Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier: nM5E12OO5r0dM6HZ4q1ZNdFHUL9cxzuhYxrypp72qII=
Subject key identifier: 07:30:7A:09:D4:77:25:6A:5A:41:7E:C9:4D:EE:C6:19:59:79:8B:44
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 019DAA568AAF378F2283B8E7D9C026C46FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number: 18CB
Signing time: Mon 20 Apr 2026 10:01:31 +0000
Manifest this update: Mon 20 Apr 2026 10:01:31 +0000
Manifest next update: Tue 21 Apr 2026 10:01:31 +0000
Files and hashes: 1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: YVIBpvAVaCiLqtc1s3A+jsH9hio4kqYFUpPIGxRSiIk=)
2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:aa:56:8a:af:37:8f:22:83:b8:e7:d9:c0:26:c4:6f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Apr 20 10:01:31 2026 GMT
Not After : Apr 21 10:01:31 2026 GMT
Subject: CN=07307a09d477256a5a417ec94deec61959798b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:07:40:65:f2:11:cd:6e:ee:36:a1:bb:cc:
0a:0b:0f:7d:b0:83:41:d8:0e:59:1d:ee:fe:f3:68:
18:ef:3e:f7:d4:b0:76:c9:a9:3b:02:2b:15:23:9c:
c4:3f:8c:7e:39:6a:9c:93:7f:5e:4f:05:20:1f:08:
71:95:17:6e:4e:e5:36:7b:4f:34:d3:f8:ed:51:03:
37:35:59:f1:2c:c4:d1:0f:16:f8:b1:4f:22:50:22:
76:e0:21:e3:86:40:58:cb:b6:23:f2:07:eb:9b:cd:
15:b5:30:98:7f:13:90:a6:c8:73:22:5a:02:d6:66:
59:6a:df:1a:cc:2f:18:b5:5d:cb:ac:bd:05:d7:6c:
09:12:3e:66:a4:0d:03:3f:d1:bb:e2:1f:a4:15:cb:
95:23:0a:79:96:41:ca:06:5a:3f:4a:b1:cb:e5:6d:
22:f1:e8:ac:94:60:31:87:6f:83:36:c8:c4:79:3e:
10:da:f5:72:7d:ba:1d:2c:8f:6d:fb:72:40:63:65:
44:41:b4:5a:4c:c1:37:29:ab:7c:34:e5:ee:c9:82:
78:96:b4:a9:f6:c5:45:9d:7e:97:a6:54:7c:25:69:
fc:62:d2:c4:f0:fc:0e:e9:dd:ec:64:91:1e:72:a8:
23:a8:10:4c:da:ae:d6:8b:1b:2f:93:2c:a2:3e:c7:
e6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:30:7A:09:D4:77:25:6A:5A:41:7E:C9:4D:EE:C6:19:59:79:8B:44
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:33:49:b5:3e:8b:99:98:6f:fe:0e:a2:98:8f:09:b3:2a:4f:
d3:ee:a0:21:45:6e:96:5e:46:4c:df:0b:18:df:8b:e9:d2:43:
1e:69:7b:6f:34:d5:1c:67:cc:e0:b7:91:60:15:d2:6a:5a:ce:
e5:cc:bf:ab:35:49:38:6b:72:a3:92:be:2d:57:d9:67:c0:c0:
78:e4:72:eb:d3:c6:c2:65:7e:7d:f4:c6:e5:0d:56:be:62:5b:
87:94:ab:01:2c:8a:a1:b8:06:75:77:0a:3f:20:f2:93:d5:ed:
43:a7:88:93:cd:d0:87:e8:51:bb:ca:cc:0e:c8:d6:ea:9a:0e:
2a:bc:22:f9:28:73:86:c1:48:13:3c:90:86:41:29:69:44:b0:
e3:f3:f0:3e:02:d2:29:11:f2:83:ee:8a:97:e6:41:88:c4:21:
3e:7e:1d:bb:c2:e0:38:b3:b9:e9:5c:4f:6e:06:31:78:2c:f9:
dc:2c:3d:36:1c:24:61:11:10:31:2e:4f:2d:8a:78:67:e3:6e:
07:ec:9d:fb:05:21:24:dc:14:01:6f:a2:6f:03:7b:68:38:3b:
b6:68:77:98:f9:97:86:0c:74:20:da:25:42:ca:c6:89:93:3a:
0d:e7:28:ed:2f:b2:3a:a5:1b:be:6b:08:96:16:65:57:ad:a3:
58:6a:a8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 16:14:04 2026 by rpki-client