Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: emOd8KJp5iib2g8rwwtD/5b2yUt2aUpeVvu2iRQC5OI=
Subject key identifier: 23:6A:83:68:DA:1C:85:6D:EC:14:0E:E0:B7:0D:6F:38:DF:CC:F8:51
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 019E30DFFEECED6D9EA1D4AD158131E7376B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 0DD4
Signing time: Sat 16 May 2026 13:00:46 +0000
Manifest this update: Sat 16 May 2026 13:00:46 +0000
Manifest next update: Sun 17 May 2026 13:00:46 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: cjdObX9oHXRYAr7ygtdJeOvr6GOMcwuHzAkZ8AsKiBU=)
2: bEo8_8O2mw7PwZ1Q1MJJqc3Br9c.roa (hash: J6cPpgVeMRsfnWXOAjdK3KoD47LW/HrK99BGJHxHOac=)
3: mwL6ugxhwkwsvxWzk5gpM438ER0.roa (hash: MzMEcGzrb78MmWAPB5Ny/yePKvNxTfYRGwcwpRrll8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:df:fe:ec:ed:6d:9e:a1:d4:ad:15:81:31:e7:37:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: May 16 13:00:46 2026 GMT
Not After : May 17 13:00:46 2026 GMT
Subject: CN=236a8368da1c856dec140ee0b70d6f38dfccf851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ac:1d:3e:d8:20:aa:2a:a7:6d:fd:f6:f1:1b:
4d:87:80:e2:e3:b8:0d:c6:b7:6e:de:1b:e0:13:cc:
78:fc:f0:ca:bf:b6:c7:b0:f4:d4:00:c1:ec:2e:48:
20:b1:28:86:97:f7:39:3e:f4:bd:6c:26:96:25:71:
bf:a9:b1:68:92:a2:d8:7f:2b:91:6d:3b:6b:ae:2a:
f4:a0:a7:a6:ed:00:d3:e2:e7:c8:5c:0b:2d:d4:5a:
d4:b7:9a:29:17:af:e1:8b:01:83:f0:2d:80:26:b9:
85:3d:9f:d3:88:cd:f7:a8:c7:43:34:71:bb:92:9c:
9c:26:5d:27:54:ed:a3:85:00:cb:63:bf:7f:1f:3f:
42:8c:34:ca:c0:f4:02:9b:d2:ce:1b:de:66:48:95:
e9:27:c5:46:6f:7f:01:d3:54:fd:e3:8e:53:2c:fb:
c5:e7:44:7c:aa:ef:ab:f2:69:29:04:d9:a2:56:b3:
a4:fa:de:2e:db:66:cf:7e:34:6c:5c:a4:c3:c3:76:
15:e0:65:dd:a9:fe:99:60:43:13:ee:cf:2d:42:36:
db:67:26:cd:cf:1f:59:56:83:5d:ad:82:d0:ef:8b:
cf:72:00:83:50:a7:34:f3:7d:f1:ef:33:ef:a7:67:
c1:d3:44:58:67:36:b2:c4:6e:44:c5:80:93:07:6e:
f8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6A:83:68:DA:1C:85:6D:EC:14:0E:E0:B7:0D:6F:38:DF:CC:F8:51
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:37:4a:8d:43:67:2c:ae:cd:a1:22:6d:e6:71:c4:8b:a5:24:
58:60:1f:7b:f0:e7:d6:2f:8c:24:85:41:a3:6e:a8:e0:f1:35:
cc:e1:65:9b:35:3c:dd:b7:ed:c2:b7:7b:df:ae:ca:34:18:92:
a6:4e:37:6c:8f:26:eb:2a:c8:bb:d4:2d:8b:50:93:bd:d8:19:
6e:70:70:4a:af:06:5e:ed:5b:4d:5e:c7:77:9f:47:81:93:87:
6f:ef:7f:e5:af:fa:24:04:9f:34:85:e9:62:36:04:ff:cd:9d:
94:b7:ad:39:60:04:57:d1:74:8f:85:7b:c1:70:2b:29:eb:4a:
54:49:93:61:37:a8:b8:50:7c:81:3f:f7:6c:67:7b:6f:7b:9a:
eb:bb:f5:80:28:bb:41:4f:e6:5f:0e:59:35:56:70:8b:96:09:
20:46:d6:62:24:4a:4f:f4:bd:e4:26:42:19:8e:a8:76:81:58:
3c:45:e9:1a:16:94:a0:ec:7d:48:68:21:de:9c:ce:25:22:98:
21:75:0d:78:4d:87:e2:f4:6f:1e:0a:6f:c8:d9:03:f4:0b:84:
4f:9c:69:fa:bf:a5:23:5c:55:79:9b:19:e0:b7:fc:0c:b5:5f:
c5:26:60:1a:dc:eb:f9:0e:f8:09:3f:30:10:e8:30:39:49:9b:
74:0d:9d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:35:35 2026 by rpki-client