Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: zeJ0cunFad/7gDvvaBOSCp3OS8thZ/DCsbIxJCowkWM=
Subject key identifier: E3:F8:A1:10:B1:6A:6A:71:74:4B:A3:E1:52:06:5B:09:44:A8:ED:E1
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 019F122E42F65B3DB9BE1FA9C307C257C2EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 12CD
Signing time: Mon 29 Jun 2026 07:00:49 +0000
Manifest this update: Mon 29 Jun 2026 07:00:49 +0000
Manifest next update: Tue 30 Jun 2026 07:00:49 +0000
Files and hashes: 1: 2LHgN_7jeOEmEp49TXPoGseMKE0.roa (hash: u3Ghkv3e1+pxpIVGrLETupfGggN3KGBiZERj/lx/mTg=)
2: BAmnsqa1Y3XwAhWIBdg_rlIiwQQ.roa (hash: CmXIqWWi6a32pBcCEhmjtOH3aPdFD9JpfLL82hDwVT8=)
3: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: goDYPT78B4NUBt43ThUDuyLqavb5EfDeUSgRV7jgl18=)
4: D0UZ3ILhNCgnCNWzBa3mcwr0Pno.roa (hash: 7TfPe1F/LyooXh4AcQzOEBSmrk6QV7hbqByjjSb/LoE=)
5: irmbqhZvbLwDaadAvsOuO73Fv60.roa (hash: slmG+791rR4vbKBt2GX9vt+pbLQ300ChM1656gXpasA=)
6: uF20gDelBhqD8H_SXBvP9wdoYdM.roa (hash: 5kyc2PB4MyCO3xQLXylbA12fI8U7MFXjthZystH1uCM=)
7: xNxFBI381uPH5ZExRW-GfLm6Rfg.roa (hash: vZwid8rlWfhpqTNd90KDkyYvVw1rv2g5tIEub9g+uLI=)
8: yuZ207ZJKtZoW9jfm_MLQlQ6DH0.roa (hash: YnYml4UkB8mK1DtGV4RcykMNaOP/4CH8hUy+LRFYkt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:42:f6:5b:3d:b9:be:1f:a9:c3:07:c2:57:c2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Jun 29 07:00:49 2026 GMT
Not After : Jun 30 07:00:49 2026 GMT
Subject: CN=e3f8a110b16a6a71744ba3e152065b0944a8ede1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:fc:3e:cf:8b:ea:2c:f5:d8:be:2a:7a:2e:
20:78:00:39:b1:9a:ef:a9:c7:96:78:e5:f8:be:c8:
50:a0:45:29:0d:30:d0:42:af:1c:50:a3:6f:7c:e3:
fd:c8:06:d1:7e:8a:3c:48:b3:d9:88:cd:30:13:4e:
09:b7:ea:d0:75:c3:83:9b:ba:90:06:a8:b7:93:d0:
82:72:f1:b9:f4:5a:33:69:10:2a:69:e9:75:c0:8b:
32:67:2c:e3:0a:34:dd:d8:7a:86:eb:aa:d3:8e:2a:
e2:ad:3d:fe:30:ef:66:be:9c:8b:15:ba:7f:2c:8e:
f3:d6:90:ba:f4:b2:e8:c4:32:69:2e:f7:ea:12:34:
77:3a:22:b2:d9:ee:b5:7d:73:00:25:bc:92:a3:f3:
87:f7:a8:1d:0f:70:15:67:2f:f0:fe:00:62:4c:ca:
ad:7e:9f:40:bf:3e:8a:e1:a9:96:80:b1:2c:64:7d:
bf:e9:94:59:48:a7:d0:bc:9d:56:c1:37:d0:55:26:
a5:9e:10:78:26:27:7e:36:12:1e:a5:ca:cd:9a:92:
dd:34:f9:49:fb:a8:88:e6:28:5e:78:35:81:83:7a:
6d:2d:ec:27:d3:75:76:42:e0:f3:8c:93:22:fb:93:
78:84:ff:d7:4d:6a:e5:7a:31:57:1f:6a:44:60:15:
21:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F8:A1:10:B1:6A:6A:71:74:4B:A3:E1:52:06:5B:09:44:A8:ED:E1
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:45:0d:85:1f:5f:31:5c:c1:f6:96:5f:7c:51:24:17:c8:17:
94:06:a0:09:4e:75:d8:bb:f8:e3:1d:be:10:5e:b4:8c:08:b6:
33:23:6e:5f:25:57:7a:44:5b:4e:02:03:f0:25:8e:a5:ba:83:
95:f3:d6:35:de:83:5e:4f:75:fc:35:57:7e:20:b0:1a:17:97:
b2:01:9b:2b:20:eb:72:d2:1e:b3:83:b5:f6:9b:a4:a3:96:b5:
85:96:9b:c4:1a:e5:ad:32:08:56:8f:a9:36:35:a0:a5:eb:f5:
e5:a2:5e:1c:40:e7:2c:5c:ee:37:94:42:1b:97:a4:3b:31:bc:
ea:03:90:91:5c:9f:1e:66:62:dd:95:5c:98:b2:f9:fa:09:d8:
e6:f5:8f:2f:c5:b2:00:82:7c:ee:13:4f:ec:d9:0a:cf:ed:e9:
22:df:d5:9f:93:1a:15:49:11:87:2b:d4:84:0d:8f:2c:b2:79:
3c:72:6b:6e:0d:59:c2:3f:0d:a2:0e:9c:6e:32:16:ed:f0:c5:
99:b6:c5:db:d2:3a:49:40:fa:02:f4:84:23:cc:b8:ad:41:1d:
81:8c:56:f8:70:3c:d0:99:34:b4:46:bb:17:85:ef:b8:d4:38:
82:5c:35:fc:8a:5b:50:87:c6:64:69:cb:cd:37:d6:34:f3:69:
47:19:b4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:37:01 2026 by rpki-client