4b:9d:
e9:d1:10:d3:b4:2d:e9:8b:bd:8a:eb:4a:a1:39:71:
f7:5a:cc:4e:1b:62:3b:79:ba:94:7f:68:6e:d6:1c:
c6:0f:71:fe:17:ee:19:f4:3e:50:64:42:c9:cf:37:
c9:ab:a5:fc:e2:63:ff:a7:e3:33:90:e3:2e:13:c9:
2a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C7:2A:0B:3F:66:98:87:69:4C:10:19:0C:88:5A:FD:A8:7E:79:66
X509v3 Authority Key Identifier:
keyid:2B:E0:4A:2D:15:6C:1C:68:C3:52:38:F6:E8:30:1A:BA:EF:00:BD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-BKLRVsHGjDUjj26DAauu8AvfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:64:a6:3e:bc:ee:7e:06:9f:54:c5:c9:a3:ff:d9:73:88:4a:
1f:42:c6:77:66:89:7e:9f:38:d3:6c:60:7f:5a:3c:6e:d9:cc:
03:bd:94:60:58:39:f3:23:41:fe:81:03:0e:3d:a7:13:d7:f0:
c4:cc:a2:c3:69:2f:a8:35:16:bd:64:6b:97:8d:8e:43:a5:c2:
63:bc:7e:63:5f:2a:63:30:31:35:2e:a6:e0:a3:2a:2d:b2:ed:
59:c9:05:a9:c6:bf:1a:34:f1:ba:e1:8b:7a:a5:c2:f6:eb:b7:
84:49:a5:d2:82:af:7e:31:20:63:1c:1d:3c:cd:a9:1c:6d:08:
de:d5:b2:a1:74:2d:8c:3f:60:3d:ee:37:92:96:7b:ab:77:96:
8d:c2:b3:c4:3a:1a:a5:5c:f7:8d:85:b0:88:3a:5e:3a:69:f3:
8f:a4:1d:09:db:52:b4:fc:e8:c2:fd:46:b5:5e:ad:b4:d4:5d:
94:ec:29:9b:0b:b3:25:54:90:d3:c8:da:4e:e5:00:56:2f:98:
60:d4:92:cb:e0:b3:a2:0f:ba:6c:12:50:57:87:13:8d:10:d7:
22:31:18:af:24:91:bf:7a:65:b3:1a:46:f3:6a:c8:c2:1f:b2:
58:60:b6:82:56:b4:3f:cb:e4:6c:10:35:c4:3c:36:3b:ce:fb:
d6:f4:99:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:02 2026 by rpki-client