Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier: iz6Ciu97veobonm5MvJp41OqcmhG1EpOCAWq9LWFpok=
Subject key identifier: 3B:AE:63:92:E4:AE:D1:0C:C1:30:27:09:DE:7A:D4:9F:79:F8:4F:FB
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 01A05FA26051459363AC346E7A65FCC2513F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number: 1A32
Signing time: Wed 02 Sep 2026 01:01:11 +0000
Manifest this update: Wed 02 Sep 2026 01:01:11 +0000
Manifest next update: Thu 03 Sep 2026 01:01:11 +0000
Files and hashes: 1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: IaYT4KyYIcP2F7OUzKIVZJuHrtccLDimw0c1K9Q4z8g=)
2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Sep 2026 23:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5f:a2:60:51:45:93:63:ac:34:6e:7a:65:fc:c2:51:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Sep 2 01:01:11 2026 GMT
Not After : Sep 3 01:01:11 2026 GMT
Subject: CN=3bae6392e4aed10cc1302709de7ad49f79f84ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:a5:35:b1:e1:d0:71:af:44:bc:18:af:e2:
7f:80:0e:e7:00:77:2a:9b:34:4a:3a:06:3d:56:7c:
4d:21:c9:93:d8:ff:76:5c:16:fe:88:f1:61:7b:5f:
04:e0:c9:be:30:84:71:04:e3:42:ab:aa:c1:e5:42:
bd:95:66:d6:6b:09:c3:79:49:19:84:be:3f:5e:6a:
00:04:e7:2c:df:88:82:60:86:db:78:53:ca:06:34:
84:81:23:f4:17:db:7b:13:d5:c1:48:c4:a2:f1:cd:
5a:e0:8a:9c:f9:a6:80:70:f3:7e:15:83:2e:68:3f:
51:5c:26:93:9c:2d:17:a2:d4:4f:d8:b2:c4:81:30:
53:30:ee:50:3f:2a:92:c1:88:ac:68:95:76:fe:83:
1e:62:8e:fd:b7:35:30:1d:7b:c0:40:8b:5b:e1:cc:
37:d3:7c:7c:a3:c6:ac:24:5a:f1:d8:af:1a:41:ff:
55:de:33:8f:9c:b9:cc:6a:3b:89:af:8b:d9:00:00:
45:c3:03:10:d1:33:29:54:6b:31:6f:57:d6:26:f3:
71:ae:27:90:5b:06:79:e2:eb:e6:e9:85:54:dd:f9:
d2:64:37:1b:9b:47:44:ae:52:8f:50:2a:3b:c3:ce:
0e:1b:fe:b2:73:89:de:df:a5:65:55:73:43:90:57:
28:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AE:63:92:E4:AE:D1:0C:C1:30:27:09:DE:7A:D4:9F:79:F8:4F:FB
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:48:3f:67:4d:fa:39:ab:26:8e:58:5f:74:08:af:5e:71:12:
bb:d1:48:ab:17:39:4a:30:2b:d5:55:da:c2:2f:73:0a:0a:b4:
9d:d9:d9:1e:70:2a:2a:bb:05:27:76:39:71:9f:49:ad:d4:1f:
6d:0b:a1:e9:97:10:71:35:46:a7:b0:a6:41:b1:ea:18:ba:8f:
0d:9e:c4:ce:87:df:3d:1e:a0:29:1b:9d:1d:40:8a:8e:57:f3:
17:32:14:1b:f2:27:6a:be:c4:7e:47:a1:32:70:18:22:3e:f5:
ee:85:15:04:72:a5:d8:f6:cb:5c:f7:c5:24:89:89:a4:45:7b:
8d:2c:f6:b7:85:78:7e:ed:53:1e:80:91:a2:fb:c7:f4:eb:9a:
df:bf:3f:02:b9:66:4f:2a:d3:e1:9a:f7:e4:d3:e6:fb:cb:46:
43:62:43:c9:d7:f8:0d:a8:31:5a:1c:3c:81:32:b8:16:5d:7e:
b9:d8:a3:70:95:67:e8:71:71:21:76:66:7f:55:9b:8f:73:de:
84:1b:4e:7e:77:72:fe:af:c7:23:db:1a:07:e1:fd:2a:2e:a9:
c4:1f:8d:40:14:aa:74:54:a9:43:a9:14:ee:d5:92:dd:e0:a0:
ad:dc:72:33:c9:fc:4a:fa:0b:9b:30:a9:0c:cf:77:0e:7c:71:
06:ff:4b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 03:29:17 2026 by rpki-client