Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
File: BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json)
Hash identifier: zaC9Zut+XviV8WbKkPZ/AzHqR4FD3CzR7ufxuRRqf0I=
Subject key identifier: 1F:9B:01:D7:DA:22:FC:A3:FC:EA:62:64:3D:2C:EF:86:92:7A:87:EF
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Certificate issuer: /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial: 01A0024B65E66E882DD9FCDE2BBB8943B129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
Manifest number: 1A04
Signing time: Fri 14 Aug 2026 22:01:30 +0000
Manifest this update: Fri 14 Aug 2026 22:01:30 +0000
Manifest next update: Sat 15 Aug 2026 22:01:30 +0000
Files and hashes: 1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: Nq9ud3YC2qBYzD35P7yeXQxOiygOk1iA25RGNxQA7p8=)
2: I1mm66oM2FV4eaJVlqE4cO8L7zY.roa (hash: ukmH8m+pY6kpoWVsiBBxCRnRwFuMJQWX3qtjANjdYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:65:e6:6e:88:2d:d9:fc:de:2b:bb:89:43:b1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Validity
Not Before: Aug 14 22:01:30 2026 GMT
Not After : Aug 15 22:01:30 2026 GMT
Subject: CN=1f9b01d7da22fca3fcea62643d2cef86927a87ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:57:18:76:87:d6:f3:c6:2f:bf:eb:4a:ce:
1c:00:50:b4:ba:f1:d7:4e:68:ce:2f:6a:9b:59:5a:
3c:6c:62:e8:91:8f:4b:ac:b1:9f:98:76:ef:f4:c4:
15:9b:51:1d:ff:cf:98:7a:97:95:65:ed:f8:ba:b8:
eb:7b:c1:fc:9e:6a:a1:81:b7:d8:e8:0b:9c:a2:64:
98:e9:89:a3:39:a7:c7:5e:74:8d:31:fc:ed:99:0e:
e1:92:29:99:5c:00:5a:71:4a:b5:32:2f:83:4b:e5:
9a:d4:e3:09:6d:71:1b:c1:fc:5b:c7:76:16:b2:b9:
42:65:e4:d2:c4:1a:09:ab:a2:d2:f5:eb:b6:82:c2:
ed:b5:93:43:de:44:ca:e6:2c:96:ca:ba:09:c7:84:
28:97:13:56:62:2d:fc:0b:cc:33:92:3a:c3:77:dd:
a6:80:66:8d:02:51:0b:6c:b4:be:af:4e:aa:5b:bf:
82:21:7c:ee:3a:4f:9f:50:8d:78:c7:66:1d:b5:b9:
8f:cb:ec:f9:79:1e:36:4a:35:56:2c:c7:62:6a:c5:
f4:83:09:b6:d9:84:dc:7e:32:4b:f1:9b:56:11:c4:
31:c3:93:1e:a1:4d:d4:2c:26:ca:35:12:33:0c:5b:
ec:2c:e6:76:f8:ca:c3:55:f3:99:4e:2e:0b:06:62:
0e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9B:01:D7:DA:22:FC:A3:FC:EA:62:64:3D:2C:EF:86:92:7A:87:EF
X509v3 Authority Key Identifier:
keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:35:af:42:9b:45:61:80:b3:2d:30:87:2d:30:b8:95:5c:56:
07:74:da:1e:e2:cf:c7:25:7f:5e:dc:b5:5e:5b:42:0d:8a:c8:
26:bd:d3:5d:05:d2:bc:a1:16:40:bb:66:31:db:9f:62:b3:a6:
0c:41:ca:d9:8f:e0:3a:84:ab:7e:d3:4f:0c:3d:7f:66:36:6a:
8b:24:03:08:e8:e5:19:db:ef:e1:b9:e1:d1:f8:47:08:44:f2:
c9:ea:11:e8:c7:e8:f3:fd:fe:6d:dc:dd:82:3e:b0:4f:53:dc:
3f:3d:1c:fd:b2:2f:cb:e6:87:31:ab:20:8d:4e:f6:b3:40:87:
e3:c1:e2:55:f8:ea:06:34:0e:84:5f:e2:5c:ac:ac:0c:8c:de:
87:04:fb:79:30:41:26:bc:eb:02:7f:af:b4:06:db:56:b7:54:
15:fc:dd:38:d6:73:ea:c4:21:da:75:c3:b9:f2:02:d5:c2:fd:
2c:6b:bb:a7:22:af:a1:35:fa:3d:bb:cc:3b:ac:37:87:db:2f:
24:3b:25:3c:57:19:4e:1f:b0:02:02:1d:22:22:01:7c:02:ce:
6b:f9:bf:4d:0d:95:82:a9:ac:26:f7:07:65:0b:2d:21:c4:ec:
a6:2d:b4:9c:0c:bb:45:ed:9f:aa:93:4a:84:ba:e0:75:66:da:
bd:60:d3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:45 2026 by rpki-client