Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
File: bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft (raw, json)
Hash identifier: B9BzoVzA0p7BS2FHgxNZlRlKT3pUO3aISR7TZC+CoNg=
Subject key identifier: 71:78:43:5E:CD:87:A7:4D:16:9D:EB:86:B3:CB:5B:89:7D:F1:41:81
Authority key identifier: 6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
Certificate issuer: /CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Certificate serial: 019D38D33DC3FA7F49968008F8D69327826A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 09:01:01 +0000
Manifest this update: Sun 29 Mar 2026 09:01:01 +0000
Manifest next update: Mon 30 Mar 2026 09:01:01 +0000
Files and hashes: 1: 7hearCPqGkH82yrPNdhtkZ4kgBM.roa (hash: 1K1XiEzCyji1A9po78V8w/DyD+zeqIlOg07kZeCGl6g=)
2: bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl (hash: c0DU5WInqUigb0vLmFpcD272RENYRmHd0Y2Qxsg61Hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3d:c3:fa:7f:49:96:80:08:f8:d6:93:27:82:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Validity
Not Before: Mar 29 09:01:01 2026 GMT
Not After : Mar 30 09:01:01 2026 GMT
Subject: CN=7178435ecd87a74d169deb86b3cb5b897df14181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:94:84:ed:c7:49:1c:f5:c5:45:d1:c7:56:03:
87:85:1e:78:94:9f:12:ce:53:9c:7a:24:58:c3:17:
e1:36:04:31:80:18:4b:b8:6d:e3:dc:64:e7:6a:36:
7c:b0:11:87:f3:39:a5:c0:7f:5b:7c:35:06:78:62:
44:08:fe:de:91:7c:92:6c:7c:6d:3c:4f:1b:d0:52:
97:1e:3c:d4:a0:d6:cc:1e:8e:f6:0e:4c:b0:a4:b8:
3f:b0:e6:62:4c:0b:66:3f:0d:b7:e6:3b:28:b6:85:
2b:47:b1:ad:10:c4:54:de:96:ab:0c:73:26:38:f8:
0d:86:f9:63:e8:28:fe:9f:8b:6a:94:44:d7:74:d3:
4c:12:e8:c8:31:34:ce:08:34:d5:12:25:7b:07:e9:
ff:8f:57:4b:ab:26:cc:c4:71:d2:d0:b9:ba:1e:bf:
91:dc:77:85:53:77:2c:36:a5:0f:46:65:85:f6:00:
0c:09:2d:e3:42:5e:14:ca:21:b0:2e:46:5e:5b:bb:
16:92:63:70:55:99:01:1a:9a:5b:d2:ac:cd:d0:6d:
0d:8e:16:67:f2:c2:53:11:81:74:69:6a:8b:16:b4:
7f:cc:a5:fb:71:af:1f:a4:2a:a7:66:15:e7:81:c9:
30:5e:f8:ea:a2:6f:58:27:b6:c3:ea:9c:16:b2:99:
54:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:78:43:5E:CD:87:A7:4D:16:9D:EB:86:B3:CB:5B:89:7D:F1:41:81
X509v3 Authority Key Identifier:
keyid:6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ec:d7:06:5f:1a:71:e2:bb:fa:51:b0:75:db:1e:a6:8b:88:
86:36:51:00:ef:76:29:64:eb:72:76:b3:0c:71:93:33:10:76:
f9:84:88:5e:11:f4:13:4c:6f:71:75:b4:8b:93:e7:40:6a:9e:
ed:97:fa:9d:96:f6:80:8c:d2:29:c2:dc:fb:2d:17:25:2c:1c:
7a:f0:57:1e:eb:c2:cd:db:ec:b8:d6:a9:1a:46:c7:08:94:82:
e7:51:6a:9f:52:b5:3f:bf:e9:4c:49:75:9c:cc:b9:b1:1d:65:
39:11:e4:98:42:79:d6:12:4f:55:42:27:93:69:9e:4e:ff:bc:
53:98:4f:30:c0:bc:6a:58:6c:ae:7b:aa:cb:38:81:d4:70:7d:
6d:96:63:99:ed:27:a7:e6:1f:80:a8:40:cc:b2:94:4f:08:fa:
9e:fb:de:91:62:09:31:8a:6f:52:b4:e7:f5:a0:06:83:61:7c:
64:8f:1c:a1:7e:84:09:04:dd:67:ba:0b:b5:10:a5:d3:33:4b:
d4:36:55:5b:8c:85:ff:57:a5:c9:37:5a:9a:ad:fd:a8:de:ef:
28:6a:3a:d9:d0:1c:f4:05:03:1b:78:49:f6:45:09:4d:26:e5:
90:5b:e4:2c:05:20:49:0f:ff:7f:c7:41:92:c2:6a:4a:12:13:
39:64:2b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:05 2026 by rpki-client