Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier: wwiic3pb438dDnucT5kFOK5O+hgALf6r2vUT31cBWIg=
Subject key identifier: 35:F3:EE:CC:87:C8:FB:9E:FC:54:11:3A:ED:43:85:D3:67:A2:64:92
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 01A072F1C14FA42E07ECC55925FB2D38444A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number: 1A3C
Signing time: Sat 05 Sep 2026 19:00:41 +0000
Manifest this update: Sat 05 Sep 2026 19:00:41 +0000
Manifest next update: Sun 06 Sep 2026 19:00:41 +0000
Files and hashes: 1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: teyfuSht7s4bMyTX1a3lChS+0Pbos6YPIcCkbPpCwAs=)
2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:72:f1:c1:4f:a4:2e:07:ec:c5:59:25:fb:2d:38:44:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Sep 5 19:00:41 2026 GMT
Not After : Sep 6 19:00:41 2026 GMT
Subject: CN=35f3eecc87c8fb9efc54113aed4385d367a26492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6c:c8:d5:22:a8:c2:45:67:e8:97:9c:8c:1c:
2e:51:4d:11:5d:f3:15:83:47:f0:47:97:0a:8d:fc:
4c:2e:5d:8f:21:18:aa:a1:7e:1e:2c:cf:2a:ed:f4:
a4:2a:2f:db:8c:b7:97:e2:b0:fe:f6:1e:59:3c:4e:
e2:98:2f:26:95:b6:3d:47:ff:3d:99:9d:6c:2c:fc:
63:46:3d:41:fa:20:62:c1:6c:e2:73:67:37:71:ad:
96:14:58:31:15:89:28:c0:61:16:2c:d4:ac:7b:4d:
68:04:fb:6c:28:70:45:03:7a:eb:75:b1:e0:45:e5:
34:3d:ba:18:f4:08:54:40:1a:fa:f9:a0:fa:ee:9f:
ac:05:18:1e:04:66:2c:e1:1a:8a:09:81:be:7b:68:
ac:b3:e0:02:af:14:e1:90:98:da:b1:91:e7:08:af:
b1:57:40:c4:b4:bf:69:9d:9e:e1:b0:a3:67:b9:ac:
f4:66:6b:fd:07:69:b7:db:94:2c:a6:c1:55:d3:cd:
9d:38:22:12:e7:86:f6:01:8e:1b:a3:52:8a:bf:31:
7b:86:f3:b2:1f:c9:91:fa:bc:24:15:68:9f:da:af:
d9:aa:46:2a:76:3b:f6:f1:01:7f:4e:55:6e:e9:02:
cf:54:38:a1:97:ab:2f:79:60:75:cf:d1:3d:4b:2c:
dc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F3:EE:CC:87:C8:FB:9E:FC:54:11:3A:ED:43:85:D3:67:A2:64:92
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:95:2e:f4:75:64:5e:68:c9:1f:63:cf:9c:9b:d8:83:92:56:
b0:66:7f:0c:40:1c:40:4a:66:33:b1:65:42:9a:29:52:6d:16:
98:ff:5b:c5:54:ec:f2:75:ee:79:c3:22:3e:76:cb:31:e6:09:
f5:9d:2b:ba:b1:8d:5a:cc:16:f2:dc:ed:6e:41:0d:39:b7:9d:
f2:b6:9b:3e:9e:d2:6d:ec:95:01:df:f1:5f:b4:3c:ca:23:61:
e8:d4:b8:70:13:fc:20:5e:76:2d:b3:e4:83:d1:f5:94:b3:dd:
f0:5e:af:28:b4:8d:8d:ab:44:74:84:31:99:40:00:d9:36:72:
d1:f2:5c:ed:4b:28:39:bb:1f:75:3b:b5:21:30:e3:c3:d4:e1:
bf:5f:d2:7d:08:9a:81:cd:e9:14:0b:c6:de:2d:7e:d7:fd:4f:
40:37:ca:43:06:f4:28:96:c6:5e:25:17:34:a7:ac:f3:17:06:
c2:d9:c1:bf:3b:82:86:48:9a:2f:80:23:cd:8d:ae:94:ce:dd:
13:e5:c0:98:08:0b:2d:76:8b:45:66:04:5a:d0:92:c7:2f:05:
7c:05:29:5c:d1:05:ec:e6:aa:ca:75:73:36:12:b7:b3:4c:ca:
9e:84:8c:fc:ec:3d:36:3b:82:81:7d:e1:36:3d:35:c5:82:f4:
75:a7:74:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 22:20:17 2026 by rpki-client