Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: /wtbnvPAenxNYjx/T6yxZca90CDzKTJ+NJEY06R0pt0=
Subject key identifier: 4E:C9:89:BB:96:0C:8D:34:21:5E:79:4B:BD:14:03:BB:B7:B8:D8:25
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 019F189E230CD911A59DD9258DC4B57B8083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 0E4C
Signing time: Tue 30 Jun 2026 13:00:44 +0000
Manifest this update: Tue 30 Jun 2026 13:00:44 +0000
Manifest next update: Wed 01 Jul 2026 13:00:44 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: GcxLsNmtcARYLAVQZRHqedpAQfJGHDve2ffUOTpcGzg=)
2: bEo8_8O2mw7PwZ1Q1MJJqc3Br9c.roa (hash: J6cPpgVeMRsfnWXOAjdK3KoD47LW/HrK99BGJHxHOac=)
3: mwL6ugxhwkwsvxWzk5gpM438ER0.roa (hash: MzMEcGzrb78MmWAPB5Ny/yePKvNxTfYRGwcwpRrll8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:23:0c:d9:11:a5:9d:d9:25:8d:c4:b5:7b:80:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Jun 30 13:00:44 2026 GMT
Not After : Jul 1 13:00:44 2026 GMT
Subject: CN=4ec989bb960c8d34215e794bbd1403bbb7b8d825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4f:e3:c4:0c:06:93:1a:aa:4a:e6:be:87:ac:
5d:a8:03:44:6f:e6:b6:b0:a2:d1:fc:5c:ee:ec:c5:
f2:95:77:64:81:ea:da:68:8d:84:42:5e:e4:1f:da:
1c:9c:a9:73:9a:3a:9a:dc:f3:07:e8:d5:c6:9b:7e:
21:0a:df:97:44:d5:6c:e7:19:7c:db:46:0e:93:ff:
7b:96:39:c4:77:5a:ac:19:2d:f4:17:41:a8:a2:d3:
87:92:51:2b:bd:64:1c:88:7b:b2:95:8a:18:0c:c9:
38:e1:73:cd:62:10:8c:f8:3d:1c:55:fe:c5:87:a8:
89:45:bc:d8:66:0c:93:75:bb:69:ad:97:b5:7b:d9:
22:51:33:32:c6:b3:96:1e:de:37:a7:fc:ff:a9:e8:
3f:34:96:83:b4:d0:4c:71:bd:b2:05:46:c9:1b:e8:
2c:e1:2b:10:95:bd:ec:84:74:8d:01:74:cc:a4:74:
af:62:66:ae:83:3b:ef:58:b5:60:ba:ef:36:f0:4b:
ef:fe:60:16:bf:75:17:89:dd:3c:8f:9b:92:00:ca:
22:a5:97:40:2f:23:2f:d7:22:42:92:2b:14:c5:e6:
64:81:eb:a8:c1:ba:8f:4b:b6:8d:2a:45:95:5e:4d:
0b:33:65:c8:e7:79:0e:a1:35:07:c7:63:c9:eb:b0:
ce:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C9:89:BB:96:0C:8D:34:21:5E:79:4B:BD:14:03:BB:B7:B8:D8:25
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d4:28:5e:4a:4f:3d:ed:81:ad:b0:fb:de:57:57:8d:78:54:
69:ca:01:e5:92:75:1f:0c:58:95:0e:e8:e7:26:c4:ee:9e:a9:
e1:d4:69:8e:f9:a4:9a:d1:76:3e:b2:b8:6a:5d:7d:62:5f:3c:
83:5e:1e:96:b3:fe:ea:85:29:7f:fe:aa:c5:f0:ae:54:a9:42:
36:00:2b:f1:42:e7:73:ce:06:ce:d9:16:92:41:ad:38:f0:ea:
1c:1a:34:55:84:ec:68:4a:b3:e8:00:c2:0d:07:7a:1b:5d:35:
44:88:d3:fa:41:01:9e:7c:d8:38:6f:68:9d:98:3e:08:95:79:
59:6c:b2:ff:83:3d:e8:59:ce:9f:8e:fa:d7:1d:3a:24:bc:8e:
b7:d9:3a:b7:20:b4:f5:87:51:35:16:a4:31:ec:f9:eb:d3:4e:
62:63:c0:c2:0b:3e:a0:60:73:f8:2b:21:8c:5f:2c:0f:5d:5c:
13:22:18:da:c9:e6:ee:00:c1:74:87:e3:9e:c3:2d:43:72:01:
ed:75:62:47:3f:6f:1f:ca:95:a7:29:57:a3:8a:63:5b:bc:cc:
10:c2:1d:96:45:6d:9b:82:f1:22:06:ad:65:46:cc:d4:ac:86:
4d:47:e7:de:dc:08:11:97:6e:72:9a:7a:f6:4e:8d:e6:67:c5:
7c:47:e5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:07:02 2026 by rpki-client