Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
File: BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json)
Hash identifier: HSX5zVbZqWnjzQpOMR6JTr7bYFzLlHCKhSwfc0cz9kE=
Subject key identifier: CE:2F:51:C3:73:1E:DC:13:74:5D:60:A7:8C:36:89:A7:C4:84:78:B6
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Certificate issuer: /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial: 019FA9757ED2D3D4125629E0BF38F6B41B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 16:01:17 +0000
Manifest this update: Tue 28 Jul 2026 16:01:17 +0000
Manifest next update: Wed 29 Jul 2026 16:01:17 +0000
Files and hashes: 1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: RUzco63jt4jVJZoZrHs1LeQlvoPoDTfOMNIQxUTT/1Q=)
2: I1mm66oM2FV4eaJVlqE4cO8L7zY.roa (hash: ukmH8m+pY6kpoWVsiBBxCRnRwFuMJQWX3qtjANjdYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:7e:d2:d3:d4:12:56:29:e0:bf:38:f6:b4:1b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Validity
Not Before: Jul 28 16:01:17 2026 GMT
Not After : Jul 29 16:01:17 2026 GMT
Subject: CN=ce2f51c3731edc13745d60a78c3689a7c48478b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a8:e0:ef:ec:e4:df:35:57:a1:e9:15:79:d9:
61:84:c6:e6:c0:dd:d7:74:27:07:0c:43:8d:da:fd:
dc:bd:ab:31:db:53:fb:00:3e:e1:68:2b:6f:e4:26:
83:ce:1e:79:27:d1:1f:6d:96:26:8d:9d:5a:6f:a2:
d5:ad:18:6c:bb:c6:ae:95:97:fb:5d:02:10:03:82:
5b:62:12:05:1d:d8:99:ee:57:9f:26:ec:a5:e6:53:
aa:14:d8:4d:b5:18:9b:69:66:db:2d:24:bd:16:2e:
c0:af:07:bd:1c:02:3f:d3:fe:1f:38:41:6b:5d:b3:
ed:ed:51:e5:c7:6a:a6:6f:33:98:d6:eb:94:9e:32:
c8:74:3f:a0:07:b7:3d:eb:8b:9c:ea:2f:48:ff:8b:
67:09:42:64:36:b4:df:d8:98:56:cf:4c:10:bb:ed:
7a:69:59:ee:cc:b4:5f:7e:55:41:79:bc:57:77:2d:
38:9b:90:77:fe:f3:54:54:15:f0:48:83:3b:05:fa:
89:0b:fb:97:af:be:a8:ba:e1:b3:c1:99:8f:7c:49:
14:6c:4f:d2:11:21:41:3e:00:61:ad:b5:2b:97:1d:
99:7c:ae:3a:61:69:db:ca:ec:84:1d:87:1e:ee:e2:
00:54:0c:3a:4e:e5:71:08:0d:83:9d:be:23:31:e8:
88:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2F:51:C3:73:1E:DC:13:74:5D:60:A7:8C:36:89:A7:C4:84:78:B6
X509v3 Authority Key Identifier:
keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:28:2b:52:af:df:84:0d:64:45:73:2e:ba:bc:a8:73:0b:e4:
f3:8c:e8:ab:74:6b:4a:cd:17:32:41:a4:b4:18:51:ab:ad:9a:
9f:89:96:2d:59:6e:6c:a2:0e:00:da:7e:8d:9f:2c:d6:ab:fc:
e6:87:dc:58:f4:8a:7b:2f:12:ce:67:b6:07:de:79:11:ff:9d:
c5:04:99:6a:cb:83:2d:f5:67:7a:d9:7a:44:df:00:cc:6c:01:
7b:4f:46:23:9f:46:8d:39:3c:a1:6a:88:ad:d4:ee:4b:51:b9:
14:20:89:b7:7f:2e:72:5e:af:08:44:2a:53:bf:25:50:3c:76:
bd:d7:f0:92:99:bd:35:2f:46:73:40:77:e6:bf:f1:84:40:dd:
83:00:97:73:9d:6e:d8:60:39:eb:8a:f7:0f:20:35:71:5c:a3:
b6:eb:2d:13:81:24:3b:2a:31:93:1f:f9:f0:b1:11:ab:c8:70:
6f:a1:10:57:62:41:5e:44:eb:e0:0c:d8:f5:37:c4:4c:a4:37:
e9:c1:54:2d:63:cc:dd:c5:94:0d:8c:d7:7f:71:2b:38:d8:6c:
df:72:f2:43:94:d7:84:76:b9:77:17:0e:d4:65:75:50:c1:40:
56:7e:48:6a:ad:68:76:82:25:3d:9a:5c:3d:11:df:03:ae:fe:
6f:94:83:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:25 2026 by rpki-client