Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier: RFYSLcl19LAs3HRbsp4B9lmeiJIQG7JQlQdySo3peJw=
Subject key identifier: 7E:1A:95:C8:61:72:8C:1C:16:2E:4E:69:0F:7D:FB:B8:70:4A:14:2C
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 01A0FFEC8089B7E9307466BD41FBBF2EC7F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number: 1A85
Signing time: Sat 03 Oct 2026 04:01:24 +0000
Manifest this update: Sat 03 Oct 2026 04:01:24 +0000
Manifest next update: Sun 04 Oct 2026 04:01:24 +0000
Files and hashes: 1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: Tu5tOHnWeUCcJOgZAw1VL7O5bc5rWesNiUHF8D5bmSE=)
2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:ec:80:89:b7:e9:30:74:66:bd:41:fb:bf:2e:c7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Oct 3 04:01:24 2026 GMT
Not After : Oct 4 04:01:24 2026 GMT
Subject: CN=7e1a95c861728c1c162e4e690f7dfbb8704a142c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:12:b7:6d:05:af:4e:c9:d9:00:f7:a5:1d:8d:
69:66:bb:1f:1c:3d:48:98:e4:c8:3f:0f:90:4c:46:
cb:8f:e4:8e:82:80:bd:2d:a1:41:5d:c1:46:27:fb:
38:cf:cc:35:8d:3d:38:33:51:e6:0b:53:1b:fc:2c:
91:cb:07:95:31:c5:ef:d6:75:0f:ea:73:56:39:54:
29:c6:4f:94:3d:97:45:fd:c2:49:7c:08:4c:e5:97:
84:07:c5:70:97:3b:c5:9f:f6:60:34:28:d1:63:fe:
df:41:72:e8:bb:dc:30:18:45:87:78:40:18:8f:48:
47:c2:ff:17:85:56:7c:26:98:5d:bc:6d:4e:81:f2:
15:c5:ca:39:12:c9:dc:e7:c3:8a:38:21:e2:17:8b:
4f:2c:c3:ce:fc:01:f3:25:29:85:0d:3d:e1:37:e1:
62:07:c5:ed:7d:fc:2c:6f:61:d4:fb:8e:9a:89:26:
27:17:39:7a:55:78:29:3e:22:49:08:aa:ba:42:0d:
24:65:db:3b:c8:e0:d0:74:ff:19:6c:c7:b9:2c:86:
83:97:0a:9f:71:7c:04:87:8c:56:c4:cd:b6:b7:5e:
28:91:26:55:c7:4b:f8:38:24:35:a1:da:eb:a1:68:
31:94:bf:f1:2d:6f:28:32:41:49:83:c3:b4:f3:e0:
fe:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1A:95:C8:61:72:8C:1C:16:2E:4E:69:0F:7D:FB:B8:70:4A:14:2C
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:68:f6:10:e5:ca:39:12:f7:86:c1:a2:9c:a8:a1:af:a9:f2:
9a:4e:0a:0c:59:79:ff:03:d2:b0:94:62:d8:c9:f7:6e:1f:45:
64:85:3f:ed:58:70:73:f6:6b:e9:1b:6d:3b:f2:58:30:32:4d:
6c:6f:61:52:97:e4:bb:db:be:92:ce:11:bd:c6:ed:09:a7:50:
4d:6d:4e:ed:0e:23:38:c7:78:ae:cb:e9:ff:39:7c:03:75:89:
d6:bc:6a:13:72:69:77:f6:c2:1a:96:d3:b3:b5:41:40:be:1e:
92:c6:f5:c9:3d:97:10:f2:65:62:bf:b0:f6:76:ac:bf:56:8d:
9a:d2:95:4b:1d:ee:40:61:66:54:d6:ac:a4:e0:ea:19:39:72:
d8:95:bf:3c:e9:6e:9d:1c:d5:11:28:9a:6a:45:e1:0a:90:0b:
79:e6:65:f5:fe:56:79:b9:74:b5:09:a7:9e:82:a5:e9:5d:07:
a6:10:ce:34:7e:31:5c:69:e4:47:32:cb:95:fe:40:9a:2b:6b:
ca:7c:18:db:a4:41:ed:39:32:49:00:1c:70:14:c6:bd:7d:0f:
83:11:58:fc:de:ba:10:65:32:c7:48:1d:7b:3d:d1:ce:0f:a5:
c9:a1:20:5f:c4:85:87:2e:3d:94:25:1e:e2:c4:6e:8f:49:8f:
50:a6:18:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD/7ICJt+kwdGa9Qfu/Lsf3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz
MGFlMzkwHhcNMjYxMDAzMDQwMTI0WhcNMjYxMDA0MDQwMTI0WjAzMTEwLwYDVQQD
Eyg3ZTFhOTVjODYxNzI4YzFjMTYyZTRlNjkwZjdkZmJiODcwNGExNDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BK3bQWvTsnZAPelHY1pZrsfHD1I
mOTIPw+QTEbLj+SOgoC9LaFBXcFGJ/s4z8w1jT04M1HmC1Mb/CyRyweVMcXv1nUP
6nNWOVQpxk+UPZdF/cJJfAhM5ZeEB8VwlzvFn/ZgNCjRY/7fQXLou9wwGEWHeEAY
j0hHwv8XhVZ8JphdvG1OgfIVxco5Esnc58OKOCHiF4tPLMPO/AHzJSmFDT3hN+Fi
B8Xtffwsb2HU+46aiSYnFzl6VXgpPiJJCKq6Qg0kZds7yODQdP8ZbMe5LIaDlwqf
cXwEh4xWxM22t14okSZVx0v4OCQ1odrroWgxlL/xLW8oMkFJg8O08+D+pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4alchhcowcFi5OaQ99+7hwShQsMB8GA1UdIwQY
MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt
YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw
LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamj2EOXK
ORL3hsGinKihr6nymk4KDFl5/wPSsJRi2Mn3bh9FZIU/7Vhwc/Zr6RttO/JYMDJN
bG9hUpfku9u+ks4RvcbtCadQTW1O7Q4jOMd4rsvp/zl8A3WJ1rxqE3Jpd/bCGpbT
s7VBQL4eksb1yT2XEPJlYr+w9nasv1aNmtKVSx3uQGFmVNaspODqGTly2JW/POlu
nRzVESiaakXhCpALeeZl9f5Webl0tQmnnoKl6V0HphDONH4xXGnkRzLLlf5Amitr
ynwY26RB7TkySQAccBTGvX0PgxFY/N66EGUyx0gdez3Rzg+lyaEgX8SFhy49lCUe
4sRuj0mPUKYYFg==
-----END CERTIFICATE-----
Generated at Sat Oct 3 13:09:19 2026 by rpki-client