Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: JER6d0Kka+TgJ+BBPrgaj1ZI4/qurHsVYrxitZorX4U=
Subject key identifier: 46:55:13:EA:9F:CD:90:5A:8B:02:93:70:13:C3:D0:0D:5D:5F:3E:33
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 019CAA2156DC4600279515C72876F279D453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 118E
Signing time: Sun 01 Mar 2026 16:00:37 +0000
Manifest this update: Sun 01 Mar 2026 16:00:37 +0000
Manifest next update: Mon 02 Mar 2026 16:00:37 +0000
Files and hashes: 1: 2LHgN_7jeOEmEp49TXPoGseMKE0.roa (hash: u3Ghkv3e1+pxpIVGrLETupfGggN3KGBiZERj/lx/mTg=)
2: BAmnsqa1Y3XwAhWIBdg_rlIiwQQ.roa (hash: CmXIqWWi6a32pBcCEhmjtOH3aPdFD9JpfLL82hDwVT8=)
3: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: cdcRxafYm3awMNW0Rqiq0nLSTxUpnVu/5xRDv/IGXns=)
4: D0UZ3ILhNCgnCNWzBa3mcwr0Pno.roa (hash: 7TfPe1F/LyooXh4AcQzOEBSmrk6QV7hbqByjjSb/LoE=)
5: irmbqhZvbLwDaadAvsOuO73Fv60.roa (hash: slmG+791rR4vbKBt2GX9vt+pbLQ300ChM1656gXpasA=)
6: uF20gDelBhqD8H_SXBvP9wdoYdM.roa (hash: 5kyc2PB4MyCO3xQLXylbA12fI8U7MFXjthZystH1uCM=)
7: xNxFBI381uPH5ZExRW-GfLm6Rfg.roa (hash: vZwid8rlWfhpqTNd90KDkyYvVw1rv2g5tIEub9g+uLI=)
8: yuZ207ZJKtZoW9jfm_MLQlQ6DH0.roa (hash: YnYml4UkB8mK1DtGV4RcykMNaOP/4CH8hUy+LRFYkt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:56:dc:46:00:27:95:15:c7:28:76:f2:79:d4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Mar 1 16:00:37 2026 GMT
Not After : Mar 2 16:00:37 2026 GMT
Subject: CN=465513ea9fcd905a8b02937013c3d00d5d5f3e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:08:57:41:4f:ee:2e:dc:5b:a9:e2:0c:65:18:
dc:9c:82:0a:a1:ad:36:59:f0:24:be:06:21:12:69:
9c:7f:89:fc:5c:af:0e:34:f2:95:1d:10:42:39:fa:
07:62:6c:1d:7c:ce:64:09:fa:85:e5:42:ca:de:f9:
09:8b:03:f1:8e:b2:02:b2:18:84:cb:6b:64:75:7f:
73:2f:a6:83:98:0b:1b:2d:d7:81:57:50:95:19:6c:
9b:a8:58:91:cc:c2:8a:91:31:de:7d:b4:cc:0e:60:
9c:6c:00:0e:b2:2e:b6:9c:06:cd:a4:54:1b:8a:42:
e5:f9:ef:1a:43:e7:0d:5b:69:19:17:9f:5f:29:c5:
3a:cc:f0:65:ce:68:22:2d:e0:8b:b5:99:4f:d5:2f:
2e:69:a7:56:f5:12:5f:12:af:a2:d3:53:20:b6:bc:
e9:3e:44:49:96:7d:1c:49:5e:a0:16:0b:2a:c1:d9:
21:63:ec:9e:fc:91:42:7b:7d:f8:22:aa:44:aa:ac:
9e:0b:16:c6:d9:54:8c:1c:9e:12:33:40:b1:49:38:
f3:fc:f7:a9:5a:a6:6d:b3:45:19:06:02:58:c5:16:
58:c7:14:e8:04:d2:99:54:32:4b:7b:df:7e:a8:71:
19:64:79:cc:7e:74:66:3f:e1:89:aa:52:2d:d6:49:
de:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:55:13:EA:9F:CD:90:5A:8B:02:93:70:13:C3:D0:0D:5D:5F:3E:33
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:94:3d:dc:c7:21:d4:1c:63:a2:a6:9f:47:84:1d:0a:7a:db:
c3:82:89:e3:00:b2:af:fd:31:33:eb:5a:e8:5f:46:1e:a3:5a:
5f:a4:74:b6:e9:97:c5:a6:44:15:ad:ca:f1:c3:06:65:33:43:
c4:a7:7e:c8:af:5b:c9:57:bf:dd:0a:3e:2c:ef:1a:2b:8b:fb:
48:a6:33:5a:d8:a5:45:ce:aa:f9:a9:d3:67:12:e8:d3:65:37:
28:41:56:aa:f7:fe:b2:8f:f6:f5:5a:0b:34:92:71:3d:47:2d:
4e:f2:67:e9:58:a0:e0:b0:6e:05:93:89:7a:59:b5:41:6b:27:
26:5b:f8:89:9f:54:43:3c:cf:36:e7:ca:89:67:77:7d:f3:95:
76:d5:47:78:3e:f5:9f:14:4c:dd:7f:42:71:31:67:f1:18:1b:
44:be:09:d2:ce:7a:aa:1a:a6:c5:a0:37:c9:3f:ea:62:41:d2:
f8:88:db:bd:e4:21:cf:0a:c0:f7:d8:f8:13:a3:bb:f0:67:32:
eb:e6:f2:47:ad:83:51:44:7d:68:1e:ad:04:2c:1b:65:b1:39:
f5:23:93:cc:9e:a8:a7:9c:6f:2f:06:94:91:51:c8:a6:a1:6b:
99:09:54:f0:c1:d8:28:40:d9:c5:25:64:67:f8:9d:d5:d9:92:
c4:c3:23:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:36 2026 by rpki-client