Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: Z8RhCVhCq7HyHiJEJVHtr1LJCuOfZQn1S+CdD7qRpdA=
Subject key identifier: 3A:66:1C:3D:AA:0D:DC:FD:95:86:76:1B:4E:16:13:B3:39:9F:97:61
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 01A0C6A17612B21703D6E3FC6893D036FFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 13AF
Signing time: Tue 22 Sep 2026 01:01:05 +0000
Manifest this update: Tue 22 Sep 2026 01:01:05 +0000
Manifest next update: Wed 23 Sep 2026 01:01:05 +0000
Files and hashes: 1: 2LHgN_7jeOEmEp49TXPoGseMKE0.roa (hash: u3Ghkv3e1+pxpIVGrLETupfGggN3KGBiZERj/lx/mTg=)
2: BAmnsqa1Y3XwAhWIBdg_rlIiwQQ.roa (hash: CmXIqWWi6a32pBcCEhmjtOH3aPdFD9JpfLL82hDwVT8=)
3: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: 0ATZs9nMx3XKQss5QRwqvrtzSZz9ozDnEHfyWXivQDs=)
4: D0UZ3ILhNCgnCNWzBa3mcwr0Pno.roa (hash: 7TfPe1F/LyooXh4AcQzOEBSmrk6QV7hbqByjjSb/LoE=)
5: irmbqhZvbLwDaadAvsOuO73Fv60.roa (hash: slmG+791rR4vbKBt2GX9vt+pbLQ300ChM1656gXpasA=)
6: uF20gDelBhqD8H_SXBvP9wdoYdM.roa (hash: 5kyc2PB4MyCO3xQLXylbA12fI8U7MFXjthZystH1uCM=)
7: xNxFBI381uPH5ZExRW-GfLm6Rfg.roa (hash: vZwid8rlWfhpqTNd90KDkyYvVw1rv2g5tIEub9g+uLI=)
8: yuZ207ZJKtZoW9jfm_MLQlQ6DH0.roa (hash: YnYml4UkB8mK1DtGV4RcykMNaOP/4CH8hUy+LRFYkt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:76:12:b2:17:03:d6:e3:fc:68:93:d0:36:ff:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Sep 22 01:01:05 2026 GMT
Not After : Sep 23 01:01:05 2026 GMT
Subject: CN=3a661c3daa0ddcfd9586761b4e1613b3399f9761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:40:08:2a:b3:f5:dd:40:bb:35:05:6d:ce:48:
24:0d:38:39:0a:4b:35:f1:6f:2d:56:d7:7a:b6:2a:
7c:b5:66:0e:26:20:02:c4:6b:dc:e6:3d:d3:bc:9d:
67:d7:09:75:10:88:be:a9:f1:a1:be:01:32:b3:65:
72:05:ee:be:36:5e:36:33:8a:3b:ba:28:e8:46:12:
60:f8:59:7e:a8:c9:08:11:d1:13:1e:b9:56:20:96:
12:1e:b5:11:18:d4:b6:1b:97:6c:e1:12:bd:16:d2:
56:95:da:3a:d1:e6:3e:22:95:2f:a5:57:3f:0b:60:
55:5f:92:fb:a5:13:69:39:dc:9b:af:4a:75:5a:c6:
a8:d6:19:1a:46:2c:67:a1:dd:05:28:4d:f3:5f:1b:
a7:38:24:4a:b8:31:48:fe:5f:24:9b:67:fe:10:32:
09:44:9f:7b:84:52:73:a7:d8:d3:e4:7d:c8:4d:59:
b9:0b:6c:38:8a:ee:55:66:e4:20:e1:9e:84:d8:81:
2e:07:9c:26:cc:49:56:9f:3e:a0:0f:1e:fd:cc:b1:
00:87:91:81:7b:64:12:61:c4:98:8d:ac:06:26:e9:
a8:28:4e:c8:e0:d5:f3:81:b1:6a:41:be:62:c5:2f:
0a:ed:80:e7:02:1b:73:31:6f:44:95:82:72:fb:6e:
10:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:66:1C:3D:AA:0D:DC:FD:95:86:76:1B:4E:16:13:B3:39:9F:97:61
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4b:d9:84:bf:aa:4b:51:0b:40:20:8b:ff:cb:0c:39:cb:30:
36:42:f0:6d:18:e8:44:f3:4a:af:9f:e4:d8:a9:4c:8a:43:b3:
51:21:1c:c9:3b:fe:80:95:85:3d:92:73:40:ae:43:0e:83:de:
88:f8:ce:cf:c4:aa:d7:12:bc:8e:34:0e:73:47:a3:96:8c:57:
e4:ab:71:12:56:9b:da:ad:74:df:19:20:65:b7:9a:8f:b3:a2:
2e:e0:14:83:95:22:4c:84:c4:cd:47:47:a0:d2:bf:8d:fd:80:
40:50:cf:47:5f:7f:59:c1:f6:d7:69:ab:ea:f1:c3:7e:e6:7f:
7d:b5:e0:db:41:d7:93:3e:1f:38:f1:65:29:94:fd:3b:87:1d:
27:86:8b:59:2d:c3:3e:60:8e:bb:8c:67:80:e5:27:28:4e:7e:
38:f3:2b:dc:4c:7b:e4:dc:c8:7c:02:34:11:1c:77:a9:bd:58:
b9:13:66:07:76:a2:68:aa:12:6b:48:20:a1:30:ed:7b:12:a3:
5b:1e:c6:92:8c:ad:a8:92:e6:ab:98:e8:f2:85:b3:07:0d:13:
78:53:c9:a7:25:95:5c:72:9d:37:47:d3:b6:e9:21:c5:d6:95:
10:32:6d:45:7d:f8:9c:45:a4:b6:86:b6:93:9b:43:d9:47:06:
38:d9:9f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:17:29 2026 by rpki-client