Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
File: BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json)
Hash identifier: qYcdvaFUVC/yRMQNyYQL+fKLeRtaMEdyrkpu5hxmh24=
Subject key identifier: 09:E5:E0:F6:64:EF:72:CF:B1:C7:E7:AB:97:C2:AE:19:F1:25:5B:E6
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Certificate issuer: /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial: 01A0C368B8D3E8D495825BA9CAA86912F257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 10:00:15 +0000
Manifest this update: Mon 21 Sep 2026 10:00:15 +0000
Manifest next update: Tue 22 Sep 2026 10:00:15 +0000
Files and hashes: 1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: BwEMQ6F9jvRyh6gFBPsf0HvanN6MEHkpHpJNqfBqVvs=)
2: I1mm66oM2FV4eaJVlqE4cO8L7zY.roa (hash: ukmH8m+pY6kpoWVsiBBxCRnRwFuMJQWX3qtjANjdYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:68:b8:d3:e8:d4:95:82:5b:a9:ca:a8:69:12:f2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Validity
Not Before: Sep 21 10:00:15 2026 GMT
Not After : Sep 22 10:00:15 2026 GMT
Subject: CN=09e5e0f664ef72cfb1c7e7ab97c2ae19f1255be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1c:44:92:a0:10:ae:43:ce:e3:4b:cd:6b:1c:
69:16:8a:54:bf:c7:06:de:03:b2:b2:ef:96:1b:a5:
a3:2a:1d:6a:f7:ba:6a:8e:fc:9d:16:b5:26:1c:23:
79:cc:14:d0:f5:d6:65:41:4c:97:22:fa:5d:04:21:
b4:5e:fe:04:f5:6a:46:20:d2:d8:a4:2b:be:79:00:
c6:e7:33:fc:86:12:28:fa:4e:69:a6:b0:24:03:30:
7d:f9:43:35:83:f6:9f:81:8b:ec:9b:3c:1a:1e:2b:
d9:cc:3b:d1:dc:d2:c3:75:54:7d:72:29:ec:1d:eb:
3d:5a:d7:bf:7d:5b:c4:8b:79:80:6d:ae:12:e0:6f:
1b:43:fe:01:30:35:64:77:54:9c:c2:e0:4b:8f:fa:
73:11:92:b5:bb:e6:df:bb:a3:7e:00:81:ff:f1:38:
fa:98:1a:bc:7c:83:ae:8d:3f:c2:f1:f6:c0:c6:83:
c0:c5:5e:b7:3a:3d:00:9f:a7:97:14:e6:56:44:ff:
9a:72:fb:84:5f:ee:06:59:50:b4:e6:35:f7:f8:5d:
42:78:c8:b0:ad:53:1b:e7:65:f6:ce:97:de:4e:0c:
7e:ce:16:52:bf:bb:d1:0c:bd:99:24:94:5b:14:6b:
e4:f0:ac:32:0a:94:03:60:c6:b8:58:83:3b:03:d4:
e4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E5:E0:F6:64:EF:72:CF:B1:C7:E7:AB:97:C2:AE:19:F1:25:5B:E6
X509v3 Authority Key Identifier:
keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:66:9e:9d:bc:c3:4f:35:33:e9:9c:ae:dd:10:f7:39:d7:38:
18:bc:d6:e9:15:16:8d:39:14:3b:ec:ba:c1:dd:0a:68:2c:51:
b2:99:5a:5b:84:32:77:65:dc:e6:3c:72:eb:34:a2:e6:9a:b7:
dd:1b:e2:36:03:ba:0c:3e:1a:cd:b5:14:2f:4f:31:82:bf:bc:
d2:23:dd:50:00:79:43:88:ac:de:d2:e8:6e:15:16:c4:8a:32:
d2:d1:7c:c5:d0:47:cc:93:07:ac:3f:67:48:ef:bf:67:2d:45:
57:1d:d9:0f:5b:e0:76:45:0b:9c:2d:6f:d9:10:3b:8f:28:84:
36:e6:13:69:63:59:61:4a:63:c7:18:95:3c:87:87:56:d3:b2:
99:a2:61:71:63:da:9e:3c:7c:e1:5f:3d:5b:d1:54:e3:b1:0a:
77:93:3d:c0:45:05:9b:55:2a:a8:9e:4c:78:7c:db:ae:f4:5a:
ad:d7:30:6f:23:3b:2d:fa:24:25:dc:92:f8:0c:85:62:5a:62:
c6:34:0a:51:86:90:9b:a7:24:b7:68:85:dd:8f:6b:5c:21:1f:
0a:2c:d6:ec:63:60:0e:92:7a:b5:62:3b:49:65:4a:8c:c9:eb:
33:6b:b0:0a:f2:42:0d:dd:7c:a4:ab:c8:22:32:b2:30:49:cd:
ed:9b:e7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:05:53 2026 by rpki-client