Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: xKEzIv05Pgi73VouVbm3lmPnrbexAi/iYMp/ubKG3N4=
Subject key identifier: 28:65:DE:91:02:44:88:CB:11:07:0B:B2:2F:EC:56:6F:92:0E:60:36
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 019CEC6F6186336FAE5F076697554C636FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 0D2C
Signing time: Sat 14 Mar 2026 13:00:48 +0000
Manifest this update: Sat 14 Mar 2026 13:00:48 +0000
Manifest next update: Sun 15 Mar 2026 13:00:48 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: IfyjfkmS7UhcTqIq/D1k73p9nCAZ75pwKNwqQQLb1GA=)
2: bEo8_8O2mw7PwZ1Q1MJJqc3Br9c.roa (hash: J6cPpgVeMRsfnWXOAjdK3KoD47LW/HrK99BGJHxHOac=)
3: mwL6ugxhwkwsvxWzk5gpM438ER0.roa (hash: MzMEcGzrb78MmWAPB5Ny/yePKvNxTfYRGwcwpRrll8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:6f:61:86:33:6f:ae:5f:07:66:97:55:4c:63:6f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Mar 14 13:00:48 2026 GMT
Not After : Mar 15 13:00:48 2026 GMT
Subject: CN=2865de91024488cb11070bb22fec566f920e6036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:35:5a:77:27:a1:aa:65:ee:7b:38:44:e0:
53:3d:a9:92:54:fb:5d:63:0f:52:95:94:b6:1e:ab:
a5:43:d9:7d:44:b9:2f:78:8e:08:29:75:17:13:55:
c3:ae:df:63:11:f6:09:b9:f5:22:86:ce:61:8d:63:
a3:f7:f0:56:22:77:19:c2:27:e7:c4:e3:7e:ec:be:
a3:95:1e:23:18:0b:c1:2d:a9:b1:38:4f:30:ec:01:
9c:27:02:8d:b0:a6:de:ee:a6:e2:67:d7:d4:c5:6f:
a7:e5:48:9a:38:40:e1:4b:ac:20:be:16:70:a5:e8:
34:94:2a:98:13:3c:de:d9:5e:dc:b3:2e:1b:52:13:
e4:91:96:c8:b3:0e:d9:6e:78:71:63:30:2e:08:7f:
39:af:77:b8:51:f0:cd:b9:d0:31:0f:4f:cf:6a:92:
da:6e:3b:74:0a:95:cb:a7:d1:62:21:c5:d3:f2:a9:
af:55:b5:97:28:8a:f9:49:80:44:91:0f:0f:97:04:
4d:51:51:c5:b5:cf:a9:2c:b2:88:67:2e:79:7c:d9:
81:cc:a7:8f:11:68:a6:6c:0a:7d:eb:d2:4f:d9:2d:
23:8e:25:0c:c3:96:8d:74:b2:f6:02:30:f9:0a:84:
7b:b0:44:32:bd:d9:e1:47:24:0a:d1:09:c9:91:18:
ad:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:65:DE:91:02:44:88:CB:11:07:0B:B2:2F:EC:56:6F:92:0E:60:36
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c9:15:81:95:a7:cc:29:59:63:b0:69:0d:39:d5:70:a2:48:
1a:62:3f:e3:2d:4c:39:d2:fb:1d:52:5f:64:96:3b:80:a0:04:
0d:b3:d9:72:fb:b4:69:69:29:3a:8b:8e:63:75:bf:be:de:13:
fe:c6:4a:13:1c:43:c4:e7:db:d6:2d:9f:1d:b9:ff:80:c2:6a:
cd:ea:c3:7c:28:1c:f6:5f:53:e4:da:11:62:8c:3c:bf:f7:94:
48:38:f5:17:76:22:bf:69:18:4e:b2:1e:da:30:01:0e:a3:dd:
64:02:cc:0d:83:f6:f1:13:f5:a0:93:02:2b:8e:a1:ea:f9:bc:
33:1c:de:15:75:16:a5:3b:67:7d:92:36:76:2e:77:cd:d5:7e:
37:85:f0:45:db:e2:51:28:9e:30:01:85:52:bb:4f:d2:ca:21:
9e:51:25:b2:e5:af:fb:8b:db:91:d6:c8:10:7e:aa:fa:c0:96:
af:57:d4:df:41:45:f4:02:91:be:7a:96:8e:9d:6c:e6:b6:db:
50:7f:fb:fe:c4:86:9c:c9:26:db:2b:db:31:16:f5:a9:15:a1:
3e:b2:45:3b:46:6a:a1:18:12:e3:78:fb:21:27:11:fa:26:71:
3e:d5:4a:0a:be:bd:3c:8e:04:5a:00:c0:28:c8:b9:9f:80:e5:
3f:b9:ff:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:13:41 2026 by rpki-client