Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: xkFm9NQ4rcqmbCZi08qFmupdiJz4a4EpaKHGsFeISjU=
Subject key identifier: 9A:0D:D0:FC:84:D6:6E:3A:0B:39:B7:33:E1:A3:68:79:C0:06:5B:D3
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 019D99991BAB91BEDEC8A4A8794AB3F85FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 120A
Signing time: Fri 17 Apr 2026 04:00:41 +0000
Manifest this update: Fri 17 Apr 2026 04:00:41 +0000
Manifest next update: Sat 18 Apr 2026 04:00:41 +0000
Files and hashes: 1: 2LHgN_7jeOEmEp49TXPoGseMKE0.roa (hash: u3Ghkv3e1+pxpIVGrLETupfGggN3KGBiZERj/lx/mTg=)
2: BAmnsqa1Y3XwAhWIBdg_rlIiwQQ.roa (hash: CmXIqWWi6a32pBcCEhmjtOH3aPdFD9JpfLL82hDwVT8=)
3: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: VWAGwMq0Bi02ZECdKmlyT38aeg4HYdd1soC7bVFxQa4=)
4: D0UZ3ILhNCgnCNWzBa3mcwr0Pno.roa (hash: 7TfPe1F/LyooXh4AcQzOEBSmrk6QV7hbqByjjSb/LoE=)
5: irmbqhZvbLwDaadAvsOuO73Fv60.roa (hash: slmG+791rR4vbKBt2GX9vt+pbLQ300ChM1656gXpasA=)
6: uF20gDelBhqD8H_SXBvP9wdoYdM.roa (hash: 5kyc2PB4MyCO3xQLXylbA12fI8U7MFXjthZystH1uCM=)
7: xNxFBI381uPH5ZExRW-GfLm6Rfg.roa (hash: vZwid8rlWfhpqTNd90KDkyYvVw1rv2g5tIEub9g+uLI=)
8: yuZ207ZJKtZoW9jfm_MLQlQ6DH0.roa (hash: YnYml4UkB8mK1DtGV4RcykMNaOP/4CH8hUy+LRFYkt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:1b:ab:91:be:de:c8:a4:a8:79:4a:b3:f8:5f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Apr 17 04:00:41 2026 GMT
Not After : Apr 18 04:00:41 2026 GMT
Subject: CN=9a0dd0fc84d66e3a0b39b733e1a36879c0065bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:ab:a1:79:f1:8c:e2:93:94:be:ba:b6:84:
f3:6a:fc:92:11:65:73:b7:c6:84:09:26:5b:ca:3e:
15:5b:36:21:74:7b:36:78:86:d6:8f:13:6a:fe:0c:
29:50:bd:c8:aa:53:66:17:6e:21:b9:65:0b:3e:fc:
3c:f8:a5:22:30:cc:8f:61:e8:5c:17:64:fb:93:e7:
b1:47:fa:93:ff:4b:b0:64:53:50:f8:ba:fc:f4:a7:
7a:f6:c2:6e:f2:a4:76:89:c9:0c:c7:74:6e:78:61:
e5:ae:98:eb:97:27:ec:20:b5:dd:f8:bb:b3:2b:89:
b1:5d:be:09:ac:25:18:a0:53:f3:e8:31:86:3c:61:
1a:62:fc:cd:16:ab:22:26:27:cb:a7:4f:c3:b6:2d:
7e:ba:5b:87:bb:5f:7d:74:c4:05:44:84:a8:b3:0f:
e2:fd:bb:e1:00:43:fb:61:f9:56:e8:2f:c7:ba:e4:
b6:e3:6d:34:f5:c3:cd:b3:f7:1c:4f:01:72:00:cc:
1a:bd:c0:ce:4d:77:3c:bc:fc:f7:04:6a:d1:88:6b:
80:5f:18:e2:33:67:cc:48:04:e4:7b:c1:d6:bd:11:
5a:ea:17:8c:4b:db:48:2e:e5:55:0d:5b:06:b0:a7:
24:43:2c:86:47:11:88:15:69:58:1c:c0:9a:4f:75:
3f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0D:D0:FC:84:D6:6E:3A:0B:39:B7:33:E1:A3:68:79:C0:06:5B:D3
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:89:8d:41:9e:d8:fb:5f:ab:8e:48:4a:12:2f:9d:3a:76:b7:
15:22:76:00:01:7f:c9:22:c4:ba:53:4a:82:0a:1d:2b:55:2b:
f2:94:de:d3:b8:a7:d0:46:d1:4d:a5:60:ac:8c:54:81:8c:c9:
c5:3d:76:28:62:8c:10:d5:83:cf:55:a1:52:0b:63:22:35:87:
8e:df:9e:08:fb:27:b9:e7:8e:8e:be:93:a6:26:e3:70:5d:6f:
f5:ca:08:4f:8c:e7:20:45:40:b8:4b:4e:27:29:8c:02:2c:43:
a9:f2:e3:d7:6a:d3:5c:fc:16:8c:fa:4e:f1:d6:05:26:bc:41:
7e:29:05:15:83:be:cb:d1:2d:e0:37:ca:a3:d0:a3:07:a9:18:
91:09:6f:4a:e3:aa:ef:41:67:c9:d7:9e:04:69:3c:ff:95:60:
0d:51:9f:f9:4f:19:41:a2:7c:83:33:f0:d8:8d:db:b0:fb:26:
9f:c3:1a:91:7a:01:76:51:6d:ec:b3:99:64:2d:6c:6d:c7:47:
25:e5:3c:0b:63:bc:9a:8b:f6:81:39:40:c9:81:7e:dc:32:85:
83:e5:77:22:fe:b5:7f:5b:d3:4d:22:da:38:d9:ef:05:9c:52:
02:04:d6:88:7e:69:a2:f9:ec:62:a3:b0:51:1b:4c:01:2a:c5:
2c:1e:aa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:49:34 2026 by rpki-client