Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
File: BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json)
Hash identifier: wiBHvZG/4grP9evAS6mUoCGosN8vhq9AWi/3ymgIolI=
Subject key identifier: 98:42:91:0C:2E:12:D0:46:3B:C2:79:BB:2F:36:D7:42:26:9E:61:B4
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Certificate issuer: /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial: 01A1DF4C8997D268075AD31A58F4EB123BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 13:01:37 +0000
Manifest this update: Sun 15 Nov 2026 13:01:37 +0000
Manifest next update: Mon 16 Nov 2026 13:01:37 +0000
Files and hashes: 1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: uUL6jfar1jechUtFt5RJQrHrg4sADKViJfqGYooUG0E=)
2: I1mm66oM2FV4eaJVlqE4cO8L7zY.roa (hash: ukmH8m+pY6kpoWVsiBBxCRnRwFuMJQWX3qtjANjdYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:89:97:d2:68:07:5a:d3:1a:58:f4:eb:12:3b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Validity
Not Before: Nov 15 13:01:37 2026 GMT
Not After : Nov 16 13:01:37 2026 GMT
Subject: CN=9842910c2e12d0463bc279bb2f36d742269e61b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8c:63:97:45:04:0d:11:e5:09:a5:28:f4:28:
03:d0:10:c2:81:cc:72:d6:e3:a8:92:a0:dc:71:15:
38:91:3a:a3:40:51:1e:e2:11:48:8e:c1:e3:42:ef:
77:73:53:94:fe:51:6f:2b:3b:b2:15:57:98:5d:d3:
05:59:e0:68:09:ae:98:dc:8c:f4:b1:0d:8b:2d:bd:
f1:b0:ac:a1:a0:36:ad:e9:f5:d4:b8:9b:8b:30:01:
3b:9d:41:16:cb:f2:89:cb:b2:37:2e:fc:c7:69:df:
42:0c:fb:96:56:f3:39:c0:63:36:6f:2e:fd:89:c3:
a3:eb:f7:09:b4:11:67:fc:85:da:86:3e:34:88:c0:
5a:fd:29:cf:a1:a2:e3:ff:a9:0c:89:a2:c6:d1:bc:
4e:22:66:d5:00:3f:87:3c:c1:cc:ec:55:08:8d:f3:
73:9a:3e:0b:89:a9:43:20:85:0e:84:ba:c8:33:0e:
df:24:40:ae:9a:af:ec:ce:2a:c9:07:97:2a:d9:f8:
5f:8e:28:7a:d1:95:d3:90:93:04:99:b5:cb:d4:0f:
3c:22:ff:b3:52:26:e4:da:01:9e:26:78:8c:f0:07:
2a:9d:af:c6:31:66:72:a0:c9:da:e9:27:58:a3:68:
3c:69:36:3a:e6:63:0a:ce:15:4e:6c:9b:1a:66:a6:
2d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:42:91:0C:2E:12:D0:46:3B:C2:79:BB:2F:36:D7:42:26:9E:61:B4
X509v3 Authority Key Identifier:
keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:38:3a:75:13:8d:0a:ce:b3:8a:f4:51:be:92:30:ae:21:c8:
87:52:b8:69:0a:f2:f8:fb:0a:22:96:22:7b:51:52:83:19:eb:
b1:a6:5f:27:d2:56:68:3c:66:52:d5:0e:0c:2a:70:f7:fd:34:
4d:64:23:cc:ec:a6:3b:71:2b:fe:0e:32:4d:b8:30:05:41:6c:
38:75:aa:6c:05:d6:f5:81:aa:1f:36:79:64:61:fa:eb:1f:d2:
32:de:98:a8:94:5c:4c:cb:2b:3a:0b:73:68:d7:c2:b2:aa:b6:
89:64:c7:10:68:ab:1e:67:d6:db:d5:ff:b0:fa:7a:33:fb:de:
88:8e:e3:d5:69:e2:8e:ec:a8:1f:7f:de:6e:37:ea:e2:06:b7:
0c:15:69:a6:8a:1f:67:61:39:33:ee:b5:74:04:1e:1d:61:c3:
0b:e5:72:2d:e7:77:0a:b9:74:d2:5d:cb:0d:02:0a:cd:3b:62:
45:11:83:8e:b4:8d:e7:b2:d8:68:cd:4e:0f:53:7c:30:09:2c:
d9:14:8c:c4:81:cd:5b:e6:64:ce:8f:d2:f5:34:51:fb:93:28:
38:bc:81:e7:59:e9:de:53:d9:5e:86:27:b7:6c:8d:fd:17:54:
3b:4a:c3:c3:5a:69:51:0c:93:e2:5a:62:1e:fa:81:8c:d0:1f:
c4:fa:17:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:24:59 2026 by rpki-client