Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
File: BKSudHHI82IdUyVtdfEQt0iZeJg.mft (raw, json)
Hash identifier: yxuBNotL/7p5QjvPayjIqtiji45M1u+9cr8iw7YPxZc=
Subject key identifier: E3:76:63:78:31:09:49:1E:8B:D1:E5:09:6B:5B:1A:46:7D:54:AB:5B
Authority key identifier: 04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
Certificate issuer: /CN=04a4ae7471c8f3621d53256d75f110b748997898
Certificate serial: 019E30E03519EE5FF88F18334A31671F68E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 13:01:00 +0000
Manifest this update: Sat 16 May 2026 13:01:00 +0000
Manifest next update: Sun 17 May 2026 13:01:00 +0000
Files and hashes: 1: BKSudHHI82IdUyVtdfEQt0iZeJg.crl (hash: ylI1LVEvAageycusQOp72DMIm+OWLXVHA0qqzEZJRng=)
2: ZN4yF-e-6U6siCtfTnv-FW1OUx0.roa (hash: I9BYHq4fiuWBb+LO42h3XEWS7qzon5TJhCXafUyINuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:35:19:ee:5f:f8:8f:18:33:4a:31:67:1f:68:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a4ae7471c8f3621d53256d75f110b748997898
Validity
Not Before: May 16 13:01:00 2026 GMT
Not After : May 17 13:01:00 2026 GMT
Subject: CN=e37663783109491e8bd1e5096b5b1a467d54ab5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:5a:87:ec:7b:e5:65:f2:18:6f:31:f0:44:
41:34:94:fc:70:b6:51:70:ba:61:7d:52:75:69:f9:
7e:3c:c6:02:33:51:31:fb:34:bf:82:4a:61:d7:2f:
c0:b8:2e:53:ca:2f:ed:48:76:8b:d8:b8:c9:c5:32:
bf:d7:ec:fd:c0:80:cf:90:8f:4e:6a:d0:aa:6d:6c:
f5:a0:66:bf:37:3d:79:2d:17:f0:51:60:33:38:a2:
0d:66:de:fd:3a:92:3e:ed:b7:9b:1c:89:86:ae:2d:
78:e8:44:3a:98:c7:2e:cf:9b:0a:d2:58:40:8f:fb:
3c:1d:bb:4f:11:9a:17:ce:6c:2d:36:1b:00:69:7e:
bd:b7:ca:e8:ab:d0:cd:99:16:1e:78:67:3f:90:28:
bf:17:e2:2b:2a:c4:42:93:cb:06:07:6e:c0:a8:aa:
91:30:65:a4:e8:bc:d8:61:ae:8a:78:0b:60:03:cf:
54:05:9d:61:37:aa:43:c6:5f:52:64:40:41:47:5a:
37:47:56:f7:d0:68:df:f1:f4:2f:3e:e0:d0:d2:4a:
a0:c3:ee:86:8c:08:9b:54:ce:f2:a2:0a:56:7e:73:
57:20:86:ce:0f:f0:d6:8c:8f:ab:af:3a:02:fb:5d:
44:5d:8c:6c:4d:99:0b:26:e7:ae:a6:46:f1:89:f3:
81:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:76:63:78:31:09:49:1E:8B:D1:E5:09:6B:5B:1A:46:7D:54:AB:5B
X509v3 Authority Key Identifier:
keyid:04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:74:db:cf:d8:b1:0d:a2:53:60:d3:14:2f:97:65:a3:47:93:
00:24:72:a1:92:46:96:48:15:90:97:ad:09:8c:a6:3b:29:6e:
81:ab:85:17:4b:d0:b8:d0:40:a6:74:0c:3b:0f:2f:61:3d:99:
33:ea:a9:81:1a:f2:10:0e:78:0f:15:dd:3f:e3:3d:82:80:8b:
5c:7d:00:89:18:c9:79:cf:40:a7:b4:51:2a:88:5e:00:c9:ed:
cf:31:b0:c4:e7:c2:04:dd:ec:5e:4f:46:13:86:c2:52:72:b0:
72:e9:de:16:fc:6c:6c:dd:cd:5e:d3:5a:cc:b0:86:cb:c5:57:
41:7d:69:af:8e:92:8d:c3:58:35:11:97:93:99:db:92:4b:03:
93:5e:30:37:9e:fe:65:ab:92:66:f0:dc:48:ad:16:06:52:71:
0c:a2:8e:3f:8c:db:97:35:c6:98:d2:71:6a:55:03:2c:01:e4:
3f:17:2c:28:e7:9c:75:b6:df:fd:49:78:03:e1:dd:50:8e:d7:
a2:67:2e:89:d9:2e:56:84:82:ff:7d:f4:e6:8f:03:21:54:c5:
e0:4b:e5:67:b6:c8:db:28:92:4b:f5:fc:ac:07:fa:b4:95:f3:
17:45:06:d9:62:79:b2:c8:32:63:65:ec:f7:48:47:ad:c8:66:
44:33:c5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:19 2026 by rpki-client