Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: 90TWwzwgYe7w9WIyTHnw1JZ3r7A6WyS9BFbNw+t2wtI=
Subject key identifier: 92:D6:B1:FF:A7:C9:D7:B6:03:47:F4:AB:1A:62:C5:B0:F3:CE:70:E4
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 01A0C3D768ED72FB62EDBDC6B3639E681868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 12:01:09 +0000
Manifest this update: Mon 21 Sep 2026 12:01:09 +0000
Manifest next update: Tue 22 Sep 2026 12:01:09 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: 0IhMGz9PYobWxIWKvoxb3UNtLRa+UnR+b/F1mhy8ncQ=)
2: k-u4T0e4tVorBoGy6nf5Gw5YRNs.roa (hash: rWH/QqNZxriq26jdgQuCLH1AphEv+lZpQduBEGoklCM=)
3: oCDLp44KeSMJvVZp5T2IShxlL4o.roa (hash: OLzEYYayae+FmqrETQJHCGxfQyGvHodRSRrVJfyY0No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:68:ed:72:fb:62:ed:bd:c6:b3:63:9e:68:18:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Sep 21 12:01:09 2026 GMT
Not After : Sep 22 12:01:09 2026 GMT
Subject: CN=92d6b1ffa7c9d7b60347f4ab1a62c5b0f3ce70e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b5:64:ea:7b:21:68:0a:0e:e3:ca:8d:6f:b7:
2e:64:b8:94:82:9b:40:d6:6a:14:b7:26:65:ff:cd:
d0:78:2c:ba:6e:d4:84:75:14:94:ee:bd:e8:74:36:
d5:91:9f:76:0a:b8:6a:61:12:ef:39:39:88:c9:14:
7c:e0:8c:a9:28:ec:a0:1e:24:4e:ea:6d:a8:ab:35:
9d:05:9e:2c:03:12:ee:39:69:ce:60:6d:6b:c4:eb:
09:df:17:3a:27:9b:d3:62:69:a5:40:5e:c5:8e:eb:
42:b3:57:25:2d:e4:57:08:4a:d3:60:9c:7d:bf:1b:
4f:e3:b7:3f:cb:34:cc:c8:d7:72:58:b9:fc:32:79:
7c:2e:1f:ff:ef:d5:d6:6c:a7:e4:29:be:d2:55:d2:
d6:58:74:09:57:90:40:7d:aa:b6:e5:f9:1e:c1:83:
0f:55:6c:e2:c3:ad:01:d7:8f:ac:f6:bd:e5:af:18:
32:59:ef:bf:7a:5a:7e:0d:10:3c:c3:84:c4:01:66:
c5:7e:04:3b:e5:1b:f4:cb:73:46:07:03:7a:dd:0c:
62:11:c9:83:dd:27:32:41:69:0d:e9:fc:e8:e0:0d:
25:f8:f7:b1:07:c7:93:b6:0d:ca:2c:81:b3:6e:af:
1e:f8:9a:56:c5:c3:d8:52:ad:45:d5:97:4c:68:6f:
90:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D6:B1:FF:A7:C9:D7:B6:03:47:F4:AB:1A:62:C5:B0:F3:CE:70:E4
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d8:b5:0b:21:e1:59:49:ea:3f:33:c5:ce:34:6f:bd:b5:97:
9d:b9:4e:b9:b8:b4:45:36:0e:ea:d9:48:07:ed:57:15:0c:eb:
6e:2d:64:ad:7f:9b:42:83:93:20:9c:a7:49:2a:b4:ce:08:90:
2d:85:44:49:54:61:3b:df:95:98:bf:34:e5:25:db:7f:3c:0a:
58:db:cb:63:23:5d:ef:3c:90:ad:c6:3d:98:31:fb:79:e3:b9:
2b:5a:bc:cc:a2:0a:9f:33:b9:61:98:3d:8f:93:6d:93:cf:f4:
4b:fd:4a:4a:96:b3:82:db:14:f3:79:56:22:90:93:97:56:9b:
04:e2:7a:3a:38:3b:e6:32:2c:69:df:87:e8:9f:ac:47:8c:29:
f1:9f:a6:3f:a1:13:8a:83:06:0b:1e:85:3a:8f:91:3d:c9:04:
94:0e:ad:aa:28:9c:a8:16:92:7b:8e:1c:ae:40:aa:43:9a:eb:
b2:91:8b:04:b4:fa:f6:eb:0f:e4:42:7d:06:16:a4:0e:a4:6d:
14:5e:d1:4a:85:20:bc:70:7d:a2:6d:6f:28:11:49:f1:88:66:
37:26:bd:3f:e4:0b:43:00:82:b3:7b:68:33:67:22:bc:ae:a4:
3c:43:4f:5c:03:9e:91:49:41:f7:bc:13:13:2c:51:5f:5b:a3:
12:d1:d2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:17:10 2026 by rpki-client