Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier: PcpcRNuo5q0tMl/b0QC/a5h04tKC8nQK+hKQh+kYzRI=
Subject key identifier: 6D:31:BB:D0:0C:DA:6F:43:45:CF:4C:38:F6:B1:14:55:33:EF:88:CE
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 01A1A4123BC3B761302B6C2348E314B6A07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number: 1ADA
Signing time: Wed 04 Nov 2026 01:00:20 +0000
Manifest this update: Wed 04 Nov 2026 01:00:20 +0000
Manifest next update: Thu 05 Nov 2026 01:00:20 +0000
Files and hashes: 1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: vz4WqEwTc00usL9yuikkg8ubITyypRwgBMyrBQ+VeNM=)
2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=)
3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=)
4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=)
5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=)
6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a4:12:3b:c3:b7:61:30:2b:6c:23:48:e3:14:b6:a0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Nov 4 01:00:20 2026 GMT
Not After : Nov 5 01:00:20 2026 GMT
Subject: CN=6d31bbd00cda6f4345cf4c38f6b1145533ef88ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:93:0a:f2:18:63:03:81:d3:4a:d3:a8:9a:
af:26:3c:ba:e8:75:f5:b9:89:a2:93:cb:8b:c9:db:
2c:34:31:a4:50:bc:f2:81:e1:5c:3e:19:d3:5e:62:
cd:a4:91:4e:95:8f:00:8e:81:03:3a:40:1d:94:b4:
b5:5d:c6:d5:05:d1:5e:45:18:8c:4a:14:0e:b4:bc:
88:cc:b3:cf:f2:be:08:1b:62:e6:e5:d8:e5:f2:8c:
3c:6d:72:14:e0:99:f2:a0:fe:67:c0:a4:48:f5:20:
d4:b0:05:1e:36:b8:e1:16:0f:ea:ef:48:dd:75:96:
e6:57:3f:eb:57:24:b7:24:be:b4:3b:f7:2b:07:e6:
7a:45:8a:24:7f:0c:03:74:dc:30:89:4c:50:b5:d8:
40:9a:1a:5a:39:af:73:01:6b:eb:56:f5:55:b7:20:
86:b9:cf:1b:0c:25:c0:18:04:bd:8e:18:dc:e1:5e:
ee:41:af:3e:4a:39:eb:d7:53:39:5b:a1:79:d5:49:
8f:8f:c9:3c:d1:63:0f:3e:92:5e:03:2e:77:e4:79:
3d:15:69:74:00:a2:d1:b1:5a:c7:1f:e5:b6:07:b0:
43:3e:0d:33:d4:31:8a:0c:49:ad:53:bc:7b:0b:9c:
4c:29:4a:0b:13:22:98:a2:7f:df:5b:d5:7f:e9:f3:
35:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:31:BB:D0:0C:DA:6F:43:45:CF:4C:38:F6:B1:14:55:33:EF:88:CE
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:46:1f:da:08:6c:44:eb:99:9d:e6:24:40:f2:24:cf:c4:5e:
f2:df:14:a9:ff:ec:b8:19:4f:84:91:36:02:e5:de:bd:6e:62:
05:9c:25:57:55:ce:d0:05:27:78:b4:85:6c:9c:9f:5f:e5:2e:
55:41:09:bc:2c:46:68:a8:68:ac:f6:c1:10:3f:3e:df:79:53:
1b:0b:bf:4b:c8:8b:da:28:60:40:98:86:a5:8e:62:53:ac:63:
47:9c:1e:1c:c5:72:9a:42:da:c0:d3:10:a6:64:e1:55:a4:f5:
fc:2b:2c:1c:8c:77:02:58:43:e9:29:f3:16:24:f9:e4:7d:b0:
bc:d8:db:ac:0c:48:32:8e:ac:3e:c2:79:df:37:f9:dc:70:f9:
ec:4a:47:9b:26:70:a2:a0:db:9a:e9:8c:6b:c8:cf:8c:a3:4f:
36:74:85:b7:7c:b3:9d:66:a8:4f:ed:4e:2f:8c:a9:6f:a7:67:
0e:17:85:8d:bc:5a:33:d2:61:fa:19:4d:20:f8:d9:23:a0:63:
f1:2b:fd:f1:4f:b8:99:fe:4c:b1:d6:b0:3b:69:5c:d4:fa:7b:
d5:28:97:b4:79:3b:9c:24:d8:54:7a:b9:61:99:15:be:f2:b3:
e9:0a:02:42:d7:25:58:5b:29:b8:c0:aa:18:e9:fa:bc:39:9c:
4b:8c:99:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:14:59 2026 by rpki-client