Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: Rh1RTAR/l2h3xnjhMGLH42F5vsaQrH6xw8lInjgaFWE=
Subject key identifier: 32:3B:D5:DB:7C:B5:0E:4C:0B:20:0E:95:C9:2A:F2:70:0C:E6:F3:EF
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 01A117BD540C7960C786D32759F78C3B888D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 13D9
Signing time: Wed 07 Oct 2026 19:00:46 +0000
Manifest this update: Wed 07 Oct 2026 19:00:46 +0000
Manifest next update: Thu 08 Oct 2026 19:00:46 +0000
Files and hashes: 1: 2LHgN_7jeOEmEp49TXPoGseMKE0.roa (hash: u3Ghkv3e1+pxpIVGrLETupfGggN3KGBiZERj/lx/mTg=)
2: BAmnsqa1Y3XwAhWIBdg_rlIiwQQ.roa (hash: CmXIqWWi6a32pBcCEhmjtOH3aPdFD9JpfLL82hDwVT8=)
3: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: +qsyRI2YS1UYqhICwjqeolcFi70V0TOOX86gTgodDzU=)
4: D0UZ3ILhNCgnCNWzBa3mcwr0Pno.roa (hash: 7TfPe1F/LyooXh4AcQzOEBSmrk6QV7hbqByjjSb/LoE=)
5: irmbqhZvbLwDaadAvsOuO73Fv60.roa (hash: slmG+791rR4vbKBt2GX9vt+pbLQ300ChM1656gXpasA=)
6: uF20gDelBhqD8H_SXBvP9wdoYdM.roa (hash: 5kyc2PB4MyCO3xQLXylbA12fI8U7MFXjthZystH1uCM=)
7: xNxFBI381uPH5ZExRW-GfLm6Rfg.roa (hash: vZwid8rlWfhpqTNd90KDkyYvVw1rv2g5tIEub9g+uLI=)
8: yuZ207ZJKtZoW9jfm_MLQlQ6DH0.roa (hash: YnYml4UkB8mK1DtGV4RcykMNaOP/4CH8hUy+LRFYkt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:bd:54:0c:79:60:c7:86:d3:27:59:f7:8c:3b:88:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Oct 7 19:00:46 2026 GMT
Not After : Oct 8 19:00:46 2026 GMT
Subject: CN=323bd5db7cb50e4c0b200e95c92af2700ce6f3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a5:fc:0a:a4:17:d8:06:fd:ae:d6:8d:89:c4:
11:eb:40:9a:ac:e6:60:12:a8:a0:e7:08:8a:4f:43:
65:a7:63:a1:a9:ee:8c:1e:b7:10:69:76:90:a0:d9:
66:2a:7c:32:bd:40:5b:0c:9f:f0:3b:52:01:55:7f:
e0:03:f7:98:2e:a7:ff:17:65:88:b2:ef:1b:45:8f:
89:1f:a6:34:7f:a8:ca:d0:3d:d2:fd:6e:be:88:06:
a8:bf:e5:11:28:f8:7b:8f:31:87:47:60:4a:e4:25:
2a:2b:0f:e1:03:95:c0:6e:b3:1c:a6:42:15:56:c3:
1d:63:88:94:13:d8:0f:19:68:d8:d3:00:99:41:da:
cc:8b:f0:c1:cc:d3:25:77:6c:1a:fc:d0:09:41:14:
73:7c:16:02:39:53:90:91:32:f3:f3:56:50:e9:e6:
73:d8:df:35:70:bd:33:25:5b:9c:dd:06:a3:11:24:
51:6a:34:0b:04:d4:16:5b:95:e7:8d:79:dd:5f:5b:
7f:3c:f6:da:89:db:64:c9:2f:82:b2:b6:11:81:db:
7d:94:87:50:37:51:94:bd:2d:e5:9b:fb:ff:8d:00:
a4:53:7b:ea:b3:28:b8:11:bb:fb:89:86:80:05:42:
11:26:d0:c9:42:39:3a:ca:f9:7c:69:fd:d7:38:b5:
b2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3B:D5:DB:7C:B5:0E:4C:0B:20:0E:95:C9:2A:F2:70:0C:E6:F3:EF
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:38:39:40:5d:3f:b5:b0:6b:bf:e5:ae:98:67:03:0a:ec:fb:
61:7a:9d:32:51:5c:1c:ef:e1:3b:fa:4e:fe:7d:39:8f:3d:fc:
77:3a:6d:36:20:b1:51:51:ab:2d:0a:b2:e0:e0:a8:d8:85:1d:
72:8a:40:84:c2:24:76:87:3a:d7:fb:ab:7e:9b:ee:3e:7a:5d:
b7:fb:78:90:fa:2f:5c:4e:5d:a4:5c:3a:a3:30:b9:9a:d9:67:
00:84:0a:c6:85:27:04:5f:a7:bd:01:b9:32:86:15:39:7c:db:
9d:6b:f5:23:5d:e8:06:98:74:d6:ac:0d:04:8f:08:93:c1:fd:
e0:71:a9:b7:33:62:60:9e:20:25:f3:66:ad:2e:ee:09:d4:e1:
6a:cd:cb:10:8f:fc:d8:a8:8b:fc:85:55:c4:1d:4c:c2:13:bf:
2a:7b:2f:e6:c8:9e:cf:ec:60:2b:ac:59:11:11:44:18:fd:75:
dd:6e:08:f9:c2:dd:c8:8c:f5:b9:eb:7c:67:11:ca:40:e4:f7:
1e:2c:db:84:5d:07:6b:fd:ae:43:9d:b0:5f:23:aa:86:d2:c4:
b6:68:0a:99:7a:40:07:7d:c2:de:b8:5d:4e:f9:25:d7:bc:2d:
61:ea:9c:89:48:ab:d0:ae:3c:ed:27:21:37:d4:66:46:4e:ba:
fd:f5:e4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:54:40 2026 by rpki-client