Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: lZcmuvNL6ADE7PHee86SZUYkiN5KNaq92B1K1PPMyGc=
Subject key identifier: 4B:E3:EC:67:0B:D9:80:B0:D2:8A:8F:D2:B7:AA:36:CB:39:56:8C:B7
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 019D382E842E5CA74005E73943EC98C66A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 06:01:05 +0000
Manifest this update: Sun 29 Mar 2026 06:01:05 +0000
Manifest next update: Mon 30 Mar 2026 06:01:05 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: GmUt6Bj1dP1uW+m+k2EindmQw3gFJ7H4HQutY8hSlUw=)
2: k-u4T0e4tVorBoGy6nf5Gw5YRNs.roa (hash: rWH/QqNZxriq26jdgQuCLH1AphEv+lZpQduBEGoklCM=)
3: oCDLp44KeSMJvVZp5T2IShxlL4o.roa (hash: OLzEYYayae+FmqrETQJHCGxfQyGvHodRSRrVJfyY0No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:84:2e:5c:a7:40:05:e7:39:43:ec:98:c6:6a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Mar 29 06:01:05 2026 GMT
Not After : Mar 30 06:01:05 2026 GMT
Subject: CN=4be3ec670bd980b0d28a8fd2b7aa36cb39568cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fa:b8:b6:40:5c:9d:c6:44:e6:4a:4a:3d:d7:
cd:20:b4:39:66:99:7e:74:7c:fc:17:1f:71:23:41:
3c:eb:f5:e7:f5:15:9a:ac:cc:3c:db:99:b1:73:28:
b4:8f:95:af:46:ca:3d:ab:90:66:b4:f0:4b:ff:8a:
59:3a:6d:2c:3b:3a:70:38:18:60:a4:dd:87:ad:af:
c3:67:a0:75:6e:22:08:a1:76:c9:06:a0:a4:30:79:
e0:cf:89:db:25:9a:ec:b2:a4:78:30:cc:5b:c9:ca:
b4:a4:e1:89:a4:0f:02:cf:21:a7:72:49:24:5d:d3:
69:65:41:44:c9:a0:8a:87:05:69:9d:b2:a2:ff:f3:
42:26:8b:62:6b:35:e3:79:0c:86:f0:28:52:96:ab:
89:3b:83:61:14:41:1c:d1:23:46:e6:46:75:e4:1b:
80:c3:45:f5:cd:95:5c:a5:80:2e:b4:70:85:ad:6c:
25:7e:78:4c:5d:ec:9f:ba:b0:08:88:89:e1:06:a2:
6b:62:8e:fd:6f:a0:83:e9:59:49:ac:d6:21:e2:22:
37:9d:34:0a:62:c1:5b:67:47:fd:9c:8d:54:67:5d:
9d:f1:a1:35:8d:58:89:4c:37:da:c8:13:7c:48:34:
ba:f5:ad:92:22:bc:df:be:ac:c1:22:60:fb:7c:76:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E3:EC:67:0B:D9:80:B0:D2:8A:8F:D2:B7:AA:36:CB:39:56:8C:B7
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:97:9e:ee:16:04:31:8b:8f:c1:67:7f:18:0d:10:fe:ae:44:
0b:79:3e:a9:52:8b:5f:35:8b:29:02:81:0a:df:70:f0:e5:b0:
5f:c4:ba:e6:48:f1:e3:ce:78:6e:18:8d:23:7d:4d:dd:9b:0c:
6d:0f:80:17:f3:4b:15:d9:a8:69:0b:da:c4:cb:d6:0c:6e:55:
c4:96:b7:33:86:25:32:4a:47:d0:fd:3a:02:68:41:ee:ba:2b:
e7:c5:0d:51:59:b6:07:b5:13:fa:4c:fd:b9:6f:84:5c:f4:36:
66:8e:5a:65:90:b7:2f:ed:70:fd:5d:2c:34:44:ba:40:3b:dc:
99:2b:65:ac:dc:1c:59:8c:17:59:d4:4f:8d:b6:e8:96:ce:20:
d9:ee:e0:be:6b:af:a9:bd:8f:27:62:a9:7b:25:f7:ed:70:49:
f1:14:f0:10:56:03:78:0c:e5:21:cf:02:24:a3:4a:9f:bd:53:
8c:8d:3a:45:c1:e4:29:71:c6:aa:25:5f:00:dd:9d:2a:08:89:
d3:14:c1:be:10:eb:fc:a5:ab:31:2c:67:3f:a4:f7:60:60:35:
b2:12:f6:c9:4c:51:7e:b9:94:b5:ce:fc:92:f6:1a:4d:3c:2a:
a6:39:bc:0d:37:68:f1:66:59:64:75:dc:82:33:c2:ef:e2:dc:
36:9d:c4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:44 2026 by rpki-client