
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier: BtVcy4rwRiU+oGpLtywVHWfGNZd0M3U4z+r4TQbkCdQ=
Subject key identifier: E2:6C:B1:FB:A2:10:24:C0:F6:33:93:2A:B5:12:F5:4F:42:6F:9E:79
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 01A040BBD86EDC224D040102C4937BB3A032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number: 1A22
Signing time: Thu 27 Aug 2026 01:00:47 +0000
Manifest this update: Thu 27 Aug 2026 01:00:47 +0000
Manifest next update: Fri 28 Aug 2026 01:00:47 +0000
Files and hashes: 1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: keiPCmQ5sjwtlHuqObmx3spp6XPpomBe2AstxxdUonk=)
2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bb:d8:6e:dc:22:4d:04:01:02:c4:93:7b:b3:a0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Aug 27 01:00:47 2026 GMT
Not After : Aug 28 01:00:47 2026 GMT
Subject: CN=e26cb1fba21024c0f633932ab512f54f426f9e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:21:cd:a5:64:fa:81:cb:22:2d:8d:82:fc:
9e:5c:31:fe:d9:b4:15:93:42:9e:99:11:1e:ed:61:
b7:f1:8b:5b:61:76:49:8a:6b:78:1f:6b:98:00:1f:
e5:86:e7:e2:96:ba:7d:ed:fc:f3:6d:d8:b2:8c:38:
2e:f4:5b:8e:12:f5:39:22:ba:7b:1c:45:40:3e:0f:
18:11:64:04:9f:55:68:98:a5:40:f2:70:82:17:71:
9d:9d:eb:e2:16:60:07:f8:5e:15:86:e8:a4:ee:96:
91:67:ce:f9:25:04:5c:92:df:c0:c6:09:97:a6:5a:
ca:93:bd:64:ff:82:70:d1:af:7f:16:4f:c8:5d:61:
2b:84:20:fb:62:25:57:de:e7:0f:6b:8b:cc:33:06:
20:4c:1a:69:da:86:9a:20:40:67:ea:2b:28:70:d3:
42:73:4e:cd:1b:a0:e6:11:10:c4:75:7e:72:58:68:
4d:b3:da:4e:22:a9:63:d8:89:88:72:fe:ba:2a:a5:
9b:50:2d:c6:51:8d:b0:4f:c2:dc:72:ad:49:33:e8:
23:68:2f:64:f8:2d:b4:60:4e:97:3b:2f:c7:cc:db:
e7:3d:0a:50:0b:9b:b1:4e:c5:fe:97:f7:d0:37:4f:
d7:e4:27:0c:bc:3f:31:22:6a:f0:b8:f3:87:b2:cf:
ca:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6C:B1:FB:A2:10:24:C0:F6:33:93:2A:B5:12:F5:4F:42:6F:9E:79
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:aa:5a:7d:d4:c5:da:42:e7:6b:33:dd:13:86:22:3c:b3:45:
fd:3a:2b:9b:cb:bc:31:db:d5:04:40:6c:f6:45:6f:91:a2:c0:
94:ac:aa:2f:00:18:f7:b9:e3:13:53:3f:b0:f2:a4:ab:7a:3f:
fa:ac:e4:5c:c6:7b:a5:4d:cf:97:e5:4c:c7:fc:0a:5e:a9:f2:
d2:f8:ea:fb:af:5c:17:05:32:03:b6:36:32:58:58:94:75:bd:
af:53:1b:ff:b7:27:84:c0:fc:6a:ce:17:fb:21:66:75:7c:ac:
28:33:b0:ff:8b:98:b4:f5:d0:f1:ee:7e:a3:d3:2a:8f:92:30:
44:12:87:70:d2:3c:ef:57:07:d5:e6:9a:13:88:6d:46:d2:bb:
03:f2:ed:f9:73:be:db:4d:48:ac:fb:22:f0:56:df:bb:cb:da:
cf:75:dd:95:34:0b:ea:de:f5:f1:e1:bf:1b:98:41:de:fc:6f:
0e:1a:b8:df:d9:f7:bc:3f:a4:fa:48:cb:f3:ff:3f:79:bc:cc:
7d:37:1c:32:14:9e:7f:21:b9:8d:23:d6:f9:0f:01:cb:bb:a8:
bf:03:a0:4a:b4:4a:02:55:eb:bd:1e:a2:a2:c5:94:59:9b:30:
c2:42:85:ac:2f:71:b2:82:89:5e:80:52:8f:0a:c0:8d:6b:11:
b7:1a:ef:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAu9hu3CJNBAECxJN7s6AyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz
MGFlMzkwHhcNMjYwODI3MDEwMDQ3WhcNMjYwODI4MDEwMDQ3WjAzMTEwLwYDVQQD
EyhlMjZjYjFmYmEyMTAyNGMwZjYzMzkzMmFiNTEyZjU0ZjQyNmY5ZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMghzaVk+oHLIi2NgvyeXDH+2bQV
k0KemREe7WG38YtbYXZJimt4H2uYAB/lhufilrp97fzzbdiyjDgu9FuOEvU5Irp7
HEVAPg8YEWQEn1VomKVA8nCCF3GdneviFmAH+F4Vhuik7paRZ875JQRckt/AxgmX
plrKk71k/4Jw0a9/Fk/IXWErhCD7YiVX3ucPa4vMMwYgTBpp2oaaIEBn6isocNNC
c07NG6DmERDEdX5yWGhNs9pOIqlj2ImIcv66KqWbUC3GUY2wT8Lccq1JM+gjaC9k
+C20YE6XOy/HzNvnPQpQC5uxTsX+l/fQN0/X5CcMvD8xImrwuPOHss/KuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJssfuiECTA9jOTKrUS9U9Cb555MB8GA1UdIwQY
MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt
YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw
LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6pafdTF
2kLnazPdE4YiPLNF/Torm8u8MdvVBEBs9kVvkaLAlKyqLwAY97njE1M/sPKkq3o/
+qzkXMZ7pU3Pl+VMx/wKXqny0vjq+69cFwUyA7Y2MlhYlHW9r1Mb/7cnhMD8as4X
+yFmdXysKDOw/4uYtPXQ8e5+o9Mqj5IwRBKHcNI871cH1eaaE4htRtK7A/Lt+XO+
201IrPsi8Fbfu8vaz3XdlTQL6t718eG/G5hB3vxvDhq439n3vD+k+kjL8/8/ebzM
fTccMhSefyG5jSPW+Q8By7uovwOgSrRKAlXrvR6iosWUWZswwkKFrC9xsoKJXoBS
jwrAjWsRtxrvTg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:01:27 2026 by rpki-client