Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: VD/Ky6+ltZG9Wc66rodO3UJzgTqlC9k+bQU/Jwwcvm4=
Subject key identifier: EB:9C:EB:10:8E:3A:E4:ED:19:19:AF:8E:66:A6:2D:EF:F4:A0:D7:22
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 01A13F0245FA18550833CDE34BD781C1A08C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 0F69
Signing time: Thu 15 Oct 2026 10:01:15 +0000
Manifest this update: Thu 15 Oct 2026 10:01:15 +0000
Manifest next update: Fri 16 Oct 2026 10:01:15 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: sG38XqcXnzMEnuVSAXEgwPclSgxKImeRqBRX4CL2eyc=)
2: bEo8_8O2mw7PwZ1Q1MJJqc3Br9c.roa (hash: J6cPpgVeMRsfnWXOAjdK3KoD47LW/HrK99BGJHxHOac=)
3: mwL6ugxhwkwsvxWzk5gpM438ER0.roa (hash: MzMEcGzrb78MmWAPB5Ny/yePKvNxTfYRGwcwpRrll8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:45:fa:18:55:08:33:cd:e3:4b:d7:81:c1:a0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Oct 15 10:01:15 2026 GMT
Not After : Oct 16 10:01:15 2026 GMT
Subject: CN=eb9ceb108e3ae4ed1919af8e66a62deff4a0d722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:86:d3:82:44:df:c4:6b:b5:bf:a0:1b:e2:
9b:0f:0a:55:58:b1:1b:97:3d:94:56:6a:ff:8d:16:
dd:d6:ce:7e:44:da:f6:b5:aa:90:9f:2c:7b:0a:16:
13:b3:26:38:57:0a:1c:b8:ae:d2:72:7c:a8:c5:91:
b9:47:71:33:96:6b:1d:34:c8:52:94:b4:91:01:72:
dc:05:19:db:30:2c:7f:3f:27:15:8a:cf:cf:7f:ba:
fd:ac:8f:71:9f:fc:06:fb:d3:d5:b5:84:75:e1:1b:
e5:02:3a:22:af:c2:64:35:f3:e2:82:a2:c6:02:e2:
b6:2f:db:42:ce:e4:75:93:6a:f8:8f:12:0f:bb:c8:
70:40:a7:c6:59:43:49:8e:a0:a1:0d:37:87:0b:c6:
13:1b:29:a1:8a:bb:87:91:40:bd:34:fd:80:a6:e9:
b0:2c:d3:9e:35:02:ef:3d:13:0c:3c:40:fd:b1:30:
3c:5d:77:8b:26:c0:e0:35:9a:e6:7d:ea:02:3a:bb:
b9:42:97:37:99:c9:f5:c6:c4:20:e4:39:3f:61:8f:
85:e9:23:c5:99:4a:6b:f1:27:3c:7c:d1:80:b7:0b:
bc:11:0f:47:24:35:80:ca:99:f3:2a:79:3e:79:df:
79:6f:ce:33:e9:4d:69:5c:3b:af:10:e5:87:dd:6d:
0e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9C:EB:10:8E:3A:E4:ED:19:19:AF:8E:66:A6:2D:EF:F4:A0:D7:22
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ce:64:86:dc:1e:70:7e:ec:ec:45:98:ec:86:b6:67:b5:c0:
ae:70:7d:eb:6d:82:81:21:4f:d6:03:05:af:36:77:af:6b:79:
d8:50:13:4a:4e:a7:5c:61:65:f1:bb:95:d5:cc:4f:34:2c:18:
a6:4f:b0:84:67:f6:cb:db:63:7d:2d:60:15:03:1c:ec:59:1b:
30:f1:60:4e:86:94:ac:b1:09:f8:f0:ba:d0:1f:f1:9d:5a:a2:
b8:85:a6:43:28:3d:89:04:dc:a2:97:e2:cb:24:f1:0d:3b:3e:
3b:c0:6b:a1:75:ae:23:f1:e9:bc:6a:20:56:34:d0:11:c8:ea:
86:21:c6:28:3c:f4:f1:12:82:01:dc:ea:4c:c8:3e:2a:22:d6:
c9:ef:e9:8b:61:29:3b:2a:92:cf:ca:0e:95:1f:70:5f:96:29:
36:8f:b8:77:77:c5:2a:f6:b2:6b:65:aa:a1:92:be:e3:fd:5b:
38:30:91:28:81:35:8c:1e:9c:3d:78:c2:55:32:0f:01:4a:28:
78:a7:7d:de:70:bb:40:1a:57:04:64:5a:7f:98:6d:3d:76:ea:
7e:18:03:cd:14:c1:4e:e6:74:ee:af:e6:9a:4b:33:ac:b7:5e:
12:12:f2:8b:c9:a3:66:b7:7e:1f:20:79:a3:94:ce:03:42:5d:
be:ea:a0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:54:54 2026 by rpki-client