
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier: IuQ09RwGtOixVXo1a+CLUiLLvAxQuBiaWHZEGguCfHI=
Subject key identifier: 7A:A6:F8:16:5E:D0:A4:E3:F6:FA:13:19:CA:A4:8F:E8:2B:D7:99:02
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 01A0C40DDE9E1862EACADFBF9BDBDE1788C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 13:00:38 +0000
Manifest this update: Mon 21 Sep 2026 13:00:38 +0000
Manifest next update: Tue 22 Sep 2026 13:00:38 +0000
Files and hashes: 1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: hszWWC6Y47xBKGa3LOQ9OFMSdXBjwARE3EsL2ljAlOY=)
2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:de:9e:18:62:ea:ca:df:bf:9b:db:de:17:88:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Sep 21 13:00:38 2026 GMT
Not After : Sep 22 13:00:38 2026 GMT
Subject: CN=7aa6f8165ed0a4e3f6fa1319caa48fe82bd79902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:cf:98:06:af:a0:68:da:ee:53:7e:4e:9e:
50:3e:34:b3:eb:9e:94:4b:03:4a:3b:9f:3b:2d:37:
76:e6:e3:65:5c:a4:ab:8b:0f:0f:40:f2:cd:72:d7:
68:b5:98:75:31:3b:10:8a:b8:61:12:e1:b6:34:1b:
b2:47:76:7f:5f:e9:3a:15:a0:46:41:6b:f3:58:7c:
37:92:21:d9:ea:88:ec:3f:fe:ee:af:59:6b:56:da:
99:5a:46:66:84:8d:47:e3:ce:10:50:36:e3:8c:0e:
1c:f3:d8:96:a1:e0:0f:98:dd:a5:00:51:5b:51:5b:
e0:4a:3c:72:db:6b:b0:fe:6d:cf:ec:2e:e0:e1:8c:
66:c0:59:1e:da:fa:17:a0:f7:ed:4f:50:c6:4a:fb:
28:68:f6:97:7f:4e:ed:03:e0:e0:5d:91:1f:73:c8:
5f:c3:64:ba:cd:e4:14:45:a5:68:6e:49:c0:9e:4d:
34:73:e6:41:d2:d1:62:30:33:01:aa:55:31:ad:e2:
07:f9:bb:a3:f2:4e:ee:0a:72:62:f9:c7:76:98:d8:
1b:94:3e:aa:d5:e4:3c:f7:04:93:a5:b6:7f:10:de:
51:43:d5:f9:f9:64:84:0b:38:25:cb:72:4a:fa:f8:
63:7f:f4:12:64:5f:a7:ae:ca:62:57:59:df:15:70:
d1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A6:F8:16:5E:D0:A4:E3:F6:FA:13:19:CA:A4:8F:E8:2B:D7:99:02
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b1:cd:de:fc:81:b9:3d:cf:2d:40:69:be:06:5a:33:60:98:
b0:55:62:e0:2b:a6:b4:75:58:2d:90:56:32:09:b3:37:3f:9c:
7f:12:4a:52:39:00:d1:e0:71:dd:7c:ce:93:1a:8a:b3:6e:f5:
6b:b8:e5:f6:76:d9:5c:d8:77:c5:13:4e:83:18:dc:d2:25:67:
dc:6c:c5:9c:9e:93:8a:05:ff:05:ce:f2:7a:55:bb:fa:2c:b2:
27:17:26:95:72:09:eb:b2:0f:8e:d4:ee:bd:76:c5:50:d1:bc:
6d:0a:e2:ce:8f:31:7a:67:de:2c:91:68:0f:b8:81:e7:15:73:
58:f6:7f:2d:8e:ff:1f:8b:c7:34:0a:d0:0f:91:96:5c:94:df:
e5:61:be:7f:ea:4b:6d:3d:78:0d:40:39:5e:c5:f7:35:87:bb:
91:c9:a2:c4:de:ee:c7:40:55:16:8f:33:bb:b8:d8:6b:ff:0c:
86:33:28:fc:16:71:e2:58:bc:59:6b:0d:f6:97:a1:58:f8:0f:
16:c5:f3:0f:77:46:98:b3:26:a5:84:00:5d:62:4c:ec:36:8b:
33:0c:7b:0f:aa:5a:80:0b:8f:60:73:67:3c:89:24:0e:54:5b:
c1:78:4f:40:61:0d:f9:90:f4:2e:c9:0f:eb:e0:97:11:49:3c:
ea:51:79:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:24:22 2026 by rpki-client