Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: BwDL4hDWR6BXnzW1jPe+gfLzYOGKuBorEOgp0z0syog=
Subject key identifier: 2B:8F:67:60:4F:61:07:54:52:1B:A4:5B:C4:BF:22:0E:6E:C7:EE:D2
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 019FA8CFC0548B868756BF2AF6E23684ABED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 131B
Signing time: Tue 28 Jul 2026 13:00:15 +0000
Manifest this update: Tue 28 Jul 2026 13:00:15 +0000
Manifest next update: Wed 29 Jul 2026 13:00:15 +0000
Files and hashes: 1: 2LHgN_7jeOEmEp49TXPoGseMKE0.roa (hash: u3Ghkv3e1+pxpIVGrLETupfGggN3KGBiZERj/lx/mTg=)
2: BAmnsqa1Y3XwAhWIBdg_rlIiwQQ.roa (hash: CmXIqWWi6a32pBcCEhmjtOH3aPdFD9JpfLL82hDwVT8=)
3: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: 4wZSs4Bb3kmSBRGU0AZxK44BrbjZLl5Li1agvCd5nDM=)
4: D0UZ3ILhNCgnCNWzBa3mcwr0Pno.roa (hash: 7TfPe1F/LyooXh4AcQzOEBSmrk6QV7hbqByjjSb/LoE=)
5: irmbqhZvbLwDaadAvsOuO73Fv60.roa (hash: slmG+791rR4vbKBt2GX9vt+pbLQ300ChM1656gXpasA=)
6: uF20gDelBhqD8H_SXBvP9wdoYdM.roa (hash: 5kyc2PB4MyCO3xQLXylbA12fI8U7MFXjthZystH1uCM=)
7: xNxFBI381uPH5ZExRW-GfLm6Rfg.roa (hash: vZwid8rlWfhpqTNd90KDkyYvVw1rv2g5tIEub9g+uLI=)
8: yuZ207ZJKtZoW9jfm_MLQlQ6DH0.roa (hash: YnYml4UkB8mK1DtGV4RcykMNaOP/4CH8hUy+LRFYkt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:c0:54:8b:86:87:56:bf:2a:f6:e2:36:84:ab:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Jul 28 13:00:15 2026 GMT
Not After : Jul 29 13:00:15 2026 GMT
Subject: CN=2b8f67604f610754521ba45bc4bf220e6ec7eed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:21:ba:2c:64:1b:db:17:01:c7:18:0f:73:
b3:aa:73:e2:16:ae:bb:bf:a4:b4:20:dd:36:7c:7e:
9d:8d:f9:60:44:30:fb:27:a6:55:88:5e:ae:d6:2b:
cc:c4:7f:6f:7c:7c:8c:f4:85:86:fe:d9:be:cd:88:
b5:2d:f0:ff:a5:ea:76:12:ca:70:6d:b8:f1:ba:27:
69:20:54:13:47:fd:d7:56:1d:17:65:fc:d2:26:a2:
e8:35:11:91:09:1e:25:9b:26:f8:a8:64:57:cf:40:
0d:60:25:3e:86:e5:e5:f8:8d:d3:be:a8:93:7d:6d:
84:56:8f:83:a1:07:f9:6a:10:c8:7d:a7:c2:ca:89:
8b:2e:b3:21:6e:4a:d6:34:1a:53:fa:db:4c:cb:12:
b0:7a:9b:6a:de:87:7f:d1:3b:cc:86:34:b6:74:29:
96:24:42:77:97:76:55:1f:71:b1:c2:f6:30:5d:df:
c9:02:a7:d9:00:3a:87:59:b8:e9:09:cf:54:af:af:
b4:27:5a:3b:d0:ba:45:14:3c:cd:17:78:fd:9a:f5:
86:9e:3b:11:c1:46:7d:26:5a:20:c2:47:ff:4a:e5:
f9:32:51:a8:33:a9:39:25:b0:5f:87:1d:5b:86:3b:
f8:52:19:bd:55:e0:22:39:ea:49:b8:7a:31:89:8e:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8F:67:60:4F:61:07:54:52:1B:A4:5B:C4:BF:22:0E:6E:C7:EE:D2
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0f:66:d4:28:e2:9e:48:3b:6c:dc:ec:02:4a:85:2d:fc:1f:
f2:2f:5a:12:59:60:a5:ea:7b:06:2a:44:f6:94:85:50:5e:49:
58:af:71:4f:31:d6:3f:f4:60:39:02:3e:66:37:3d:16:dc:0d:
ef:b6:11:95:ba:b2:e6:91:d6:23:d5:59:e4:8d:e8:88:00:19:
be:ed:ce:4b:d3:78:26:2e:68:8d:84:7a:f7:7d:97:0a:49:ff:
65:f8:c7:0a:a8:a3:8a:c9:33:a7:ee:0b:5c:88:0f:47:3f:54:
7e:0f:c9:2c:56:2e:c5:b4:68:6c:de:ee:ab:7a:11:7e:ed:64:
e4:70:15:78:93:8d:b3:16:76:d3:1a:3c:52:88:4f:db:bb:de:
f0:77:3c:57:f9:f4:34:dd:c2:f9:14:a5:00:d4:5b:3d:76:cb:
0f:67:92:30:c7:34:ae:57:05:3c:99:06:59:8e:ef:5a:45:f3:
6f:53:95:3b:b5:49:c6:29:6f:78:da:90:10:a2:3b:bb:b5:fa:
82:3e:cd:af:7a:88:10:b7:d9:ac:78:7c:ae:2f:b6:28:9f:76:
60:8a:39:6f:78:35:a4:30:35:6d:b9:1d:b0:35:86:47:2e:5d:
cb:39:4f:36:6d:7a:d6:8d:ae:88:db:a2:ba:88:78:81:5e:6b:
e3:ff:c5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:53:19 2026 by rpki-client