Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: NVdkOBtw32/0EMCuxUDJdcVNhOMpDOftobz5ReKHuHU=
Subject key identifier: 80:86:6A:97:5D:0C:9F:30:4D:D5:53:7F:EB:C9:A9:EA:99:7A:DD:39
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 019D98BD2776C9BBEED0BBB36A06F57A2FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 00:00:26 +0000
Manifest this update: Fri 17 Apr 2026 00:00:26 +0000
Manifest next update: Sat 18 Apr 2026 00:00:26 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: nCh/uOMY9hxJZzjcV2tBwzdBJZ4scTiSb6MNfIG7dIQ=)
2: k-u4T0e4tVorBoGy6nf5Gw5YRNs.roa (hash: rWH/QqNZxriq26jdgQuCLH1AphEv+lZpQduBEGoklCM=)
3: oCDLp44KeSMJvVZp5T2IShxlL4o.roa (hash: OLzEYYayae+FmqrETQJHCGxfQyGvHodRSRrVJfyY0No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:27:76:c9:bb:ee:d0:bb:b3:6a:06:f5:7a:2f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Apr 17 00:00:26 2026 GMT
Not After : Apr 18 00:00:26 2026 GMT
Subject: CN=80866a975d0c9f304dd5537febc9a9ea997add39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:03:ca:75:78:be:c5:5d:aa:d4:29:f0:42:78:
b2:1c:bb:7d:f2:98:9c:1a:75:3c:aa:ed:41:40:f8:
60:a3:8c:26:0b:c2:80:7a:0b:b6:90:98:d6:4b:49:
db:55:3a:37:3e:c1:64:84:f4:ab:48:b5:fe:eb:3c:
9c:2b:19:ad:72:76:57:b6:5f:0a:0e:f9:27:33:34:
40:eb:d2:5f:33:4c:dd:c5:a8:27:ba:d4:90:a1:d0:
6b:de:cc:d7:f1:2e:17:52:57:6b:6f:4b:87:7c:eb:
53:08:f1:7d:f9:8c:33:27:14:54:58:c0:de:90:6e:
6a:dc:7f:ab:ae:52:7f:71:77:72:3c:6d:22:39:c1:
f8:ea:97:dc:d2:38:6a:a4:d0:16:0f:b1:e8:f8:7a:
96:87:7b:92:f2:f0:d1:e6:35:37:57:8d:40:83:f2:
05:94:28:2b:82:53:d5:da:f2:4c:f6:41:8e:9e:08:
23:2c:de:c1:71:0f:5a:55:64:74:86:4b:f0:18:e6:
6d:de:96:ea:01:9e:0f:74:24:1c:4f:00:2a:c0:1c:
9e:65:85:fe:24:51:0e:09:c7:b1:df:3b:fb:87:80:
6e:57:90:2b:66:b7:9b:e6:10:ac:9b:58:1c:70:47:
3f:77:b6:21:c6:5b:d5:90:ff:b5:6b:ef:9d:60:dc:
62:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:86:6A:97:5D:0C:9F:30:4D:D5:53:7F:EB:C9:A9:EA:99:7A:DD:39
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:13:dc:77:a2:f0:20:c0:cd:9f:32:8f:ab:ea:31:bf:aa:6a:
56:51:b7:e6:b9:32:03:e3:26:2c:4b:07:2e:3a:d0:37:a1:1d:
a3:a5:28:00:62:fb:85:28:5d:12:8d:5b:79:85:5a:04:ed:2e:
b6:40:16:5e:dc:94:e0:7f:26:33:64:be:20:60:3d:a6:d8:56:
66:13:0b:94:d1:b5:24:4e:23:f3:10:ee:27:6f:3f:a3:a4:1a:
6c:bf:33:08:e0:c0:b7:c6:29:63:75:8d:2e:11:7c:e6:f7:7f:
04:0c:74:60:9e:c0:b8:5c:f6:46:fe:09:ee:cf:5b:18:48:2c:
0f:fb:a4:96:80:57:ed:cc:d5:07:8e:2b:c9:67:14:2e:ae:8c:
e3:18:b4:ac:3c:c6:7f:72:11:05:05:54:71:ee:48:6e:b4:49:
27:95:c0:42:bd:d9:ed:45:48:8c:a7:2b:70:dc:1e:eb:23:52:
35:11:2b:2b:d9:c6:e2:d8:d9:8f:5b:0c:91:7f:90:2a:a7:28:
3c:25:6f:10:a1:c7:d5:6f:a7:a6:64:4a:39:a3:57:83:22:13:
be:83:7c:ce:eb:96:22:ee:34:f6:c2:87:63:60:01:1b:bd:f0:
4c:aa:7c:70:4e:90:6c:a8:cc:80:90:2f:f8:2d:06:c2:31:3e:
a0:2a:e3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:14 2026 by rpki-client