Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: pZrZKv4PI34wDEpQMmZfCNiXFbuGAcG0uHIEjE9qPL0=
Subject key identifier: 19:81:A7:7C:8E:CF:C0:C6:7B:CE:3A:B3:74:F4:35:9A:B5:B5:CF:06
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 019CAD228213FD1E5BF566C3B53E43911D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 06:00:45 +0000
Manifest this update: Mon 02 Mar 2026 06:00:45 +0000
Manifest next update: Tue 03 Mar 2026 06:00:45 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: 7etIututmVElQS4OtNHrkh56oMPi9tn79l9x0wNzwNc=)
2: k-u4T0e4tVorBoGy6nf5Gw5YRNs.roa (hash: rWH/QqNZxriq26jdgQuCLH1AphEv+lZpQduBEGoklCM=)
3: oCDLp44KeSMJvVZp5T2IShxlL4o.roa (hash: OLzEYYayae+FmqrETQJHCGxfQyGvHodRSRrVJfyY0No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:82:13:fd:1e:5b:f5:66:c3:b5:3e:43:91:1d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Mar 2 06:00:45 2026 GMT
Not After : Mar 3 06:00:45 2026 GMT
Subject: CN=1981a77c8ecfc0c67bce3ab374f4359ab5b5cf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5c:31:86:a0:21:ee:56:4a:01:75:51:db:26:
93:4c:71:f9:e5:86:d2:23:97:ae:d7:74:a5:be:8d:
e0:8e:ea:5f:1c:c4:33:4f:da:28:b0:ab:07:10:4e:
70:1e:50:6a:6a:12:e9:09:83:e0:1e:61:70:72:f9:
bb:7e:c9:02:13:b4:da:2c:c1:db:e0:32:a9:93:0e:
52:91:e4:06:cd:8d:2e:33:9f:ad:94:57:17:71:10:
3e:df:8b:12:ab:91:0e:06:7d:05:bc:82:fd:1c:96:
f0:14:21:45:ab:be:89:a4:15:2e:52:86:6e:33:b2:
6d:0b:ce:31:8c:d8:59:1f:85:fd:7b:90:c0:13:16:
50:5f:94:f1:95:e1:b6:7e:2e:e2:69:1f:ba:ea:f6:
43:79:fb:02:f2:d5:2c:a3:b2:84:56:ca:b4:f9:37:
99:b8:3e:83:d6:7a:23:38:91:e2:a7:e7:7b:a2:4e:
6b:8c:f7:a9:d2:f2:b7:28:41:b9:bc:06:fe:93:40:
10:ea:a1:a6:c2:20:69:50:8c:d7:44:aa:f1:0b:b2:
5a:c9:7d:64:3c:a5:0b:c7:48:45:c1:b1:ca:5f:15:
74:13:51:e7:40:fd:65:ab:5f:59:10:c3:ed:87:94:
d7:d5:9a:26:6d:ac:18:b5:79:3b:1f:89:ed:aa:3f:
2a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:81:A7:7C:8E:CF:C0:C6:7B:CE:3A:B3:74:F4:35:9A:B5:B5:CF:06
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:5d:38:00:fb:a9:52:c7:2b:0e:6f:6d:33:03:b1:ec:fe:e4:
c8:d6:d1:83:aa:26:ae:de:f6:75:d0:13:8c:18:01:27:0e:b6:
b3:b4:78:4f:2a:03:b2:1d:28:60:b2:cc:0e:d4:c4:b6:ac:21:
bf:fa:67:a0:50:1c:88:f5:a8:60:71:a4:b4:7e:4c:ce:0e:5b:
ed:fa:cd:0b:38:a6:f8:d4:6a:21:9e:da:00:b2:a3:33:8d:00:
8c:a3:c0:00:2a:03:c0:ab:07:0f:91:fb:10:d4:f7:21:ab:58:
9f:62:fc:c4:f7:25:80:a3:af:7b:46:c8:ea:03:42:b8:81:02:
bb:f2:8f:2a:01:50:d9:87:67:c7:66:6d:80:3b:28:21:c9:26:
8d:b1:5d:09:58:c0:0f:e2:47:99:9f:1d:11:ce:a6:92:bb:8f:
a8:27:2e:3f:67:b8:61:df:a7:3f:9b:21:9f:28:be:15:32:ab:
bc:8e:9f:e8:65:10:ee:02:b7:f8:a1:a5:c1:38:9d:9f:ed:ad:
11:2a:9a:46:bd:6c:a7:6f:f8:83:bb:f5:ce:5c:38:d0:cc:72:
27:e5:e2:6e:b2:2a:a4:75:47:b6:f8:c8:4a:09:25:b2:ab:c9:
22:63:ef:c2:f2:4f:91:2b:c4:b6:b5:77:c1:93:1f:b0:05:da:
62:a9:11:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:42 2026 by rpki-client