Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: AP0eVa1++Pf4qLUp/GHvGk9ioJNLId/vLnG6SFC6NbE=
Subject key identifier: B0:6A:FE:4F:0F:2B:C0:2D:77:D0:7E:82:5C:CC:A2:A4:97:6C:3F:F6
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 019EC0360334014C0253B26006C17D4FEAE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 09:00:25 +0000
Manifest this update: Sat 13 Jun 2026 09:00:25 +0000
Manifest next update: Sun 14 Jun 2026 09:00:25 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: dMQebLvnYAhQ1hA1Nlj/8dsRoGaaUEERTAyMt1dUTQ8=)
2: k-u4T0e4tVorBoGy6nf5Gw5YRNs.roa (hash: rWH/QqNZxriq26jdgQuCLH1AphEv+lZpQduBEGoklCM=)
3: oCDLp44KeSMJvVZp5T2IShxlL4o.roa (hash: OLzEYYayae+FmqrETQJHCGxfQyGvHodRSRrVJfyY0No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:03:34:01:4c:02:53:b2:60:06:c1:7d:4f:ea:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Jun 13 09:00:25 2026 GMT
Not After : Jun 14 09:00:25 2026 GMT
Subject: CN=b06afe4f0f2bc02d77d07e825ccca2a4976c3ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:9a:7b:7e:ac:69:b5:54:a5:b4:d6:d6:63:
8e:b6:cb:18:98:5f:5d:14:7b:20:53:52:81:17:c3:
84:8b:fc:0a:10:f6:5d:c8:ab:ca:6f:6e:34:97:2e:
04:27:71:cf:6b:17:27:a5:77:ac:48:12:d0:b2:92:
42:20:14:f8:ca:98:e3:9c:66:c4:e5:4b:5e:f1:3b:
dc:a9:b5:dd:f2:6a:66:bc:74:c1:13:41:a4:a6:63:
1c:6c:de:9d:58:1f:13:da:c4:da:65:d2:51:ef:0b:
b5:4f:e9:71:18:c1:e8:d1:92:5a:61:ab:27:b2:61:
f4:ec:38:18:0c:ce:a7:86:37:ef:18:eb:17:6b:ae:
6c:e8:49:e3:11:ea:fb:c9:32:d6:33:c7:4a:74:09:
0a:2c:2d:54:ad:98:c2:95:37:6d:07:2f:91:14:66:
56:0d:7e:84:5b:23:bd:91:b7:e7:3d:63:f2:af:0a:
4f:d3:80:7a:9c:a1:d2:32:3f:ce:b2:e5:fd:8a:21:
cf:84:5f:3e:61:50:68:4c:14:c4:cd:8c:20:ab:63:
6f:8d:d8:f4:e0:e4:90:8f:7d:65:13:ef:2e:88:48:
e6:90:c9:b9:c7:c6:61:c8:4b:e1:8e:c5:1f:f3:c9:
38:67:d4:a0:4a:9e:9e:4b:09:69:26:f4:9d:c2:01:
a7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6A:FE:4F:0F:2B:C0:2D:77:D0:7E:82:5C:CC:A2:A4:97:6C:3F:F6
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ac:e5:a9:b5:d7:f9:d8:0e:b0:03:87:8a:41:33:4f:38:64:
2d:0d:f4:1b:7c:da:29:6c:f1:23:22:57:f9:9f:df:a8:9f:3c:
9e:93:4c:f9:d3:3e:07:0b:49:d1:34:38:95:e1:73:ec:bd:36:
39:0d:99:b3:d3:fb:77:34:86:f9:54:22:63:bd:ad:ff:e7:6c:
6a:eb:82:af:71:5d:a0:37:b4:d3:27:c5:91:59:c9:5b:73:ee:
64:e5:4f:63:0e:2c:ee:9f:8b:4f:55:45:8c:8f:a3:ff:28:2c:
60:b1:a1:e6:4b:d9:f7:70:15:09:6b:56:ea:45:63:ef:4d:78:
f5:b4:22:f9:19:e9:6c:ab:52:63:ea:9f:07:19:35:7e:93:d3:
5d:5b:4a:14:83:3a:ea:50:51:23:60:0b:53:d8:a2:4d:72:d7:
b4:e1:ed:fe:73:be:c8:80:61:fc:ab:24:83:ca:61:06:a7:8d:
bd:40:0a:45:39:33:63:30:b1:24:82:d0:c6:f9:1a:d4:a9:fe:
38:fc:7c:3a:c0:2a:28:ed:0a:d5:57:ae:f8:58:bd:4e:9c:44:
87:0f:b5:59:8a:04:9d:06:87:14:6b:9f:52:ae:26:96:10:17:
87:0a:73:a7:d7:9c:9c:53:94:c0:0b:7b:30:a3:03:4c:45:51:
74:ad:17:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ANgM0AUwCU7JgBsF9T+rmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTMxMmJhNjVlOTBiZjhhY2Y0ZjU3MzI0YTMwYzBiNmNi
ZDFjMmYwHhcNMjYwNjEzMDkwMDI1WhcNMjYwNjE0MDkwMDI1WjAzMTEwLwYDVQQD
EyhiMDZhZmU0ZjBmMmJjMDJkNzdkMDdlODI1Y2NjYTJhNDk3NmMzZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstOae36sabVUpbTW1mOOtssYmF9d
FHsgU1KBF8OEi/wKEPZdyKvKb240ly4EJ3HPaxcnpXesSBLQspJCIBT4ypjjnGbE
5Ute8TvcqbXd8mpmvHTBE0GkpmMcbN6dWB8T2sTaZdJR7wu1T+lxGMHo0ZJaYasn
smH07DgYDM6nhjfvGOsXa65s6EnjEer7yTLWM8dKdAkKLC1UrZjClTdtBy+RFGZW
DX6EWyO9kbfnPWPyrwpP04B6nKHSMj/OsuX9iiHPhF8+YVBoTBTEzYwgq2Nvjdj0
4OSQj31lE+8uiEjmkMm5x8ZhyEvhjsUf88k4Z9SgSp6eSwlpJvSdwgGnFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBq/k8PK8Atd9B+glzMoqSXbD/2MB8GA1UdIwQY
MBaAFASjErpl6Qv4rPT1cySjDAtsvRwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lM2NmNzUtNDBiOS00MDM0LTg0Yjkt
Y2NjYmMyYWU2OTQ4LzEvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lM2NmNzUtNDBiOS00MDM0LTg0YjktY2NjYmMyYWU2OTQ4
LzEvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKzlqbXX
+dgOsAOHikEzTzhkLQ30G3zaKWzxIyJX+Z/fqJ88npNM+dM+BwtJ0TQ4leFz7L02
OQ2Zs9P7dzSG+VQiY72t/+dsauuCr3FdoDe00yfFkVnJW3PuZOVPYw4s7p+LT1VF
jI+j/ygsYLGh5kvZ93AVCWtW6kVj70149bQi+RnpbKtSY+qfBxk1fpPTXVtKFIM6
6lBRI2ALU9iiTXLXtOHt/nO+yIBh/Kskg8phBqeNvUAKRTkzYzCxJILQxvka1Kn+
OPx8OsAqKO0K1Veu+Fi9TpxEhw+1WYoEnQaHFGufUq4mlhAXhwpzp9ecnFOUwAt7
MKMDTEVRdK0XXA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:15:46 2026 by rpki-client