Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
File: BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json)
Hash identifier: UhaexdSrPZCqc1niPDE14giAY6MwshHWPHDl7w51G3I=
Subject key identifier: BD:1F:12:DE:C2:53:87:B1:84:50:F5:EB:26:57:0A:9B:0F:D1:E9:77
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Certificate issuer: /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial: 01A140F12BA16118CAEB74A752748580439D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
Manifest number: 1AA9
Signing time: Thu 15 Oct 2026 19:01:49 +0000
Manifest this update: Thu 15 Oct 2026 19:01:49 +0000
Manifest next update: Fri 16 Oct 2026 19:01:49 +0000
Files and hashes: 1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: OsdT1X6p9rvmLf7NI0PiASoPMqGSxsvu5leS/bXqm5g=)
2: I1mm66oM2FV4eaJVlqE4cO8L7zY.roa (hash: ukmH8m+pY6kpoWVsiBBxCRnRwFuMJQWX3qtjANjdYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:f1:2b:a1:61:18:ca:eb:74:a7:52:74:85:80:43:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Validity
Not Before: Oct 15 19:01:49 2026 GMT
Not After : Oct 16 19:01:49 2026 GMT
Subject: CN=bd1f12dec25387b18450f5eb26570a9b0fd1e977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:7e:10:23:2b:cf:08:0f:5c:87:db:62:08:
02:09:b3:f8:68:f0:77:73:1b:d6:56:2d:4f:52:20:
88:c4:84:ab:00:01:4b:77:b2:8b:6c:5c:77:6d:06:
8e:51:ba:d0:a3:1c:25:78:77:93:84:38:2a:40:7c:
cd:49:20:ae:62:01:ef:2a:e1:f1:b4:11:03:a6:85:
57:66:11:87:f9:bd:fa:64:25:ba:de:8b:a3:91:6f:
0c:fe:fe:60:91:32:77:54:10:42:89:4b:1a:f6:b3:
62:be:26:4d:62:a6:e9:02:a7:c4:62:42:ec:26:11:
ed:e8:d9:96:b4:59:cb:4d:64:a0:78:50:22:5b:29:
4f:87:d6:19:68:2a:08:be:2c:10:86:4d:b6:df:69:
50:f0:9d:15:85:ab:f8:44:9f:33:9e:ec:46:54:fd:
b8:e3:0b:4c:6a:cd:d7:b2:a4:0a:61:b2:ea:13:db:
f4:ad:56:6b:5c:72:96:50:93:3c:38:6d:69:7d:fa:
cd:af:c4:b1:c2:6b:93:3e:a9:d5:1b:dc:b3:ab:43:
f5:9d:c6:f8:a3:24:82:f9:3d:5d:56:d8:7c:cf:2c:
a9:09:b1:3d:6a:92:1a:53:38:20:05:54:69:46:47:
55:c0:eb:1f:c5:d3:99:e1:ce:e5:74:13:d1:a2:60:
fb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1F:12:DE:C2:53:87:B1:84:50:F5:EB:26:57:0A:9B:0F:D1:E9:77
X509v3 Authority Key Identifier:
keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:24:74:0e:c8:71:a8:55:7b:f8:79:56:c8:69:46:ff:8b:f1:
da:a8:e7:f8:e5:46:98:e6:db:38:b8:b4:5b:5c:1a:7a:85:c5:
71:e2:23:69:c6:43:91:75:8e:78:99:f7:5a:68:e1:6b:7b:26:
bb:1d:22:f6:08:9f:cf:88:10:a0:87:2a:97:66:b0:de:82:0f:
d4:54:ee:a6:39:66:55:14:15:29:7f:05:ee:f9:81:07:54:7a:
3f:e9:79:a1:ac:80:5c:a6:60:f5:80:b3:70:3f:c7:42:1f:90:
6f:72:db:94:9c:57:14:76:44:3f:45:03:bb:ef:53:7e:ea:5c:
2a:34:c0:6b:9d:d6:6a:13:ca:6a:9c:5f:b3:26:1a:ca:57:ac:
4b:cd:16:d8:1c:9d:d4:12:a2:45:ef:64:ad:96:2d:7f:c1:db:
a5:c0:85:62:39:52:d4:23:05:65:0b:f4:15:ff:21:d5:d5:fc:
de:40:aa:e5:11:1e:12:96:d1:50:1d:45:2b:13:0d:52:60:e3:
75:1e:8a:0d:a7:ac:52:64:e3:10:5e:e4:ab:29:17:3a:d9:97:
6b:bf:a3:42:3c:6b:3c:b2:1c:ce:57:5a:fd:3d:34:26:bd:b2:
5b:dc:f3:c5:91:ec:93:7f:1c:05:0d:70:ae:d0:cc:e0:0b:12:
cf:51:65:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:33:42 2026 by rpki-client