Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: jiH7YKQK49+VyNMpYJR3Q6745Pa900TdTWovk29xkT0=
Subject key identifier: 89:E9:F1:52:7A:F4:AA:6A:57:D0:FD:B4:82:E8:A3:A0:7A:6B:BC:40
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 01A13F703256EA192807D9BD2DD4020049A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 12:01:19 +0000
Manifest this update: Thu 15 Oct 2026 12:01:19 +0000
Manifest next update: Fri 16 Oct 2026 12:01:19 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: P6t1LS2WDVJxXCVhl0m9DBlqR06YnfDnebgnDeaQsoQ=)
2: k-u4T0e4tVorBoGy6nf5Gw5YRNs.roa (hash: rWH/QqNZxriq26jdgQuCLH1AphEv+lZpQduBEGoklCM=)
3: oCDLp44KeSMJvVZp5T2IShxlL4o.roa (hash: OLzEYYayae+FmqrETQJHCGxfQyGvHodRSRrVJfyY0No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:32:56:ea:19:28:07:d9:bd:2d:d4:02:00:49:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Oct 15 12:01:19 2026 GMT
Not After : Oct 16 12:01:19 2026 GMT
Subject: CN=89e9f1527af4aa6a57d0fdb482e8a3a07a6bbc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:11:09:e8:df:e2:67:b0:2e:35:1a:ab:2b:0f:
f7:67:c2:6b:e7:6e:6d:c4:71:43:a5:4f:51:7b:2d:
af:f6:e5:76:26:a2:dd:d3:26:e9:32:35:59:e8:ed:
7a:48:17:17:5c:a8:41:99:57:d2:c9:92:b3:bf:6d:
a9:30:a5:50:1c:b6:ac:4d:36:5d:ef:dd:ab:1a:67:
97:1b:3d:31:4b:ef:69:dd:d3:9d:d6:f7:be:83:ce:
cf:52:3f:d4:e2:c2:cd:f8:8a:87:f3:4c:1c:8f:06:
6c:21:bb:63:97:18:b4:23:aa:69:3b:41:c1:ac:3c:
16:ec:38:c3:24:1e:5a:53:15:21:0a:f8:9c:14:23:
39:fa:98:09:4e:b2:0c:37:77:44:26:f7:97:49:24:
7c:72:4b:45:d9:d7:e9:18:84:1f:fd:48:58:40:bf:
30:94:8f:74:0f:b2:56:15:db:dc:be:67:3b:81:21:
ab:18:06:57:d9:3c:81:25:f0:66:ea:ef:33:ce:3c:
b6:c6:93:d4:45:25:89:cf:e0:03:2d:31:53:b2:24:
e9:25:97:0f:7b:14:53:00:3a:96:1d:24:61:3b:f0:
2c:f0:78:44:b7:b8:47:b3:4e:14:84:4c:80:18:1d:
59:1e:3c:8b:47:7a:58:10:8c:61:60:24:b2:f0:6b:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E9:F1:52:7A:F4:AA:6A:57:D0:FD:B4:82:E8:A3:A0:7A:6B:BC:40
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9d:64:12:ff:47:40:95:ee:da:94:9d:61:d6:77:df:94:bd:
7e:41:9e:cb:c0:39:fc:93:04:91:d0:6f:ec:c4:12:fa:79:a7:
85:ec:fd:32:be:45:3e:91:94:ff:18:13:6a:38:56:b4:20:f8:
8d:df:c1:6e:5a:36:31:83:ed:12:4a:a6:aa:e8:77:87:9e:c4:
45:11:55:36:88:b1:e3:31:32:e8:88:4f:4c:59:f8:1e:6f:d6:
0f:68:a2:e4:40:3d:33:ee:f4:8c:a4:e2:6f:b0:d6:b5:31:e9:
75:9e:0d:cb:8d:16:91:d2:56:36:b6:9a:d9:ef:7b:00:5b:23:
77:3b:b9:71:d1:c6:07:75:5f:8f:a1:71:6d:9a:ed:0e:f5:17:
14:f7:58:ed:04:e0:fa:c0:72:a5:5a:8a:b0:5e:2d:eb:e9:c7:
0b:f7:e3:b9:19:1a:d5:7c:40:51:99:12:81:8d:c0:7e:0c:41:
08:fd:e4:c6:4e:f0:50:f7:25:e5:17:2a:73:97:6a:69:e8:e9:
91:b8:10:80:ea:1b:57:0d:c9:62:85:6d:0a:67:31:9e:26:5a:
3e:4f:31:b6:35:32:07:69:3a:ef:95:11:71:cc:43:d5:5a:ee:
9c:96:f6:1e:86:81:4f:e5:83:d1:bc:5e:75:c0:a8:82:fe:df:
a1:a3:83:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:22:37 2026 by rpki-client