Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
File: BKSudHHI82IdUyVtdfEQt0iZeJg.mft (raw, json)
Hash identifier: d4lmUBG2Af+uyNR9xHpTLIO/PpGnMgRctRN7Tg+BKec=
Subject key identifier: 30:48:40:80:02:A9:73:1F:3C:63:85:E9:CE:D0:2B:56:20:EA:23:D9
Authority key identifier: 04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
Certificate issuer: /CN=04a4ae7471c8f3621d53256d75f110b748997898
Certificate serial: 019D39AE88FB98787204212D477F023CC322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 13:00:32 +0000
Manifest this update: Sun 29 Mar 2026 13:00:32 +0000
Manifest next update: Mon 30 Mar 2026 13:00:32 +0000
Files and hashes: 1: BKSudHHI82IdUyVtdfEQt0iZeJg.crl (hash: XeoTBYTqwST68o+J1pwjkvOPyx/prpdXp4VUyl9FEJs=)
2: ZN4yF-e-6U6siCtfTnv-FW1OUx0.roa (hash: I9BYHq4fiuWBb+LO42h3XEWS7qzon5TJhCXafUyINuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:88:fb:98:78:72:04:21:2d:47:7f:02:3c:c3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a4ae7471c8f3621d53256d75f110b748997898
Validity
Not Before: Mar 29 13:00:32 2026 GMT
Not After : Mar 30 13:00:32 2026 GMT
Subject: CN=3048408002a9731f3c6385e9ced02b5620ea23d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:68:41:68:0a:38:49:c6:cb:aa:d6:9f:96:
d7:7e:91:40:86:a0:65:6a:d5:98:39:20:f1:eb:26:
f4:89:af:2b:72:7f:23:69:a8:08:e4:4e:d5:04:d8:
f8:70:e9:79:22:11:ab:3f:1b:12:dc:75:d0:45:38:
9e:f0:2d:96:33:4e:a4:74:be:40:dc:bd:da:eb:0b:
3d:c2:b7:8b:b1:c4:f4:dd:a0:9d:12:8e:e8:3e:24:
06:ac:38:bf:b6:6f:04:e5:71:ae:ff:5a:f2:81:08:
9a:a0:89:8c:c1:8a:39:5e:bb:f1:16:10:c1:67:32:
16:e7:c9:7f:57:82:29:e5:74:fa:83:e5:2c:3e:18:
f3:35:7b:92:01:14:e4:83:95:65:79:47:e1:23:ad:
53:42:ac:35:65:52:16:df:5d:f2:60:5e:c1:26:6f:
9b:14:a9:65:88:0c:43:ef:57:5e:ff:bb:b3:f8:53:
65:3f:1a:34:eb:34:b3:f1:8c:b1:62:85:0a:ce:5f:
56:41:a8:a6:87:de:76:26:52:fd:3c:cf:1e:5b:b2:
32:26:25:15:e5:d1:25:54:d3:08:1e:2c:23:d7:54:
c0:a9:ef:34:fa:13:5e:4b:84:5b:b3:25:bb:5e:f8:
86:e7:b8:78:fb:af:11:fd:e6:30:cd:d4:34:51:aa:
1b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:48:40:80:02:A9:73:1F:3C:63:85:E9:CE:D0:2B:56:20:EA:23:D9
X509v3 Authority Key Identifier:
keyid:04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:72:f1:4c:5c:ee:bc:42:0a:34:22:f8:7b:1f:e4:82:51:aa:
dd:da:22:e4:54:c1:67:73:c9:8c:5c:80:fe:46:b9:49:6f:d0:
8c:22:54:92:04:21:5c:56:ce:0d:a8:86:bf:92:fa:b9:1b:81:
10:f6:0d:c9:34:51:71:3a:a5:fc:f7:e6:d1:4b:f5:95:03:4b:
9b:5d:4d:d9:88:af:55:b8:31:07:e6:73:81:36:ba:d7:7a:43:
a3:79:e4:02:de:77:62:21:0d:65:d1:32:0a:9d:6a:78:b9:2d:
f9:d0:57:a2:69:0c:32:81:14:c3:78:c8:e3:1d:7a:32:77:7e:
d9:23:f4:e4:5e:39:df:37:35:f9:24:7b:bd:64:e4:36:7a:41:
c8:d6:db:71:1e:1b:b9:6e:c0:50:28:5e:36:d7:5b:7a:21:5f:
6e:d9:e3:32:16:38:53:7e:23:a3:7a:c1:38:0a:8a:63:b0:54:
17:68:a8:86:b8:78:16:1a:da:4b:ab:95:cc:4e:b0:7b:ae:37:
e2:20:24:4d:89:0e:82:b9:5f:a3:71:a3:05:54:22:74:4b:b3:
88:2e:ab:6e:f3:bb:ff:6a:37:77:de:c5:77:d9:08:32:2a:80:
ac:76:52:7d:ed:5f:ba:f3:c7:3a:01:9a:15:8e:2f:06:83:a6:
58:c8:c1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:00 2026 by rpki-client