Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
File: BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json)
Hash identifier: qhb6CGLFhrRKsA0i1LDdUCY5i3d2WeEj9cYn6iRfCVY=
Subject key identifier: 2F:00:DA:B1:AD:EB:29:92:0B:B4:6F:84:77:77:F4:D0:7A:36:4F:0C
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Certificate issuer: /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial: 019D37C0C133D5DBCC8EE1C88065F9DA4219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 04:01:12 +0000
Manifest this update: Sun 29 Mar 2026 04:01:12 +0000
Manifest next update: Mon 30 Mar 2026 04:01:12 +0000
Files and hashes: 1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: GR043KL++FY7c37u78IgNpECgXjUXpWzGVyQPUNApUY=)
2: I1mm66oM2FV4eaJVlqE4cO8L7zY.roa (hash: ukmH8m+pY6kpoWVsiBBxCRnRwFuMJQWX3qtjANjdYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c1:33:d5:db:cc:8e:e1:c8:80:65:f9:da:42:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Validity
Not Before: Mar 29 04:01:12 2026 GMT
Not After : Mar 30 04:01:12 2026 GMT
Subject: CN=2f00dab1adeb29920bb46f847777f4d07a364f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:03:b7:a0:35:86:c8:cc:ac:99:0c:26:6f:
a1:50:dd:22:45:75:ec:0f:35:d8:9c:5d:0f:e5:9e:
71:1b:c3:bb:f2:94:f2:12:42:d9:f2:97:67:42:2f:
d5:67:e4:20:9d:a1:44:6a:fd:40:08:b0:ba:5f:7a:
a3:2a:60:4c:c7:48:34:96:8f:e7:c1:c2:0d:35:6b:
a4:3a:b0:78:f4:a0:38:7d:e4:15:13:52:8b:f5:c3:
10:7e:95:05:bf:ec:0d:af:f0:cd:14:88:97:d3:4e:
82:6b:bc:f1:bb:2d:99:89:88:b5:e1:75:d2:67:c2:
89:3c:b3:90:6b:94:6b:64:6d:b0:9b:d8:01:c6:65:
68:72:89:0c:5e:cd:f3:27:1c:2f:f2:41:28:ee:0d:
54:b5:aa:54:a4:1b:ca:30:26:6b:37:92:8a:39:d0:
da:68:39:97:75:b5:fa:b5:70:e3:e1:0a:1c:21:5c:
7a:71:cb:c8:06:b8:a4:3e:18:10:96:a1:29:a5:cf:
44:be:ca:81:2f:30:d1:96:a5:48:5c:8d:b0:4c:2f:
22:2a:1e:37:67:ba:63:52:1e:b8:bf:00:bd:2a:bc:
9e:62:2d:b7:0e:25:f8:66:ee:7b:20:c4:47:a7:e7:
57:48:48:77:83:61:6c:68:eb:e3:49:aa:50:fc:91:
32:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:00:DA:B1:AD:EB:29:92:0B:B4:6F:84:77:77:F4:D0:7A:36:4F:0C
X509v3 Authority Key Identifier:
keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d0:d3:5f:f9:ff:4c:ab:d4:4d:bc:aa:5c:ce:34:0a:55:73:
8e:89:f2:38:60:c9:d6:c0:4b:ab:66:da:7a:11:a1:e2:0e:60:
8f:ee:8b:83:1d:29:4c:78:d8:34:2c:6f:9c:7c:66:b6:2f:55:
5d:4b:15:f6:ee:9a:bb:b5:2e:ae:ea:29:0a:27:4f:3f:1c:48:
f5:87:d7:e0:0f:34:55:cb:60:f2:71:8b:a2:f6:80:08:86:84:
1c:ff:0f:c4:26:aa:12:e8:f2:bc:5a:a7:7c:af:47:13:c8:77:
73:ff:97:48:7f:98:37:61:cd:66:f0:06:0f:c0:6c:cf:e2:0a:
d5:59:d3:1f:64:54:cf:a6:be:99:be:35:d3:e7:42:f0:d6:b1:
d1:d1:3b:eb:64:67:09:06:12:1e:84:93:e6:1c:d5:59:4d:0b:
ed:62:60:01:78:bc:13:84:5d:32:46:e1:d6:10:e0:70:64:99:
44:56:f4:da:bd:66:a3:43:59:31:d5:ff:e1:92:90:f3:c2:8e:
4f:c7:f9:7f:50:d5:f7:6f:e5:81:c3:7e:7b:3d:2b:26:e7:33:
4b:cc:c7:02:75:33:1c:5e:e4:b9:97:7e:77:25:e2:da:5c:c2:
b2:6d:e0:5b:0f:ff:82:5c:9d:23:cd:73:7b:3f:04:12:ea:75:
40:df:9f:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wMEz1dvMjuHIgGX52kIZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTljZmYyNDk4MWQ3MjYzZDFiN2Q2Mzc3OWY1ZDY3M2Rl
MmJkYmMwHhcNMjYwMzI5MDQwMTEyWhcNMjYwMzMwMDQwMTEyWjAzMTEwLwYDVQQD
EygyZjAwZGFiMWFkZWIyOTkyMGJiNDZmODQ3Nzc3ZjRkMDdhMzY0ZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOADt6A1hsjMrJkMJm+hUN0iRXXs
DzXYnF0P5Z5xG8O78pTyEkLZ8pdnQi/VZ+QgnaFEav1ACLC6X3qjKmBMx0g0lo/n
wcINNWukOrB49KA4feQVE1KL9cMQfpUFv+wNr/DNFIiX006Ca7zxuy2ZiYi14XXS
Z8KJPLOQa5RrZG2wm9gBxmVocokMXs3zJxwv8kEo7g1UtapUpBvKMCZrN5KKOdDa
aDmXdbX6tXDj4QocIVx6ccvIBrikPhgQlqEppc9EvsqBLzDRlqVIXI2wTC8iKh43
Z7pjUh64vwC9KryeYi23DiX4Zu57IMRHp+dXSEh3g2FsaOvjSapQ/JEydQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8A2rGt6ymSC7RvhHd39NB6Nk8MMB8GA1UdIwQY
MBaAFASpz/JJgdcmPRt9Y3efXWc94r28MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktuUDhrbUIxeVk5RzMxamQ1OWRaejNpdmJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lZWNmOGItM2Q2My00YzljLWJkODQt
Y2QwZDllNTc0MmNiLzEvQktuUDhrbUIxeVk5RzMxamQ1OWRaejNpdmJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lZWNmOGItM2Q2My00YzljLWJkODQtY2QwZDllNTc0MmNi
LzEvQktuUDhrbUIxeVk5RzMxamQ1OWRaejNpdmJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtDTX/n/
TKvUTbyqXM40ClVzjonyOGDJ1sBLq2baehGh4g5gj+6Lgx0pTHjYNCxvnHxmti9V
XUsV9u6au7UuruopCidPPxxI9YfX4A80Vctg8nGLovaACIaEHP8PxCaqEujyvFqn
fK9HE8h3c/+XSH+YN2HNZvAGD8Bsz+IK1VnTH2RUz6a+mb410+dC8Nax0dE762Rn
CQYSHoST5hzVWU0L7WJgAXi8E4RdMkbh1hDgcGSZRFb02r1mo0NZMdX/4ZKQ88KO
T8f5f1DV92/lgcN+ez0rJuczS8zHAnUzHF7kuZd+dyXi2lzCsm3gWw//glydI81z
ez8EEup1QN+fbw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:54 2026 by rpki-client