Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: MlBdn7i82wqV9qHSRt1YdfG1VIkqAZrpDDC+W7Rx5/g=
Subject key identifier: 17:6C:0C:81:85:70:E1:09:8F:6C:90:DB:04:64:F3:4E:72:C0:54:09
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 019F190C5A16962C347AB92DA990A1991EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 198B
Signing time: Tue 30 Jun 2026 15:01:07 +0000
Manifest this update: Tue 30 Jun 2026 15:01:07 +0000
Manifest next update: Wed 01 Jul 2026 15:01:07 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: eaO8UipljDcEV83SEjb9JMWSrsjL8uoweLW9Dv6cR28=)
2: k-u4T0e4tVorBoGy6nf5Gw5YRNs.roa (hash: rWH/QqNZxriq26jdgQuCLH1AphEv+lZpQduBEGoklCM=)
3: oCDLp44KeSMJvVZp5T2IShxlL4o.roa (hash: OLzEYYayae+FmqrETQJHCGxfQyGvHodRSRrVJfyY0No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:5a:16:96:2c:34:7a:b9:2d:a9:90:a1:99:1e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Jun 30 15:01:07 2026 GMT
Not After : Jul 1 15:01:07 2026 GMT
Subject: CN=176c0c818570e1098f6c90db0464f34e72c05409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:af:8e:18:a3:6e:9b:51:94:03:a2:32:8d:14:
26:8e:70:f7:6b:81:6a:61:61:b8:ec:d4:96:b2:f4:
2b:6d:05:ac:9f:bc:00:d2:c1:ae:1e:a9:29:f7:20:
7d:b4:fd:42:17:9b:85:5d:db:cb:39:ff:77:84:0f:
2f:ad:29:15:e4:ab:8d:27:88:27:94:5c:2b:ce:d9:
55:de:04:86:7b:04:6b:60:1e:9d:a1:fe:53:41:50:
60:0b:54:68:3e:aa:45:09:df:9c:38:00:8d:fb:96:
88:66:b6:23:a4:1a:53:2b:64:a7:f1:d3:01:d0:e5:
0a:a0:42:5b:33:44:0c:48:61:80:11:c6:17:e6:77:
4e:22:00:c4:ed:1e:c4:66:ca:fc:aa:2e:8a:e0:63:
bf:1f:05:e8:35:19:b4:4c:0e:b2:25:10:23:49:1b:
82:4f:ff:e0:c2:72:a2:8c:c1:d1:d9:d5:e8:c5:4d:
85:a8:cc:67:2f:9f:6c:98:bc:23:79:12:d5:8a:bc:
db:2b:cd:bb:57:2b:a3:e1:fe:ef:92:9e:fe:60:41:
3d:c1:6f:de:56:92:d9:f6:ff:13:b9:32:79:38:d5:
3d:46:4c:52:5e:82:f2:8c:df:90:b2:6d:66:e7:51:
aa:b0:08:02:7d:8d:4c:cc:9b:bb:45:15:f3:ea:16:
26:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6C:0C:81:85:70:E1:09:8F:6C:90:DB:04:64:F3:4E:72:C0:54:09
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:40:ff:c9:f4:29:f9:e3:db:69:76:4f:7e:18:1c:f8:83:ed:
75:9c:89:b8:c0:e4:11:a6:81:07:27:aa:86:a0:0e:2d:3b:28:
96:4f:aa:10:c7:f8:6d:f8:06:9f:3a:66:2d:74:e8:0b:e9:ae:
ea:37:10:f3:f9:c5:04:58:90:aa:16:5e:7f:65:67:8d:f7:f7:
87:66:38:75:12:a5:60:f2:73:e0:52:12:06:96:4b:a5:09:c6:
2a:ec:39:fc:be:6d:8b:e8:f3:48:32:2c:6f:4f:63:ae:a2:55:
ac:3e:e7:7f:53:5d:29:4e:58:e9:3a:0e:5a:c6:35:c4:d2:03:
c0:ca:ab:57:22:db:07:42:5b:36:24:84:af:e1:ff:26:13:d6:
d0:d5:0f:fd:c0:7f:96:49:e9:a9:cf:2c:e3:9c:45:ae:78:06:
54:d1:26:02:1c:ed:b8:f7:6e:be:2b:3a:91:af:14:f2:29:bf:
5d:84:8c:5e:5f:8f:4b:e4:33:df:99:9d:ce:44:f7:0c:ca:db:
6c:7f:65:b3:71:df:d3:ed:d2:32:8c:df:1a:3f:64:2f:f6:86:
1b:e7:18:9e:b9:f1:c0:44:e1:bf:bc:9c:cf:e1:80:60:13:35:
89:f8:22:a5:43:c1:36:ae:a7:d9:6b:49:c2:d7:d1:c6:14:2f:
4f:db:04:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:43 2026 by rpki-client