Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
File: BpML6MTKaQDu2y8yYNXdeFBXASk.mft (raw, json)
Hash identifier: MZ6to5XYdSbCE0FtDWtKRdEv/jydf59R22wjfEZ06vM=
Subject key identifier: B8:25:A9:F6:AE:3F:DD:81:B8:8B:77:90:D0:7D:02:AE:4F:39:5B:D4
Authority key identifier: 06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
Certificate issuer: /CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Certificate serial: 01A0C6D7DB06DB80F7B15E1188D6303790AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
Manifest number: 09A2
Signing time: Tue 22 Sep 2026 02:00:30 +0000
Manifest this update: Tue 22 Sep 2026 02:00:30 +0000
Manifest next update: Wed 23 Sep 2026 02:00:30 +0000
Files and hashes: 1: BpML6MTKaQDu2y8yYNXdeFBXASk.crl (hash: 9HYMybeC0k4+z9ayw/Pr9/nKL1gKqjf66QyfIe49d6o=)
2: ku9q2SmWWLLsi5oorWHKlVO8WIQ.roa (hash: uUP+mrwnQZ97afnlVETUlY/refVnxXobEQJ98a1LiOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:db:06:db:80:f7:b1:5e:11:88:d6:30:37:90:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Validity
Not Before: Sep 22 02:00:30 2026 GMT
Not After : Sep 23 02:00:30 2026 GMT
Subject: CN=b825a9f6ae3fdd81b88b7790d07d02ae4f395bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9b:6b:93:e3:a8:69:7e:cc:fa:0c:4f:c8:39:
9d:af:32:2e:20:1d:da:f9:16:ff:d9:ee:76:16:60:
72:bb:44:25:ee:ab:ec:eb:71:70:42:0f:a5:bc:6b:
03:93:10:f3:a3:69:8c:af:4d:c6:11:46:93:e6:9f:
2e:d5:7c:89:f9:d9:0c:08:c1:82:db:1d:db:87:31:
f6:39:af:51:29:51:e3:d6:4a:d0:1d:5d:2c:0d:6c:
8d:9b:49:e4:92:70:d0:eb:db:55:9b:83:5a:ea:50:
b8:b0:3b:95:b3:85:17:62:c1:e7:38:90:fe:be:d4:
2d:0c:f3:63:98:f6:a9:13:43:e4:eb:79:79:6a:47:
52:bd:6a:85:ea:30:8b:dd:b2:5c:3f:7a:ed:42:4c:
c0:39:34:c3:3e:32:db:3f:d2:b1:ee:92:1a:78:54:
02:65:8e:66:26:8c:75:eb:f5:cf:25:56:7d:83:a1:
55:16:b8:5d:81:07:e1:a4:d9:69:a7:2e:a2:54:29:
a8:89:a5:3b:a0:c8:f1:9b:a5:ec:bc:1b:7a:de:59:
58:28:5a:1b:fd:49:98:46:b4:c3:5a:c2:2c:06:87:
d2:f8:d8:f9:57:ca:79:95:51:b7:1e:0c:06:fc:07:
24:1a:a5:9f:a6:2a:3e:c2:b7:de:7d:b3:51:f6:33:
6f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:25:A9:F6:AE:3F:DD:81:B8:8B:77:90:D0:7D:02:AE:4F:39:5B:D4
X509v3 Authority Key Identifier:
keyid:06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c4:39:92:82:f7:1b:65:d3:a0:96:8b:9c:c2:ab:af:34:dd:
b4:f5:2a:84:e1:db:5f:77:3e:f3:16:e7:86:61:0c:0b:a6:62:
ea:87:e7:f3:1f:42:f3:98:44:a9:da:21:3a:1e:d6:e0:f5:9f:
3f:c4:9b:b7:da:80:9b:d3:6c:76:5b:11:72:af:4e:8b:0e:4b:
02:21:14:46:c9:73:f1:4f:bb:64:62:ae:6b:d1:9c:7b:f5:b8:
e2:7a:15:e5:2f:10:2a:74:1b:4e:2c:d4:38:91:b1:51:70:5c:
d0:b5:71:b6:73:51:9b:26:a2:89:77:92:b2:0b:29:86:9e:29:
bb:e0:f5:8e:9d:e3:88:af:c9:1a:f1:2d:bc:c7:66:80:95:f3:
be:ea:9c:0b:76:04:fb:82:a0:34:d4:1c:23:0c:a2:24:53:c6:
ab:1f:cd:75:83:80:d0:e8:aa:d0:11:dd:28:8c:1f:94:8e:7f:
e4:b7:2b:9b:04:68:25:b1:cb:1f:dc:1a:d3:4c:80:ea:c1:f5:
fe:cf:2c:be:88:a8:06:bb:4a:bc:03:16:55:0c:07:9e:4b:1b:
5d:39:0e:a2:22:96:04:f9:e1:48:de:35:91:c4:95:a1:3e:ee:
1b:15:17:b9:9b:24:61:dc:5e:c1:b0:07:e2:67:1d:9e:f0:8f:
1b:ec:0c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:47:30 2026 by rpki-client