Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: UTLHnl3IfHVNLdWtVhH9waMrwzw2j6Dy/9tDSpKuQ4A=
Subject key identifier: 9F:80:1E:C3:2C:5D:51:3D:E8:8E:BD:F3:D5:3E:2E:45:D4:67:B1:01
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 019D390A16202ECBD018D660014A120FFD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 11D8
Signing time: Sun 29 Mar 2026 10:00:55 +0000
Manifest this update: Sun 29 Mar 2026 10:00:55 +0000
Manifest next update: Mon 30 Mar 2026 10:00:55 +0000
Files and hashes: 1: 2LHgN_7jeOEmEp49TXPoGseMKE0.roa (hash: u3Ghkv3e1+pxpIVGrLETupfGggN3KGBiZERj/lx/mTg=)
2: BAmnsqa1Y3XwAhWIBdg_rlIiwQQ.roa (hash: CmXIqWWi6a32pBcCEhmjtOH3aPdFD9JpfLL82hDwVT8=)
3: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: fMPLZvH3wPMvtxuMKwaF+yndgeVnhfzbiEhJKhy2SxA=)
4: D0UZ3ILhNCgnCNWzBa3mcwr0Pno.roa (hash: 7TfPe1F/LyooXh4AcQzOEBSmrk6QV7hbqByjjSb/LoE=)
5: irmbqhZvbLwDaadAvsOuO73Fv60.roa (hash: slmG+791rR4vbKBt2GX9vt+pbLQ300ChM1656gXpasA=)
6: uF20gDelBhqD8H_SXBvP9wdoYdM.roa (hash: 5kyc2PB4MyCO3xQLXylbA12fI8U7MFXjthZystH1uCM=)
7: xNxFBI381uPH5ZExRW-GfLm6Rfg.roa (hash: vZwid8rlWfhpqTNd90KDkyYvVw1rv2g5tIEub9g+uLI=)
8: yuZ207ZJKtZoW9jfm_MLQlQ6DH0.roa (hash: YnYml4UkB8mK1DtGV4RcykMNaOP/4CH8hUy+LRFYkt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:16:20:2e:cb:d0:18:d6:60:01:4a:12:0f:fd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Mar 29 10:00:55 2026 GMT
Not After : Mar 30 10:00:55 2026 GMT
Subject: CN=9f801ec32c5d513de88ebdf3d53e2e45d467b101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:e2:26:57:5c:7e:f5:28:bc:07:45:f8:b8:
8e:24:92:99:bd:e1:ab:22:91:94:c3:0e:86:a6:2b:
fe:68:ee:d1:d9:ba:96:8f:06:45:3e:0d:11:52:3e:
93:6a:6a:24:84:19:c7:65:a7:54:de:68:90:46:f4:
31:9f:37:cf:28:8e:fc:a1:5c:ea:45:77:b1:15:38:
b6:d1:50:ed:83:9d:dc:e9:4d:dd:00:95:84:ee:4b:
b4:6b:e5:4b:c4:e8:69:20:eb:ce:7e:12:cc:f1:76:
1c:bd:21:02:7e:ff:62:4c:e9:7f:04:9a:0d:a8:c7:
f9:79:a1:38:50:e1:aa:11:98:e5:56:ae:4d:ae:45:
60:ea:a7:e1:55:fe:a9:6d:0a:0e:73:61:4e:1c:11:
55:98:b2:59:a3:70:e5:cf:d4:5f:a3:86:c9:5d:87:
f0:e5:0e:b2:97:af:bc:94:3e:b4:97:7b:43:8d:e2:
9b:ac:85:42:11:a9:c2:89:3f:87:7c:ea:22:4a:9f:
23:37:0f:d3:d6:50:72:0a:63:5a:09:88:75:c1:39:
27:50:05:f4:e2:7b:a9:58:d5:b7:ea:af:76:63:77:
cf:d6:1c:6f:46:72:59:e3:88:cb:cf:ed:9b:bb:9f:
b1:7e:96:a4:95:ab:5f:cb:07:f9:6a:c0:60:14:37:
19:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:80:1E:C3:2C:5D:51:3D:E8:8E:BD:F3:D5:3E:2E:45:D4:67:B1:01
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:70:b1:b5:9e:d2:59:6a:2c:30:a3:7d:bf:af:6e:2a:fa:12:
4a:05:4d:33:2b:49:03:19:32:f2:bb:6b:1d:93:96:e2:d4:fa:
65:c7:6e:c8:df:f9:f1:d0:2d:bc:7c:d7:7d:0f:3f:3d:ea:ca:
5e:f8:65:44:67:5a:cb:2a:90:de:19:f1:f5:65:5d:52:69:7d:
79:3b:60:e2:c7:01:1a:7e:dd:05:4b:23:e9:0a:2f:26:18:b4:
d4:80:9c:2f:1d:d5:22:ae:3e:cf:55:ea:23:b3:9c:79:f1:77:
2f:4d:b9:1c:be:91:f9:d0:2f:09:e3:e2:b7:1b:e7:4e:78:3f:
69:e2:a7:ae:2c:ce:43:06:4e:bd:00:8b:04:8a:79:1a:1b:55:
d9:b6:5b:45:65:fc:74:ef:55:6f:1c:07:53:65:e8:ae:4a:ad:
46:29:b6:0b:8b:48:79:50:66:89:bf:00:89:47:5a:d3:08:cd:
99:77:b9:ef:26:88:37:cd:b3:3a:f4:7e:0f:e7:8f:39:99:80:
9f:0a:8f:7f:e1:3f:16:5e:49:37:64:60:70:0d:26:bf:10:f2:
6c:7a:89:64:f3:40:cc:f8:e3:9e:18:ca:77:09:a6:1d:7d:2d:
eb:04:d6:10:a2:0d:72:e9:0c:0b:88:be:7d:54:31:28:f8:b6:
5c:d8:92:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:39 2026 by rpki-client