
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
File: BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json)
Hash identifier: Jw68s5f+Uadbz5yt9j24T2BdriAB2nN5GukzMAh4JWw=
Subject key identifier: 07:3C:76:36:79:A1:11:DD:EA:AA:85:39:84:A2:7E:6D:BB:91:6F:D6
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Certificate issuer: /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial: 019EBDDA39FF16C4E577FB71927BDA351645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
Manifest number: 195C
Signing time: Fri 12 Jun 2026 22:00:55 +0000
Manifest this update: Fri 12 Jun 2026 22:00:55 +0000
Manifest next update: Sat 13 Jun 2026 22:00:55 +0000
Files and hashes: 1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: EDuzcjMvozpKEMYVfgsx7s9hVuQXw43yGmyEDEJ85es=)
2: I1mm66oM2FV4eaJVlqE4cO8L7zY.roa (hash: ukmH8m+pY6kpoWVsiBBxCRnRwFuMJQWX3qtjANjdYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:39:ff:16:c4:e5:77:fb:71:92:7b:da:35:16:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Validity
Not Before: Jun 12 22:00:55 2026 GMT
Not After : Jun 13 22:00:55 2026 GMT
Subject: CN=073c763679a111ddeaaa853984a27e6dbb916fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3b:f9:e7:7f:fd:c4:f7:9d:94:42:de:d0:72:
25:63:d7:1d:bd:5c:29:17:c2:05:ce:61:58:03:5a:
69:a1:5f:41:fb:84:65:b1:08:3f:cb:b3:a9:9d:d9:
5b:3a:af:ce:b1:ca:df:92:57:35:6b:30:b4:7a:17:
47:00:c2:11:4f:04:16:7d:fb:12:66:12:bf:d7:2f:
b9:69:b7:1d:4d:3f:2f:e2:50:19:1e:cd:37:f9:da:
10:20:5e:15:46:fa:49:f5:2c:32:a0:4a:28:82:7f:
6d:77:18:57:98:90:61:87:dd:88:fa:26:15:01:b3:
20:62:e1:ac:ac:75:0b:92:34:23:1e:5a:f2:86:22:
b7:e0:1c:d3:68:22:98:c6:00:30:8d:be:20:6f:a6:
79:7d:a8:b1:98:26:67:e6:7f:d1:d5:37:09:62:0f:
28:89:a8:62:55:dc:5a:86:bb:21:bc:93:75:3a:49:
93:19:cf:56:3c:9c:d5:9a:d4:d9:db:d6:55:99:11:
e3:39:03:a0:80:70:12:c7:15:17:90:c8:b2:92:f2:
bc:0f:62:32:a4:82:d9:75:d5:83:3a:6f:f0:43:70:
62:50:79:c6:01:86:96:2d:55:74:1c:90:5d:a1:a6:
de:6a:88:3c:49:84:ee:cf:f6:be:3b:1d:f0:7b:8c:
c5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3C:76:36:79:A1:11:DD:EA:AA:85:39:84:A2:7E:6D:BB:91:6F:D6
X509v3 Authority Key Identifier:
keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:85:a0:ec:47:b4:df:2d:42:85:d2:1e:d7:a2:ee:39:16:5f:
f8:9e:e0:31:48:b6:23:42:8c:d8:82:1a:c4:3b:ed:6b:9e:f6:
da:fb:4d:c5:c3:7c:f2:68:94:2b:df:65:3b:ae:0b:89:cb:94:
19:cf:a7:93:e1:b8:a9:7c:46:95:fd:7c:d1:b6:10:5b:0d:68:
31:c1:68:ea:5b:bb:24:95:ba:e7:0e:25:5e:e5:2d:86:85:68:
3e:fc:39:03:c7:63:0a:f9:62:39:37:5e:08:30:da:d5:c9:f9:
20:68:87:47:ef:04:39:c6:fe:7f:e6:90:4a:0f:c1:f7:86:bd:
36:d4:d2:75:63:04:bb:7b:78:8b:3a:3d:83:6f:2b:e2:59:1a:
c6:d5:f6:2a:e7:5f:51:b4:03:88:50:b7:6a:46:20:e6:43:c5:
13:e5:39:e8:27:83:77:78:09:06:5b:e3:15:f1:e0:ac:d3:86:
81:50:ae:6b:a0:7a:f7:e6:2b:1a:e2:53:6e:dd:6e:e0:73:b0:
9b:8e:bd:a8:01:f0:19:21:be:15:be:8f:6f:48:2a:40:b3:fd:
d0:67:56:1e:43:aa:2e:cd:01:ee:7e:18:11:2b:ef:ee:96:47:
68:7b:a7:10:95:b0:64:cb:59:3a:e4:ee:6f:4a:44:38:98:84:
d3:0b:dc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:01 2026 by rpki-client