
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier: zn362J7hSIPSDmijax0cgltYdKLqiYEcdmrRCEOTQFs=
Subject key identifier: 22:1E:32:90:4A:00:C7:DF:E1:98:64:FB:74:5F:9E:0E:C5:D5:D9:6A
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 01A0502F693073BD2A95A45A46A121B57F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number: 1A2A
Signing time: Sun 30 Aug 2026 01:01:19 +0000
Manifest this update: Sun 30 Aug 2026 01:01:19 +0000
Manifest next update: Mon 31 Aug 2026 01:01:19 +0000
Files and hashes: 1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: cqBFXHxOjPo+tUBiQI6w7kEYbxZHN2v1qfhQbkghy00=)
2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:50:2f:69:30:73:bd:2a:95:a4:5a:46:a1:21:b5:7f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Aug 30 01:01:19 2026 GMT
Not After : Aug 31 01:01:19 2026 GMT
Subject: CN=221e32904a00c7dfe19864fb745f9e0ec5d5d96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7b:78:90:7e:f1:1a:c3:0a:cb:90:6d:d0:7f:
9c:1e:d2:8d:55:0a:19:13:3d:da:99:a2:c8:d8:9f:
e3:61:8d:91:03:76:45:2d:04:5a:02:63:0a:a3:c2:
03:a7:62:43:a1:df:a9:d2:06:ce:ca:ca:50:95:2b:
2f:00:af:46:93:2a:6f:39:60:d4:11:cc:1a:00:8e:
f2:eb:bd:01:c5:86:18:6a:e5:7b:ee:52:fb:fd:f2:
9c:69:5a:7f:a3:a6:b1:1e:f2:6b:66:72:0a:49:6d:
92:21:55:44:1c:86:85:1c:cc:aa:af:b9:e5:02:df:
e8:e2:05:1d:b7:62:e4:74:15:14:6d:f3:fa:3f:b9:
83:4b:e3:aa:9d:b3:9f:ea:3b:99:c5:85:bc:06:9a:
5d:e7:93:c8:95:48:57:61:f7:37:8f:e3:90:a6:5a:
43:51:df:8b:e2:ca:63:68:91:b3:73:03:6f:cf:9f:
cc:59:ec:08:2e:d5:af:3c:df:49:8e:a6:fb:2f:18:
e5:ee:d4:8b:a2:77:7a:a0:7e:27:3e:4f:07:d6:82:
2c:eb:22:6c:31:4a:e4:56:78:1d:d7:6d:24:d2:d0:
b4:af:1a:04:4a:45:1b:bb:67:77:b8:6d:db:74:59:
9b:41:14:a0:c9:f5:0d:d2:f8:f3:ec:d0:17:bf:a7:
f6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1E:32:90:4A:00:C7:DF:E1:98:64:FB:74:5F:9E:0E:C5:D5:D9:6A
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:03:23:91:66:e4:c9:69:77:64:0d:12:dc:6e:9d:c0:51:e3:
cb:24:2d:e9:0a:40:f7:68:64:a1:ec:7f:fa:83:61:82:39:f7:
47:27:6c:8a:c2:de:98:09:d5:44:c6:ac:bc:10:9a:6f:bb:fe:
88:2a:81:f5:46:22:79:36:b8:55:0d:48:00:1a:b7:0e:4b:1c:
d8:76:72:55:a1:be:ce:d6:37:7b:31:52:79:e6:d2:0f:17:f5:
01:84:5b:80:f6:08:6a:2c:9a:d9:c0:71:12:18:5a:ab:eb:85:
81:2e:19:cc:9f:b9:d8:4c:29:6e:34:d8:ac:e1:a0:5a:5b:1e:
74:99:a5:d2:b3:bc:c1:26:31:2b:74:ae:9f:51:38:6d:ad:8a:
f5:7e:e4:91:13:19:e7:0e:cb:9f:3a:e1:38:31:77:ec:39:16:
38:68:f9:ca:df:d9:dc:5a:a7:8f:03:0b:f4:ac:30:d2:d2:75:
7a:3d:0b:55:34:b0:65:40:98:37:c7:3c:0e:b9:69:e8:c3:20:
da:1e:e4:20:8b:a9:31:c5:3d:5e:f4:11:6f:fa:3f:89:28:cc:
d6:db:1d:d1:50:c8:79:e8:8b:4e:9c:e0:10:dc:2f:64:c5:de:
2b:43:16:b2:50:97:5a:71:66:d3:b5:d3:8e:1c:54:e1:c7:bd:
d8:67:b0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 30 02:31:37 2026 by rpki-client