Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: wMjGHeU/Xx7a4bouNQa/rUFhn9YOYrCXH8wFP2Xk+Mo=
Subject key identifier: 5D:5F:74:55:F6:E4:24:CD:1F:66:CA:DA:C3:E7:6A:7A:A4:C0:67:77
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 01A0005C5B7FDEE399053B24974C7E9EBDA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 0EC4
Signing time: Fri 14 Aug 2026 13:00:47 +0000
Manifest this update: Fri 14 Aug 2026 13:00:47 +0000
Manifest next update: Sat 15 Aug 2026 13:00:47 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: Rr1P47TzJs/HxexhtQSN+ZdmhnNkFgzr2SbRjkzkBw0=)
2: bEo8_8O2mw7PwZ1Q1MJJqc3Br9c.roa (hash: J6cPpgVeMRsfnWXOAjdK3KoD47LW/HrK99BGJHxHOac=)
3: mwL6ugxhwkwsvxWzk5gpM438ER0.roa (hash: MzMEcGzrb78MmWAPB5Ny/yePKvNxTfYRGwcwpRrll8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:5b:7f:de:e3:99:05:3b:24:97:4c:7e:9e:bd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Aug 14 13:00:47 2026 GMT
Not After : Aug 15 13:00:47 2026 GMT
Subject: CN=5d5f7455f6e424cd1f66cadac3e76a7aa4c06777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:37:0f:42:eb:10:86:e1:d2:eb:31:67:93:9c:
7a:b6:59:ea:07:5d:a9:08:1e:ec:49:d3:44:03:e4:
79:f7:1a:16:2e:fe:2b:82:fa:3d:da:aa:1d:13:9b:
db:06:9e:25:62:9a:ee:c6:25:61:66:ae:d5:76:46:
10:a4:cd:d9:9e:e8:ab:82:b9:2b:c8:ed:c9:a0:07:
7a:8a:70:fc:fd:ad:05:4b:ab:b2:e9:ee:53:73:8d:
f4:70:fb:a3:64:9d:d2:3d:22:ef:f9:f7:d8:3f:70:
38:90:3b:6c:5c:eb:b1:35:4a:01:83:6d:35:ec:71:
89:c3:6d:13:c2:e7:e0:83:69:1e:f1:b2:d2:e9:ea:
ec:5a:aa:78:1e:57:97:5d:f3:de:f3:42:8f:f3:41:
e5:fe:c7:b2:0b:f1:5b:b6:90:f7:48:34:04:3b:ed:
2a:40:18:9e:56:64:f8:96:cb:db:fb:36:38:08:7e:
0c:fe:66:c1:5c:e4:45:dc:19:30:73:11:dd:0e:6c:
0d:b8:bf:a7:fd:c7:25:da:52:80:ba:4f:d6:26:96:
8b:a3:8b:00:c5:29:03:d2:b7:66:b1:47:8b:b0:cb:
6c:fa:18:30:75:0b:24:30:c7:27:a4:4a:5c:b0:03:
4f:32:0a:48:fb:c2:b5:3c:f0:ab:41:ab:2e:e8:0d:
a4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5F:74:55:F6:E4:24:CD:1F:66:CA:DA:C3:E7:6A:7A:A4:C0:67:77
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8e:ef:29:b9:b9:a9:fb:48:a8:ef:7c:04:00:9e:ab:87:e1:
54:3e:1c:95:1d:83:8e:19:2c:54:5e:9f:5e:de:8a:a9:81:2d:
8c:35:8e:e1:53:c1:3e:ba:8e:f5:3d:13:66:d7:70:b4:d0:53:
f0:7f:27:1d:f2:81:2a:f4:21:59:4f:89:e7:aa:57:ed:c1:4d:
0c:68:b0:34:4b:71:66:76:86:6f:fd:32:a1:36:d7:2f:c2:c3:
38:1b:b6:d6:3b:d7:b1:b0:07:cf:21:60:fa:e7:27:36:19:de:
69:3b:53:83:18:b4:e5:d3:26:66:79:b0:81:65:b4:11:03:08:
ed:ff:39:63:75:73:af:08:2b:9e:b1:8a:b1:23:d1:b1:24:c2:
3f:e0:f1:fb:dd:1a:0e:e2:47:4b:93:c2:16:5b:f5:cb:ea:48:
fe:91:bf:16:18:f6:0b:f5:3e:ab:4e:ed:b4:c0:41:d4:2c:cb:
3f:c4:ce:92:a7:3c:16:52:ca:66:a5:19:85:b3:74:4c:d1:20:
b4:f1:11:c5:7e:c4:d3:a8:bc:17:b1:b3:c3:fa:69:f5:75:06:
f0:99:52:32:28:0a:4e:3f:aa:ab:bd:21:5a:98:d1:e6:8a:2f:
8f:08:23:a1:59:af:0c:f7:da:ed:31:f4:0f:ce:f7:6c:38:3c:
c6:59:9d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:21:24 2026 by rpki-client