
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier: RPmeYLaLPz+t7t+gdRty4wnE+k3o9AKuhKPql/DINNg=
Subject key identifier: 40:48:B3:69:4F:A6:C8:AD:18:DA:B5:81:74:8C:C6:C7:00:F7:E0:34
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 01A0D19268FAA5CFEF1D22A5AAA9D570A4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 04:00:28 +0000
Manifest this update: Thu 24 Sep 2026 04:00:28 +0000
Manifest next update: Fri 25 Sep 2026 04:00:28 +0000
Files and hashes: 1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: hKDfE4pFV6S5CnMRJIQZ6lN2rWKOHLCdvJwG56EpU4A=)
2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:68:fa:a5:cf:ef:1d:22:a5:aa:a9:d5:70:a4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Sep 24 04:00:28 2026 GMT
Not After : Sep 25 04:00:28 2026 GMT
Subject: CN=4048b3694fa6c8ad18dab581748cc6c700f7e034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bd:6c:ce:50:af:bf:19:7d:ab:ac:31:3f:43:
f4:5c:85:12:10:ff:a8:85:18:87:6c:21:46:c3:3e:
fa:51:60:15:1b:a4:68:a3:71:12:9b:09:7a:76:f7:
89:5a:74:97:d5:19:b5:1d:8d:99:47:67:91:16:b1:
1c:33:24:f4:95:29:62:d1:6f:12:5f:8b:d2:c3:15:
d0:e8:28:d6:e0:0c:70:b2:2c:f0:ba:79:fb:5e:de:
53:f8:3f:34:9f:82:00:07:bb:84:5a:53:89:91:f4:
10:e1:56:f3:6b:b6:c3:bd:09:db:8c:02:1d:86:2a:
c3:e1:a9:a2:78:cc:ca:38:bc:9e:26:99:0a:8e:bd:
f9:a3:2a:b0:6c:f7:9d:22:4f:ae:42:26:cd:60:f2:
a1:6c:b8:cc:25:0b:88:f3:b1:75:90:d9:4b:82:70:
97:72:53:33:ae:e9:d1:0e:01:f2:8e:f0:bb:20:46:
70:82:b0:95:d7:af:5b:23:2d:cf:51:bf:d4:0d:26:
65:c8:d6:f8:87:d8:05:cf:3f:3c:44:75:5b:37:3a:
e2:65:18:40:b0:8c:08:24:be:6f:4b:b8:ca:90:11:
7c:0d:ae:de:cb:c1:c5:1b:2d:5f:64:54:5b:20:b2:
46:1b:03:64:7d:cc:5a:c6:d1:8c:7e:66:8b:9d:5e:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:48:B3:69:4F:A6:C8:AD:18:DA:B5:81:74:8C:C6:C7:00:F7:E0:34
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:65:36:0d:64:83:58:4e:37:00:f8:cd:f1:3e:7e:1d:b4:d2:
6c:68:58:9f:11:2a:94:0d:1b:4a:41:f8:78:0d:ff:34:f5:8a:
4e:46:fe:95:24:84:8a:fa:9a:26:48:30:68:ae:49:bc:ac:fa:
24:f1:05:9f:78:dc:31:34:aa:d2:5e:92:71:d6:17:2d:37:4b:
61:53:bf:db:d1:fe:a6:a6:4b:ac:28:57:23:50:f9:62:d6:d7:
1e:83:ef:8b:e5:34:fb:4b:e6:e5:24:21:eb:49:b7:ef:fd:17:
64:d8:5f:8c:0b:6e:5c:7b:e6:c2:ec:f1:f5:56:56:8b:d1:e5:
5d:66:b8:6f:69:03:4a:b8:c3:4b:77:b4:94:90:55:27:13:19:
e8:f8:6e:a5:fc:2c:26:38:f4:c3:5d:ed:6b:9a:93:b2:bf:d4:
77:6b:4c:3c:fa:ce:7b:ff:76:51:ec:14:c7:c7:03:b5:48:30:
46:85:1c:54:cb:30:0a:98:95:6f:cb:75:75:dc:1a:92:94:65:
28:ed:03:91:6c:11:18:0c:55:17:4a:24:da:b1:13:8d:ee:e1:
23:8c:0d:4d:7d:98:76:86:15:63:c4:99:e5:35:4e:99:e1:b9:
c3:30:64:ab:bc:74:e1:24:b6:47:28:38:5e:a4:25:95:6e:14:
8c:44:f7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:16:37 2026 by rpki-client