Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
File: BkwamGxZM6O5EIToo_8IBm05jhk.mft (raw, json)
Hash identifier: k9dAUmqCXRVQ5Q24aUmiHsypEdotEqt8ATyrj7Au4Ys=
Subject key identifier: CA:FD:72:89:E9:49:D9:7D:CC:75:41:2E:AA:64:5C:CD:0C:23:46:AC
Authority key identifier: 06:4C:1A:98:6C:59:33:A3:B9:10:84:E8:A3:FF:08:06:6D:39:8E:19
Certificate issuer: /CN=064c1a986c5933a3b91084e8a3ff08066d398e19
Certificate serial: 01A151084F0E59ED6CCF54F175C98308B0FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
Manifest number: 0EBE
Signing time: Sun 18 Oct 2026 22:01:01 +0000
Manifest this update: Sun 18 Oct 2026 22:01:01 +0000
Manifest next update: Mon 19 Oct 2026 22:01:01 +0000
Files and hashes: 1: BkwamGxZM6O5EIToo_8IBm05jhk.crl (hash: DbkF2j32Hz3tt6hGkstMHSwUmwxL4kROPL+vvfSj3/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:08:4f:0e:59:ed:6c:cf:54:f1:75:c9:83:08:b0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064c1a986c5933a3b91084e8a3ff08066d398e19
Validity
Not Before: Oct 18 22:01:01 2026 GMT
Not After : Oct 19 22:01:01 2026 GMT
Subject: CN=cafd7289e949d97dcc75412eaa645ccd0c2346ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:cc:38:b8:04:ff:eb:42:3b:d7:a4:a3:65:
c6:2a:f4:b2:e8:e7:49:96:3f:5f:47:05:ad:70:d8:
b9:ac:2d:4d:f2:a8:b4:1f:34:97:1a:c9:90:21:af:
d4:f9:ad:12:2e:71:a2:01:cd:b0:5a:00:fd:ba:0e:
14:83:72:97:58:9a:48:93:f7:73:ec:4d:09:b7:ce:
d0:3e:da:6e:6b:29:30:a7:f3:d1:13:06:cd:4f:b3:
1c:e9:af:05:56:0d:35:cf:e9:48:b7:dd:50:0d:54:
8a:77:50:ea:c6:4d:40:23:e3:a6:16:ef:31:aa:4c:
2d:3f:2a:90:19:83:e4:86:f3:88:d6:2b:cd:58:bb:
ba:20:8f:54:41:52:bb:0d:0d:11:0c:92:46:42:d9:
ec:1b:23:1c:0c:1d:b5:ca:78:6b:18:ad:0e:a4:a5:
6f:84:b2:ba:7e:c4:81:ab:da:e9:0b:5a:ab:b5:f4:
bc:2a:cc:fc:30:39:d6:c1:41:6d:b5:ab:1f:43:77:
a4:a1:fe:83:73:a9:3c:b8:18:10:3b:0d:5b:a0:c8:
dc:d4:8f:7d:04:e6:09:83:38:e3:9f:34:f7:08:82:
2a:46:4f:a6:b6:ff:f9:93:41:b0:05:76:8d:27:5a:
b0:6d:8f:9a:9e:33:72:b7:00:a9:97:d7:4b:06:3b:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FD:72:89:E9:49:D9:7D:CC:75:41:2E:AA:64:5C:CD:0C:23:46:AC
X509v3 Authority Key Identifier:
keyid:06:4C:1A:98:6C:59:33:A3:B9:10:84:E8:A3:FF:08:06:6D:39:8E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a7:bc:b9:e4:80:4f:6f:42:5e:82:a2:b2:98:c9:43:f4:cd:
4f:5e:6f:7f:7a:a5:00:66:07:ee:9a:f7:17:6f:34:78:19:8e:
b1:f2:28:bc:17:3d:89:40:a5:e9:b7:9d:95:2d:3f:88:f7:85:
5c:2c:47:72:d3:40:c9:76:b4:e3:35:4c:08:1f:77:93:48:69:
9b:22:96:30:28:ea:28:ec:04:76:fc:17:a3:58:b1:55:f0:24:
1a:ff:a4:23:c4:d4:4a:ee:4b:64:8c:5a:50:5d:77:27:f5:4b:
6f:12:77:1e:5a:d1:68:1a:31:10:4d:95:30:7b:e4:53:5b:43:
71:7e:9a:30:a6:96:bd:6d:47:fc:b4:ae:77:26:00:9e:2a:bb:
e3:2b:65:39:42:d8:9f:20:7c:c3:85:a7:ce:7a:18:21:70:9e:
73:88:61:6e:74:b6:fa:65:da:9b:eb:ad:f6:ee:60:f6:75:3e:
11:52:26:53:4e:cf:fe:a8:a9:25:42:66:f1:c9:b9:1f:5c:57:
21:fc:aa:f6:50:0d:95:b2:f8:98:39:1b:30:36:11:ed:5b:29:
db:07:22:c7:d2:3f:98:4e:e6:aa:10:5f:c2:52:c4:c2:3e:d1:
b6:a4:5c:32:3a:58:a8:74:6b:01:48:98:51:a2:a2:3f:c8:d3:
71:36:fc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:06:53 2026 by rpki-client