Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier: ji/wL8N3A5R5KenaheyOlBejuI9o+M8SHZegpVsMyMM=
Subject key identifier: BC:3D:8E:5A:7F:F0:59:FF:98:A8:A2:F1:01:AD:78:DD:57:CE:85:CD
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 019DC371A0F097F7301C2182F8459B580B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number: 18D8
Signing time: Sat 25 Apr 2026 07:01:37 +0000
Manifest this update: Sat 25 Apr 2026 07:01:37 +0000
Manifest next update: Sun 26 Apr 2026 07:01:37 +0000
Files and hashes: 1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: mT9Ewgbgsbk/g4AjY25zVOgT3HMFPexOO1q3dmsY7BU=)
2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Apr 2026 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c3:71:a0:f0:97:f7:30:1c:21:82:f8:45:9b:58:0b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Apr 25 07:01:37 2026 GMT
Not After : Apr 26 07:01:37 2026 GMT
Subject: CN=bc3d8e5a7ff059ff98a8a2f101ad78dd57ce85cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:04:c9:1a:9d:4d:46:9c:4a:d3:66:f0:90:
dc:b4:94:09:d9:2d:fa:c4:10:18:fb:d5:cc:18:e6:
88:76:29:a5:8b:81:3d:ef:66:30:97:13:99:6a:68:
a9:7b:8e:73:ed:6b:18:ae:ea:21:a0:53:69:f2:4e:
8e:a9:db:3a:e6:50:27:83:1c:0e:de:2d:8c:b9:08:
aa:96:30:36:9f:a9:4d:d6:b6:fa:46:ba:30:0e:e1:
37:57:c7:96:62:23:62:66:d5:b8:4b:ec:72:e9:66:
5d:f1:24:40:56:87:a1:50:a3:00:3e:8c:dd:0a:d2:
6d:5a:0e:dc:59:82:07:b4:e6:79:fa:c4:21:75:c7:
34:e1:06:99:19:8a:e6:ef:2c:9f:e0:89:e9:c7:bb:
d1:9c:9c:b7:3c:4c:5d:dd:ee:bb:23:9c:db:9f:b2:
b3:52:af:36:e5:21:31:f1:c0:0b:3d:5b:cd:b4:de:
e8:ed:b2:28:7b:d9:87:5d:10:41:e7:3b:8f:41:8b:
45:e4:67:1f:73:e4:3f:a1:53:47:0b:33:a1:84:5c:
98:d4:80:3d:aa:f9:53:83:cd:2a:4c:51:8d:84:32:
ef:2b:4e:43:1d:a0:7a:3c:40:c0:b6:00:77:60:04:
89:b5:b6:93:8f:f8:1a:3b:4f:a2:5f:44:b4:bf:af:
ae:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3D:8E:5A:7F:F0:59:FF:98:A8:A2:F1:01:AD:78:DD:57:CE:85:CD
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:36:38:3f:13:5e:f2:1d:2e:1a:21:19:a2:a2:75:50:9d:8d:
db:d8:5b:b5:42:80:13:77:3c:ff:0f:96:49:6c:76:57:7b:c8:
21:35:8f:25:69:0c:07:82:8b:03:38:a4:54:e6:a1:f7:cb:27:
6d:9e:de:9c:da:f1:b3:a5:8f:53:c8:ed:91:e9:8a:e5:b4:1c:
5e:e5:b6:74:ec:38:2b:88:de:da:7e:7e:58:f8:f4:ac:cf:1c:
b9:8a:ad:86:bf:ee:23:8e:91:18:b4:c8:83:d8:f7:bf:5a:9b:
a7:b3:84:6e:ef:b1:cf:27:09:86:47:ef:98:2b:76:6c:df:41:
ac:4e:88:b8:05:eb:89:6c:02:68:9e:f5:d1:79:b9:3d:af:ba:
75:5e:ea:e4:2a:23:c7:2c:9e:05:81:91:7c:41:66:69:f2:79:
fd:ff:76:cd:00:68:8e:9c:ce:4c:dc:7b:32:01:e9:03:b2:14:
71:a4:16:df:7f:15:ab:e4:43:41:72:d4:58:05:7d:57:eb:76:
47:fe:91:bb:89:48:70:dd:40:de:ec:8a:87:e9:78:df:ea:ea:
de:52:f8:a1:23:c6:a9:ae:7b:e8:ee:d1:64:b7:90:37:e0:71:
ae:5c:f3:80:55:d0:73:b0:f3:13:99:db:a2:83:bf:8a:f8:e3:
c4:38:cf:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3DcaDwl/cwHCGC+EWbWAsjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz
MGFlMzkwHhcNMjYwNDI1MDcwMTM3WhcNMjYwNDI2MDcwMTM3WjAzMTEwLwYDVQQD
EyhiYzNkOGU1YTdmZjA1OWZmOThhOGEyZjEwMWFkNzhkZDU3Y2U4NWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7EEyRqdTUacStNm8JDctJQJ2S36
xBAY+9XMGOaIdimli4E972YwlxOZamipe45z7WsYruohoFNp8k6Oqds65lAngxwO
3i2MuQiqljA2n6lN1rb6RrowDuE3V8eWYiNiZtW4S+xy6WZd8SRAVoehUKMAPozd
CtJtWg7cWYIHtOZ5+sQhdcc04QaZGYrm7yyf4Inpx7vRnJy3PExd3e67I5zbn7Kz
Uq825SEx8cALPVvNtN7o7bIoe9mHXRBB5zuPQYtF5Gcfc+Q/oVNHCzOhhFyY1IA9
qvlTg80qTFGNhDLvK05DHaB6PEDAtgB3YASJtbaTj/gaO0+iX0S0v6+uuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLw9jlp/8Fn/mKii8QGteN1XzoXNMB8GA1UdIwQY
MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt
YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw
LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTY4PxNe
8h0uGiEZoqJ1UJ2N29hbtUKAE3c8/w+WSWx2V3vIITWPJWkMB4KLAzikVOah98sn
bZ7enNrxs6WPU8jtkemK5bQcXuW2dOw4K4je2n5+WPj0rM8cuYqthr/uI46RGLTI
g9j3v1qbp7OEbu+xzycJhkfvmCt2bN9BrE6IuAXriWwCaJ710Xm5Pa+6dV7q5Coj
xyyeBYGRfEFmafJ5/f92zQBojpzOTNx7MgHpA7IUcaQW338Vq+RDQXLUWAV9V+t2
R/6Ru4lIcN1A3uyKh+l43+rq3lL4oSPGqa576O7RZLeQN+BxrlzzgFXQc7DzE5nb
ooO/ivjjxDjPkA==
-----END CERTIFICATE-----
Generated at Sat Apr 25 14:29:54 2026 by rpki-client