Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/142e24-aaaf-4d35-9c0f-d81c77ab0c43/1/bKEUWWE3FGPWv3mUTSgeDPpqAJ0.mft
File: bKEUWWE3FGPWv3mUTSgeDPpqAJ0.mft (raw, json)
Hash identifier: PRcxJ1rQx9wl5ppOZxzJkasedX9PP9euxbsmxYkZuEA=
Subject key identifier: 81:95:4B:08:EB:64:4B:E5:84:37:86:34:84:A6:15:CC:14:CF:2D:B3
Authority key identifier: 6C:A1:14:59:61:37:14:63:D6:BF:79:94:4D:28:1E:0C:FA:6A:00:9D
Certificate issuer: /CN=6ca1145961371463d6bf79944d281e0cfa6a009d
Certificate serial: 019D3A1CEE805989067754F0C505A352B7DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKEUWWE3FGPWv3mUTSgeDPpqAJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/142e24-aaaf-4d35-9c0f-d81c77ab0c43/1/bKEUWWE3FGPWv3mUTSgeDPpqAJ0.mft
Manifest number: 1A
Signing time: Sun 29 Mar 2026 15:01:07 +0000
Manifest this update: Sun 29 Mar 2026 15:01:07 +0000
Manifest next update: Mon 30 Mar 2026 15:01:07 +0000
Files and hashes: 1: bKEUWWE3FGPWv3mUTSgeDPpqAJ0.crl (hash: mtxmGypwUZ45ZTuONN5HqKe22xPlq3p3h8ftBB3/R9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/142e24-aaaf-4d35-9c0f-d81c77ab0c43/1/bKEUWWE3FGPWv3mUTSgeDPpqAJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/142e24-aaaf-4d35-9c0f-d81c77ab0c43/1/bKEUWWE3FGPWv3mUTSgeDPpqAJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKEUWWE3FGPWv3mUTSgeDPpqAJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:ee:80:59:89:06:77:54:f0:c5:05:a3:52:b7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca1145961371463d6bf79944d281e0cfa6a009d
Validity
Not Before: Mar 29 15:01:07 2026 GMT
Not After : Mar 30 15:01:07 2026 GMT
Subject: CN=81954b08eb644be58437863484a615cc14cf2db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9a:ae:67:30:fa:ae:0e:88:76:ba:6d:e7:2d:
16:10:d9:61:5f:7d:9c:7e:fb:7c:eb:08:c1:42:4d:
58:7d:a4:1a:a9:44:54:9a:15:2a:b8:d2:6e:3d:2d:
ee:bc:c5:b1:80:8b:99:6a:a9:23:b9:b4:2c:1b:fe:
ba:da:03:da:ab:83:c4:93:cd:44:e6:e4:8a:04:17:
25:69:51:5d:a3:ee:c1:a2:32:20:24:80:a6:64:a1:
43:b9:d5:da:8b:cb:d8:3d:0c:a6:43:bb:f4:84:01:
7f:6d:66:e8:65:a9:57:d1:b7:69:7f:4e:75:df:26:
80:c6:b4:38:8d:bb:0e:20:ec:11:62:23:65:24:90:
5a:73:e5:c6:21:d7:68:a4:bd:8e:03:93:df:c0:e9:
b8:91:0b:7e:da:58:23:45:3f:d2:fb:9f:ff:ad:5b:
55:2d:41:69:97:ce:f1:eb:e6:13:53:7d:cb:83:da:
2b:bf:d6:f4:01:71:6c:7c:70:9d:f6:f5:b6:c4:7e:
db:64:32:5a:2a:8c:25:44:de:b2:9c:95:ab:a0:4f:
59:3a:af:ff:a1:38:55:26:24:fe:45:b2:16:bf:e7:
42:f0:bd:ff:c0:d0:35:84:4d:7c:d4:bb:05:3a:6c:
c2:d9:ef:47:8b:14:a9:65:cb:93:2a:f0:6a:7a:51:
e4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:95:4B:08:EB:64:4B:E5:84:37:86:34:84:A6:15:CC:14:CF:2D:B3
X509v3 Authority Key Identifier:
keyid:6C:A1:14:59:61:37:14:63:D6:BF:79:94:4D:28:1E:0C:FA:6A:00:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKEUWWE3FGPWv3mUTSgeDPpqAJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/142e24-aaaf-4d35-9c0f-d81c77ab0c43/1/bKEUWWE3FGPWv3mUTSgeDPpqAJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/142e24-aaaf-4d35-9c0f-d81c77ab0c43/1/bKEUWWE3FGPWv3mUTSgeDPpqAJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:88:e5:e9:a2:a7:1d:81:27:58:61:55:05:11:71:fd:18:f6:
e4:5c:fd:66:ec:7b:42:f6:b4:90:43:28:06:18:12:b0:05:f3:
0e:8f:9e:81:3e:f1:70:08:3f:ba:6e:58:4f:4f:90:e3:38:40:
12:9c:ee:2a:74:77:0d:8f:15:d7:f7:48:ca:ed:b2:fc:6f:97:
c1:c9:89:72:15:25:77:1d:7e:ae:06:aa:5c:88:ee:2e:6e:fb:
0b:23:22:a0:ef:a8:77:d0:58:08:b1:c4:ba:5d:d0:f7:ff:1e:
d5:fc:c8:b4:4a:c8:5a:d0:7b:2f:36:b9:7a:45:4d:16:6d:70:
6c:5c:d0:02:9a:41:11:e2:96:6b:0a:9e:1a:03:4e:84:8e:9c:
84:4c:9a:49:3a:90:e5:8a:8d:e5:2f:d4:23:0d:b8:cf:de:38:
1f:20:05:aa:a0:d5:9a:91:bf:87:ed:69:21:04:dc:4a:dc:d6:
b5:df:82:1d:21:34:49:03:14:10:65:20:1b:af:5e:a3:13:50:
c0:f0:63:f6:28:e9:8b:ba:c3:2b:b9:8f:c6:a5:af:73:3b:7c:
ea:2b:4f:27:5f:ea:14:3b:f2:7a:9e:34:91:98:1c:39:8b:85:
75:e6:d8:54:1d:f3:1d:58:bb:7a:6c:63:90:07:ad:8a:18:29:
1e:1d:77:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:35 2026 by rpki-client