Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier: UP0ESgUcZiyqqtdwYtvsBbCRnGML+s7kgSPmgUAeFGU=
Subject key identifier: 52:96:56:6E:FF:5A:FF:10:D1:6A:52:4A:99:DF:53:BA:26:1B:6D:DE
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 01A1DE030DABB2A59DD5A41C497B6CB0F9D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 07:01:44 +0000
Manifest this update: Sun 15 Nov 2026 07:01:44 +0000
Manifest next update: Mon 16 Nov 2026 07:01:44 +0000
Files and hashes: 1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: DxfEV+aOyJMhjaryMlFIENCek/TjabYLS6eTSNrqidk=)
2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:03:0d:ab:b2:a5:9d:d5:a4:1c:49:7b:6c:b0:f9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Nov 15 07:01:44 2026 GMT
Not After : Nov 16 07:01:44 2026 GMT
Subject: CN=5296566eff5aff10d16a524a99df53ba261b6dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2d:cf:dd:f0:f0:d8:75:3f:7b:d9:95:b9:b0:
e0:ab:b6:c2:0a:1d:bf:d9:7d:83:46:c4:3d:d7:bf:
15:9e:4c:d0:b4:13:53:66:b1:28:6c:e7:12:fb:ae:
31:bc:1d:d8:85:9a:07:d8:19:d8:8b:b3:b0:b3:d3:
e7:18:08:83:4c:30:38:17:95:b1:13:63:2b:40:d8:
9f:3a:19:9e:36:8d:a5:3e:f2:db:09:0b:79:ba:c9:
bf:67:66:85:09:8d:29:e5:07:76:3f:49:d4:f2:33:
27:b1:41:e1:91:c4:93:6a:c2:94:d5:4d:4c:0f:16:
dc:ff:e0:45:91:5e:3d:e7:6f:7d:86:29:d4:be:d1:
ce:33:5c:c2:47:d3:f3:64:3c:7b:59:81:ee:d2:d9:
83:39:ad:05:54:24:2d:8f:07:01:78:c0:5a:14:e2:
02:49:06:1f:48:18:bf:de:61:09:97:9d:e9:3e:9c:
bd:2c:06:1f:e7:82:10:14:f8:fa:a5:1a:f8:f2:27:
bc:53:5c:f0:7e:d0:bf:67:46:e4:88:5e:89:4c:ef:
8d:b2:48:f6:26:6a:14:64:02:fb:db:66:55:bc:39:
72:98:ed:92:59:67:9d:61:b5:d0:c0:eb:e3:5e:0f:
79:c3:f2:8f:26:91:84:5f:25:0c:f9:97:f2:a7:52:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:96:56:6E:FF:5A:FF:10:D1:6A:52:4A:99:DF:53:BA:26:1B:6D:DE
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:91:d2:18:35:57:05:4b:49:b6:8b:38:6a:1e:8e:1b:26:ab:
ab:f0:6f:dc:0e:6d:92:f5:16:bb:5a:0f:c8:8e:8c:00:c5:c4:
b3:19:72:87:e0:c3:a0:a1:c1:5d:85:8f:a6:2c:11:77:2b:04:
3f:0e:10:3c:9a:79:70:c6:6f:ed:95:3b:70:39:22:99:16:cd:
0f:9c:60:b1:d7:02:89:b0:64:5f:82:b8:ba:0d:62:0c:9e:d6:
ab:c9:95:dd:55:08:93:03:55:c2:19:75:92:78:fc:66:58:61:
a2:b4:06:e5:2b:aa:ea:1f:4e:31:8a:13:c1:5c:b1:62:df:d3:
44:4d:d2:d0:61:15:c1:ae:04:b5:ac:07:37:03:82:cc:15:84:
f3:33:bd:5b:e9:18:7f:fd:18:0b:59:66:58:6d:55:0f:8f:ea:
43:e4:c3:b6:36:50:b6:88:01:09:f2:9f:ee:10:93:1c:74:48:
84:a3:8a:fd:d3:e1:24:7f:b8:1d:c4:a6:21:de:1b:cc:b3:89:
74:e8:02:82:7c:22:15:1d:b4:4d:13:df:46:bd:50:4a:b6:e7:
06:35:63:fd:21:84:fd:7a:5a:e4:cd:d4:d1:93:93:4e:bc:ca:
e8:a3:2a:96:27:64:ac:d4:69:08:46:3d:d5:c7:69:5e:4f:00:
70:43:d8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:16:43 2026 by rpki-client