Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: CPKpx1xrK0j8Qy9BQYwuh69jBLwFgTeiuRkhG2v7dtA=
Subject key identifier: 13:E9:1B:72:99:29:CC:45:91:A3:42:E5:13:4D:D9:88:06:55:11:57
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 019FA9E30A0A8DD76E651A9C9ECE337C99C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 18:00:56 +0000
Manifest this update: Tue 28 Jul 2026 18:00:56 +0000
Manifest next update: Wed 29 Jul 2026 18:00:56 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: gOrbCQ4inQeVq6W/OZP8A+HxCdhPjJArMLuWQ0QjgvU=)
2: k-u4T0e4tVorBoGy6nf5Gw5YRNs.roa (hash: rWH/QqNZxriq26jdgQuCLH1AphEv+lZpQduBEGoklCM=)
3: oCDLp44KeSMJvVZp5T2IShxlL4o.roa (hash: OLzEYYayae+FmqrETQJHCGxfQyGvHodRSRrVJfyY0No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:0a:0a:8d:d7:6e:65:1a:9c:9e:ce:33:7c:99:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Jul 28 18:00:56 2026 GMT
Not After : Jul 29 18:00:56 2026 GMT
Subject: CN=13e91b729929cc4591a342e5134dd98806551157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:42:23:93:5d:7e:a1:0b:5a:4a:bb:7c:91:4f:
4d:07:70:25:7d:f5:60:6e:02:32:49:ba:44:4a:bf:
56:43:1f:c7:52:37:32:bc:0d:8e:22:00:06:f3:81:
10:30:1a:f5:99:d7:bb:ed:de:6a:48:49:a9:d7:3d:
7f:a6:af:8d:1f:16:cf:0a:a8:19:3e:d1:5e:8a:5a:
6d:4c:4a:7e:e6:2d:d9:3e:33:48:c4:a4:28:4e:e3:
be:cf:e6:b4:86:df:5b:f4:48:37:51:ee:9f:70:63:
ce:ef:12:94:01:b8:95:62:fb:30:89:09:e4:04:a4:
6d:87:e9:5b:5f:13:e0:7a:e5:9e:e9:d3:ed:1a:51:
03:7e:e1:67:11:78:7f:57:b4:8e:98:cf:b3:b8:be:
bb:b4:9e:61:4d:0a:f1:6b:01:e4:5d:be:8c:f1:d7:
37:2a:f6:d0:b7:1c:2a:e7:c7:ad:dd:96:ac:d7:6d:
96:9c:78:b0:1a:b0:67:21:78:b3:78:77:87:c6:a4:
08:e8:ee:c2:a3:90:fc:a5:46:8d:2f:68:bc:be:31:
7a:25:15:1e:6c:f4:ff:52:a6:9f:14:a4:f1:99:35:
4f:f9:fc:1a:ed:ca:aa:db:2a:f2:a5:ab:7b:ea:e5:
6b:d0:71:91:32:11:1d:22:e1:9e:8c:bf:d5:1f:38:
07:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E9:1B:72:99:29:CC:45:91:A3:42:E5:13:4D:D9:88:06:55:11:57
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:a4:04:f8:ac:57:c6:7a:29:43:a8:93:ce:c3:89:b6:e5:c2:
e2:d9:66:02:9b:21:74:b1:64:96:85:b6:9e:32:9c:fc:35:9e:
8e:62:cd:56:a9:56:c3:a0:b6:6d:f9:af:e1:1e:8c:15:da:b4:
b8:f6:27:4f:00:94:bf:cb:da:48:e1:99:6a:b4:31:71:06:78:
91:50:aa:cf:16:ac:a9:32:6b:36:b6:79:ad:fe:9b:44:bc:fa:
fd:10:4d:95:d7:29:ba:0b:a0:d6:8f:9e:4d:b9:46:47:bf:aa:
0e:a6:71:f5:68:01:c3:74:28:c7:61:d1:f4:dc:12:1b:a5:1a:
f6:4f:6d:20:03:d1:1f:58:59:99:09:e7:2f:28:86:2b:16:df:
12:91:6b:97:26:5e:97:fc:e4:75:60:ac:93:76:2d:91:00:d7:
95:6a:a8:7e:43:41:bd:20:e5:a7:ca:c3:3b:b5:13:f5:43:9c:
6b:7d:6f:d9:2b:b5:cc:fe:5b:e1:1e:2b:7e:ed:97:5d:e5:06:
57:92:5d:93:ad:ab:be:96:20:f1:ef:5e:f4:8b:b2:e4:5a:84:
b3:d9:6d:df:35:75:c4:48:f8:68:0a:0f:42:ba:fc:4a:c5:65:
73:81:9e:ba:c0:d7:3d:36:4a:d2:06:31:d7:de:0b:65:e4:16:
e0:3b:8c:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4woKjdduZRqcns4zfJnDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTMxMmJhNjVlOTBiZjhhY2Y0ZjU3MzI0YTMwYzBiNmNi
ZDFjMmYwHhcNMjYwNzI4MTgwMDU2WhcNMjYwNzI5MTgwMDU2WjAzMTEwLwYDVQQD
EygxM2U5MWI3Mjk5MjljYzQ1OTFhMzQyZTUxMzRkZDk4ODA2NTUxMTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30Ijk11+oQtaSrt8kU9NB3AlffVg
bgIySbpESr9WQx/HUjcyvA2OIgAG84EQMBr1mde77d5qSEmp1z1/pq+NHxbPCqgZ
PtFeilptTEp+5i3ZPjNIxKQoTuO+z+a0ht9b9Eg3Ue6fcGPO7xKUAbiVYvswiQnk
BKRth+lbXxPgeuWe6dPtGlEDfuFnEXh/V7SOmM+zuL67tJ5hTQrxawHkXb6M8dc3
KvbQtxwq58et3Zas122WnHiwGrBnIXizeHeHxqQI6O7Co5D8pUaNL2i8vjF6JRUe
bPT/UqafFKTxmTVP+fwa7cqq2yrypat76uVr0HGRMhEdIuGejL/VHzgHoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPpG3KZKcxFkaNC5RNN2YgGVRFXMB8GA1UdIwQY
MBaAFASjErpl6Qv4rPT1cySjDAtsvRwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lM2NmNzUtNDBiOS00MDM0LTg0Yjkt
Y2NjYmMyYWU2OTQ4LzEvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lM2NmNzUtNDBiOS00MDM0LTg0YjktY2NjYmMyYWU2OTQ4
LzEvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwqQE+KxX
xnopQ6iTzsOJtuXC4tlmApshdLFkloW2njKc/DWejmLNVqlWw6C2bfmv4R6MFdq0
uPYnTwCUv8vaSOGZarQxcQZ4kVCqzxasqTJrNrZ5rf6bRLz6/RBNldcpugug1o+e
TblGR7+qDqZx9WgBw3Qox2HR9NwSG6Ua9k9tIAPRH1hZmQnnLyiGKxbfEpFrlyZe
l/zkdWCsk3YtkQDXlWqofkNBvSDlp8rDO7UT9UOca31v2Su1zP5b4R4rfu2XXeUG
V5Jdk62rvpYg8e9e9Iuy5FqEs9lt3zV1xEj4aAoPQrr8SsVlc4GeusDXPTZK0gYx
194LZeQW4DuMaQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:07:43 2026 by rpki-client