Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: etP0VPDdRBgu4RZLSwINbwyeoIM76yyhZ362KrVDq4M=
Subject key identifier: E5:96:59:E9:EE:91:5D:98:9A:31:0A:1F:B5:B1:E9:C1:31:14:C9:A4
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 019E2F5F7C0ED9F8CEF7F0408CD7ED2A99E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 06:00:47 +0000
Manifest this update: Sat 16 May 2026 06:00:47 +0000
Manifest next update: Sun 17 May 2026 06:00:47 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: LHbyhtmjEOJMKL5Z/Btc00UKCBqpyY7SKKDBo3LJrog=)
2: k-u4T0e4tVorBoGy6nf5Gw5YRNs.roa (hash: rWH/QqNZxriq26jdgQuCLH1AphEv+lZpQduBEGoklCM=)
3: oCDLp44KeSMJvVZp5T2IShxlL4o.roa (hash: OLzEYYayae+FmqrETQJHCGxfQyGvHodRSRrVJfyY0No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:7c:0e:d9:f8:ce:f7:f0:40:8c:d7:ed:2a:99:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: May 16 06:00:47 2026 GMT
Not After : May 17 06:00:47 2026 GMT
Subject: CN=e59659e9ee915d989a310a1fb5b1e9c13114c9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9a:67:a4:f7:bf:fc:ee:2d:b5:86:0b:03:f1:
4c:ce:78:97:cd:61:4f:43:ea:0a:19:91:82:c0:6c:
f9:e7:78:4f:11:7f:2e:5a:80:25:e7:e3:f9:3e:e9:
6d:7d:b1:33:75:66:23:79:58:b3:de:45:51:9f:86:
48:32:f5:99:6f:2d:74:a2:c6:5b:8e:ef:87:a9:2e:
93:a6:30:cb:33:ee:2f:af:cf:40:83:6f:9b:1a:27:
c6:6a:0d:ce:9c:12:d0:c2:a9:f3:49:60:de:24:2d:
02:3a:70:9a:10:6d:e9:80:2e:90:bf:46:c4:11:68:
f8:6f:4e:80:55:22:1d:1c:07:73:ba:0a:e0:c9:c8:
6a:0a:be:8c:f5:19:76:cd:73:5f:79:f1:33:da:1f:
eb:5b:4e:bc:9c:c8:c0:8f:a8:09:d2:a5:ee:06:21:
aa:c9:34:39:08:83:1d:43:96:be:06:3c:28:f6:29:
b3:64:bb:f7:ef:88:fa:24:d0:e5:63:d4:05:e0:d1:
78:dd:75:12:67:29:8d:cf:9f:1e:23:b1:ae:2d:e4:
32:77:0a:6d:b0:a0:b6:d3:86:6b:3c:ea:73:e3:95:
10:b2:73:e2:a9:ba:8c:4c:6e:ec:16:40:95:f2:b7:
07:28:c4:e8:bf:8c:c1:04:0d:fd:b0:58:9a:04:c6:
db:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:96:59:E9:EE:91:5D:98:9A:31:0A:1F:B5:B1:E9:C1:31:14:C9:A4
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9d:a6:3d:7a:44:dc:44:84:42:de:2d:14:40:a9:84:12:85:
dc:55:14:19:60:c0:1a:4f:1a:cd:8d:85:82:e1:a2:9e:e4:9d:
92:f1:ed:e5:10:11:89:0c:22:a0:82:8c:7b:e1:80:64:2b:47:
1b:7d:ed:05:05:9f:5f:f3:7b:ba:f0:de:7d:dc:1a:97:bd:a4:
0f:b1:07:ed:36:30:9c:50:d6:e6:b2:04:bc:3a:2b:11:1d:a0:
9b:a7:8d:6c:c4:31:8a:5b:1a:c8:cb:49:40:13:25:a6:bf:fb:
cf:e9:69:2d:05:f6:7a:0d:58:c8:f2:0d:ea:a5:a9:d2:a0:ae:
e3:3b:29:e9:23:e5:6c:74:ba:1c:5b:2b:c2:5d:59:86:a2:97:
0f:4b:5d:80:f1:92:cb:6f:c4:67:5c:4d:b0:be:bc:a8:6f:0b:
25:70:4d:be:30:bf:f7:be:c4:c3:00:d7:3e:e4:4d:c5:db:3e:
bf:31:e9:9f:c1:06:cc:aa:8d:9c:00:ab:2d:f6:6f:00:37:66:
b7:29:d6:80:be:b7:bc:25:d5:99:19:be:95:f8:b2:5a:3c:7d:
c7:c7:16:fa:3e:bc:03:9c:40:9e:16:d7:a7:94:61:bc:2b:51:
6b:5f:74:8b:21:70:62:98:ed:b4:36:c0:2b:45:11:98:f6:af:
7f:8b:fd:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vX3wO2fjO9/BAjNftKpnnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTMxMmJhNjVlOTBiZjhhY2Y0ZjU3MzI0YTMwYzBiNmNi
ZDFjMmYwHhcNMjYwNTE2MDYwMDQ3WhcNMjYwNTE3MDYwMDQ3WjAzMTEwLwYDVQQD
EyhlNTk2NTllOWVlOTE1ZDk4OWEzMTBhMWZiNWIxZTljMTMxMTRjOWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJpnpPe//O4ttYYLA/FMzniXzWFP
Q+oKGZGCwGz553hPEX8uWoAl5+P5PultfbEzdWYjeViz3kVRn4ZIMvWZby10osZb
ju+HqS6TpjDLM+4vr89Ag2+bGifGag3OnBLQwqnzSWDeJC0COnCaEG3pgC6Qv0bE
EWj4b06AVSIdHAdzugrgychqCr6M9Rl2zXNfefEz2h/rW068nMjAj6gJ0qXuBiGq
yTQ5CIMdQ5a+Bjwo9imzZLv374j6JNDlY9QF4NF43XUSZymNz58eI7GuLeQydwpt
sKC204ZrPOpz45UQsnPiqbqMTG7sFkCV8rcHKMTov4zBBA39sFiaBMbbJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWWWenukV2YmjEKH7Wx6cExFMmkMB8GA1UdIwQY
MBaAFASjErpl6Qv4rPT1cySjDAtsvRwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lM2NmNzUtNDBiOS00MDM0LTg0Yjkt
Y2NjYmMyYWU2OTQ4LzEvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lM2NmNzUtNDBiOS00MDM0LTg0YjktY2NjYmMyYWU2OTQ4
LzEvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALp2mPXpE
3ESEQt4tFECphBKF3FUUGWDAGk8azY2FguGinuSdkvHt5RARiQwioIKMe+GAZCtH
G33tBQWfX/N7uvDefdwal72kD7EH7TYwnFDW5rIEvDorER2gm6eNbMQxilsayMtJ
QBMlpr/7z+lpLQX2eg1YyPIN6qWp0qCu4zsp6SPlbHS6HFsrwl1ZhqKXD0tdgPGS
y2/EZ1xNsL68qG8LJXBNvjC/977EwwDXPuRNxds+vzHpn8EGzKqNnACrLfZvADdm
tynWgL63vCXVmRm+lfiyWjx9x8cW+j68A5xAnhbXp5RhvCtRa190iyFwYpjttDbA
K0URmPavf4v9HA==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:24 2026 by rpki-client