Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier: aNNCy2PCZvMoMX7EvxxiPA6s0L5eO0Ld7A6wsfgtnRY=
Subject key identifier: 43:E6:EF:39:23:62:30:CA:2D:BE:BB:80:11:19:D1:7C:33:59:8F:2D
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 01A12C56C12A653DE4D1854E8605DFD0D4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number: 1A9C
Signing time: Sun 11 Oct 2026 19:00:45 +0000
Manifest this update: Sun 11 Oct 2026 19:00:45 +0000
Manifest next update: Mon 12 Oct 2026 19:00:45 +0000
Files and hashes: 1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: y5hnC5FV4Doq028JCayDwHZjcu0FRy9JqrfFaU1/fQo=)
2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:56:c1:2a:65:3d:e4:d1:85:4e:86:05:df:d0:d4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Oct 11 19:00:45 2026 GMT
Not After : Oct 12 19:00:45 2026 GMT
Subject: CN=43e6ef39236230ca2dbebb801119d17c33598f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:8b:46:7b:f5:1b:68:f7:f4:0f:66:5a:4d:
e7:1a:4b:b6:a8:13:f0:a3:f5:dc:0d:26:87:f9:3e:
c0:2c:26:bd:a0:5a:38:b6:4a:8a:6a:e2:87:9f:55:
e8:86:2b:1c:c7:35:67:a1:6d:24:e4:d1:33:71:65:
6d:49:eb:2a:b2:b3:55:66:32:95:ed:06:dd:a2:df:
10:23:cb:c1:ee:04:36:2c:28:53:d8:6f:a0:29:9b:
99:f1:a5:69:7c:34:1f:7c:a9:3a:d5:0a:2d:e6:ae:
d9:e5:b1:59:85:28:46:e9:7b:dc:48:22:50:47:91:
85:e5:a5:65:52:e7:01:38:fa:0d:c2:83:36:f3:5e:
65:16:51:de:0d:75:78:3c:ea:87:7b:c2:dc:d5:da:
6c:17:14:b4:f4:f3:8b:7e:6e:c3:4c:93:f7:b9:02:
91:2c:de:71:f0:0c:f4:61:ba:a7:b8:0e:f5:71:bf:
0d:e6:8f:b7:58:84:7a:79:45:d9:62:c4:9a:fe:06:
28:0f:60:ab:31:26:5c:71:57:43:1d:b1:43:11:e7:
c2:e8:3b:1c:96:6e:4b:6c:59:1e:bd:3f:ed:ed:d4:
1a:82:e0:36:37:48:86:76:bb:81:7b:2a:79:d1:2e:
93:e9:5c:00:37:be:e0:3f:09:10:27:d0:e3:e6:a6:
c1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E6:EF:39:23:62:30:CA:2D:BE:BB:80:11:19:D1:7C:33:59:8F:2D
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:55:e3:78:a7:1c:fd:34:8a:05:33:bc:60:67:76:c1:47:d3:
7d:40:9f:90:56:5a:b1:23:c2:22:34:96:79:b2:4a:06:7d:c6:
51:d0:b8:d2:ae:90:6e:04:1f:ac:2d:90:b8:cd:87:5d:54:9b:
25:02:24:99:fe:8e:6e:7d:b4:c3:fe:6f:e2:30:83:1a:12:f9:
65:d2:df:bc:1f:48:1f:79:29:9c:dd:8b:60:5c:0c:72:a3:a2:
a7:db:9b:5e:ed:a2:bb:61:0e:d1:44:7d:93:da:32:eb:21:07:
5c:a1:5c:3b:03:6b:10:d3:c4:fa:df:2f:75:4b:ee:bd:50:80:
87:77:f9:be:ee:03:6f:10:81:3d:76:e5:e1:89:45:c4:56:76:
83:b3:c6:e0:21:d9:c5:b5:f9:49:07:b2:41:36:0a:63:9b:22:
d6:7c:1b:5b:15:a3:a3:32:7b:42:12:92:3f:22:18:30:3c:54:
ac:cc:95:10:e8:40:49:fc:c6:6b:61:a6:fd:09:38:10:b5:d6:
55:6b:b9:57:8d:dd:c6:a3:b1:f1:16:f4:0b:c0:44:a6:3e:3d:
e7:97:ce:c9:8a:8d:03:90:0a:47:f1:92:89:5e:7d:b1:c6:c3:
63:6d:39:03:b9:d6:0c:91:28:c5:a3:83:28:28:2f:8c:fa:6d:
7f:4c:38:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEsVsEqZT3k0YVOhgXf0NTMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz
MGFlMzkwHhcNMjYxMDExMTkwMDQ1WhcNMjYxMDEyMTkwMDQ1WjAzMTEwLwYDVQQD
Eyg0M2U2ZWYzOTIzNjIzMGNhMmRiZWJiODAxMTE5ZDE3YzMzNTk4ZjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs12LRnv1G2j39A9mWk3nGku2qBPw
o/XcDSaH+T7ALCa9oFo4tkqKauKHn1XohiscxzVnoW0k5NEzcWVtSesqsrNVZjKV
7Qbdot8QI8vB7gQ2LChT2G+gKZuZ8aVpfDQffKk61Qot5q7Z5bFZhShG6XvcSCJQ
R5GF5aVlUucBOPoNwoM2815lFlHeDXV4POqHe8Lc1dpsFxS09POLfm7DTJP3uQKR
LN5x8Az0YbqnuA71cb8N5o+3WIR6eUXZYsSa/gYoD2CrMSZccVdDHbFDEefC6Dsc
lm5LbFkevT/t7dQaguA2N0iGdruBeyp50S6T6VwAN77gPwkQJ9Dj5qbB3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPm7zkjYjDKLb67gBEZ0XwzWY8tMB8GA1UdIwQY
MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt
YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw
LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFXjeKcc
/TSKBTO8YGd2wUfTfUCfkFZasSPCIjSWebJKBn3GUdC40q6QbgQfrC2QuM2HXVSb
JQIkmf6Obn20w/5v4jCDGhL5ZdLfvB9IH3kpnN2LYFwMcqOip9ubXu2iu2EO0UR9
k9oy6yEHXKFcOwNrENPE+t8vdUvuvVCAh3f5vu4DbxCBPXbl4YlFxFZ2g7PG4CHZ
xbX5SQeyQTYKY5si1nwbWxWjozJ7QhKSPyIYMDxUrMyVEOhASfzGa2Gm/Qk4ELXW
VWu5V43dxqOx8Rb0C8BEpj4955fOyYqNA5AKR/GSiV59scbDY205A7nWDJEoxaOD
KCgvjPptf0w4sQ==
-----END CERTIFICATE-----
Generated at Mon Oct 12 04:38:22 2026 by rpki-client