
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier: ueljgA2plee+dJOzSSX2sxLSrEVhXqd4hSiJ/0fVm/Q=
Subject key identifier: A5:FD:78:75:A4:C4:00:2B:D6:CD:58:31:70:5A:FF:9D:86:C9:3F:B5
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 019CCC407F76D190F22550AE9664F936BBAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number: 1858
Signing time: Sun 08 Mar 2026 07:01:44 +0000
Manifest this update: Sun 08 Mar 2026 07:01:44 +0000
Manifest next update: Mon 09 Mar 2026 07:01:44 +0000
Files and hashes: 1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: xRzpQFbGBXawkgPoouyOJ1tNNbRtpZz+n17aHYLETuM=)
2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Mar 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:cc:40:7f:76:d1:90:f2:25:50:ae:96:64:f9:36:bb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Mar 8 07:01:44 2026 GMT
Not After : Mar 9 07:01:44 2026 GMT
Subject: CN=a5fd7875a4c4002bd6cd5831705aff9d86c93fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:18:2d:ba:38:e9:2e:8d:a4:28:32:44:89:3d:
8a:21:4d:db:f3:75:47:e7:62:40:77:40:9c:39:9f:
f9:7b:4f:d4:37:ad:0e:a0:78:aa:74:12:17:45:a3:
b5:f5:1c:df:25:37:f5:34:7d:92:12:94:83:1f:10:
0f:9f:eb:08:77:75:0e:73:af:c1:94:da:b7:f4:41:
b0:af:d1:10:d2:c7:86:8e:48:1d:12:ff:8b:ef:96:
cc:73:f9:8a:e8:cf:d1:4a:77:e7:99:61:26:e0:df:
c8:94:aa:75:43:9e:4f:1d:c4:19:60:a1:6e:cf:5c:
a8:ee:bf:92:3b:7a:a0:b5:5b:8a:4c:c2:59:e1:d9:
e3:3c:da:bf:3d:ca:7c:9a:6c:18:66:a5:d0:01:ac:
66:b3:97:38:4b:0d:eb:b6:4b:c3:02:9d:ea:e4:96:
55:71:2d:1e:d6:c1:3b:8d:ce:1f:94:a1:b7:f4:56:
df:7f:74:7e:4b:0b:ed:91:c3:0f:43:25:26:a8:8a:
76:cc:be:8d:5f:1d:46:29:ef:b5:55:97:88:0d:e3:
72:79:c8:63:75:0d:13:6b:a2:08:db:3f:20:a8:46:
1c:ee:dc:1c:a0:9f:76:b6:7e:40:18:68:c3:09:38:
89:3b:99:fd:7e:7b:81:68:fc:0a:7e:aa:75:2a:46:
c5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FD:78:75:A4:C4:00:2B:D6:CD:58:31:70:5A:FF:9D:86:C9:3F:B5
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7d:9e:69:80:a7:78:21:95:a9:9c:8f:1c:bf:72:9d:0e:5e:
d4:ff:05:0c:e8:a6:b6:d7:95:7e:ca:e1:0c:e9:a0:18:98:67:
e4:07:b5:55:64:05:9c:98:77:43:52:4c:95:f6:88:05:47:33:
f5:02:cd:2a:36:bd:cc:3b:1d:2f:a3:1d:28:e7:2d:5d:4a:ce:
f0:8b:ca:93:de:df:b1:21:fe:c8:7f:9c:48:bb:8d:2a:38:05:
c8:48:df:c4:6b:6a:52:2c:28:1d:51:e8:f3:d1:2f:c3:8c:4e:
e3:b3:da:11:48:3c:dc:a2:aa:29:8d:48:74:26:43:38:2b:79:
06:96:d6:a2:6c:bb:3d:ac:6d:47:5e:60:a1:6f:d7:93:ad:81:
c7:b8:a3:8a:6d:81:21:c8:c5:92:9e:7f:ac:a8:f0:d2:0c:f0:
7f:2b:76:e2:92:05:4f:3a:90:75:f7:aa:17:17:cb:4d:26:b4:
b8:2c:01:a9:81:97:b5:fa:6c:21:d2:8f:99:66:7a:0a:d7:f6:
94:0c:96:10:30:c1:81:83:ba:8d:10:33:e7:f5:80:06:0c:e9:
36:1c:7d:b3:41:7c:2b:59:be:f6:b5:0b:f9:c0:67:72:71:ce:
62:09:99:23:cf:cd:f3:b9:b8:10:b8:90:56:6d:af:31:8c:71:
4f:68:96:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzMQH920ZDyJVCulmT5NruqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz
MGFlMzkwHhcNMjYwMzA4MDcwMTQ0WhcNMjYwMzA5MDcwMTQ0WjAzMTEwLwYDVQQD
EyhhNWZkNzg3NWE0YzQwMDJiZDZjZDU4MzE3MDVhZmY5ZDg2YzkzZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBgtujjpLo2kKDJEiT2KIU3b83VH
52JAd0CcOZ/5e0/UN60OoHiqdBIXRaO19RzfJTf1NH2SEpSDHxAPn+sId3UOc6/B
lNq39EGwr9EQ0seGjkgdEv+L75bMc/mK6M/RSnfnmWEm4N/IlKp1Q55PHcQZYKFu
z1yo7r+SO3qgtVuKTMJZ4dnjPNq/Pcp8mmwYZqXQAaxms5c4Sw3rtkvDAp3q5JZV
cS0e1sE7jc4flKG39Fbff3R+SwvtkcMPQyUmqIp2zL6NXx1GKe+1VZeIDeNyechj
dQ0Ta6II2z8gqEYc7twcoJ92tn5AGGjDCTiJO5n9fnuBaPwKfqp1KkbF7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKX9eHWkxAAr1s1YMXBa/52GyT+1MB8GA1UdIwQY
MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt
YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw
LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAin2eaYCn
eCGVqZyPHL9ynQ5e1P8FDOimtteVfsrhDOmgGJhn5Ae1VWQFnJh3Q1JMlfaIBUcz
9QLNKja9zDsdL6MdKOctXUrO8IvKk97fsSH+yH+cSLuNKjgFyEjfxGtqUiwoHVHo
89Evw4xO47PaEUg83KKqKY1IdCZDOCt5BpbWomy7PaxtR15goW/Xk62Bx7ijim2B
IcjFkp5/rKjw0gzwfyt24pIFTzqQdfeqFxfLTSa0uCwBqYGXtfpsIdKPmWZ6Ctf2
lAyWEDDBgYO6jRAz5/WABgzpNhx9s0F8K1m+9rUL+cBncnHOYgmZI8/N87m4ELiQ
Vm2vMYxxT2iWGw==
-----END CERTIFICATE-----
Generated at Sun Mar 8 11:35:57 2026 by rpki-client