Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: v6+hQZaKUgsTmpjoyZDAXUKQdTYi9RnED+ZNY9LV8Rc=
Subject key identifier: C6:08:60:6C:E3:E8:65:13:6E:7B:6A:7A:6E:65:D3:9A:B1:3B:F3:02
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 019EC11199F5676AAAB20FEAFBCC30C425E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 12A3
Signing time: Sat 13 Jun 2026 13:00:16 +0000
Manifest this update: Sat 13 Jun 2026 13:00:16 +0000
Manifest next update: Sun 14 Jun 2026 13:00:16 +0000
Files and hashes: 1: 2LHgN_7jeOEmEp49TXPoGseMKE0.roa (hash: u3Ghkv3e1+pxpIVGrLETupfGggN3KGBiZERj/lx/mTg=)
2: BAmnsqa1Y3XwAhWIBdg_rlIiwQQ.roa (hash: CmXIqWWi6a32pBcCEhmjtOH3aPdFD9JpfLL82hDwVT8=)
3: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: fGPybsqrq0O3fqcZC0yBLfbGM48h7ZR6OCv8BfuUX5k=)
4: D0UZ3ILhNCgnCNWzBa3mcwr0Pno.roa (hash: 7TfPe1F/LyooXh4AcQzOEBSmrk6QV7hbqByjjSb/LoE=)
5: irmbqhZvbLwDaadAvsOuO73Fv60.roa (hash: slmG+791rR4vbKBt2GX9vt+pbLQ300ChM1656gXpasA=)
6: uF20gDelBhqD8H_SXBvP9wdoYdM.roa (hash: 5kyc2PB4MyCO3xQLXylbA12fI8U7MFXjthZystH1uCM=)
7: xNxFBI381uPH5ZExRW-GfLm6Rfg.roa (hash: vZwid8rlWfhpqTNd90KDkyYvVw1rv2g5tIEub9g+uLI=)
8: yuZ207ZJKtZoW9jfm_MLQlQ6DH0.roa (hash: YnYml4UkB8mK1DtGV4RcykMNaOP/4CH8hUy+LRFYkt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:99:f5:67:6a:aa:b2:0f:ea:fb:cc:30:c4:25:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Jun 13 13:00:16 2026 GMT
Not After : Jun 14 13:00:16 2026 GMT
Subject: CN=c608606ce3e865136e7b6a7a6e65d39ab13bf302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5d:2d:4b:4a:75:7b:de:a5:41:7f:36:47:52:
4e:14:4d:ce:71:b5:cc:af:40:de:9a:39:46:42:b0:
cb:6d:77:2d:98:bc:f0:42:12:d3:93:4f:57:23:b7:
5b:8f:88:5a:fa:1d:76:b2:17:30:d5:f2:2d:7f:ab:
2c:5f:e1:84:28:85:cc:0d:64:3e:70:54:72:35:43:
fc:5a:f4:b2:6a:9c:49:6f:14:da:ef:de:d3:ee:eb:
fa:f5:9e:77:81:46:92:06:e3:00:c5:32:bc:3e:06:
15:27:c3:d4:ac:72:b8:df:6b:76:96:df:85:2c:73:
9b:df:29:63:fc:36:5b:63:ff:00:e1:67:a7:77:6b:
c1:e0:ef:95:08:3b:e2:b2:0b:7b:5c:53:93:a6:06:
ef:18:3f:2b:e9:16:a6:68:b3:b5:19:09:7f:3c:cf:
3d:09:b9:91:f3:c6:62:da:e1:7a:55:ad:64:d7:71:
8c:31:47:f4:9c:d3:3c:a2:24:91:1c:10:ca:15:43:
f4:da:b1:a0:2a:1d:1f:0c:03:7c:0c:9b:9f:57:d2:
1a:21:1f:ee:44:c7:d4:21:11:b2:7b:d1:90:24:82:
b3:99:ad:19:2f:ed:df:bb:13:c0:fc:80:3d:b0:7b:
2b:b5:ad:cf:65:da:d0:c3:5a:95:d5:01:7f:2a:ce:
80:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:08:60:6C:E3:E8:65:13:6E:7B:6A:7A:6E:65:D3:9A:B1:3B:F3:02
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9c:3a:39:87:aa:51:71:76:f3:27:67:7f:05:6e:c7:3d:41:
c6:69:cb:d1:42:b3:78:e0:b9:be:35:cf:1c:0d:c4:42:89:d8:
a8:2d:ad:2f:89:78:d9:d0:e2:d7:ba:7a:59:ca:32:c7:ee:19:
a3:1d:c3:4e:33:0c:4c:62:88:ad:65:39:96:66:0b:a8:21:16:
9f:68:cb:2f:df:16:0d:d6:74:b1:ac:91:e8:84:f2:16:c2:e0:
fb:a0:b9:7f:54:22:64:23:be:43:73:d2:56:a0:a0:b1:2c:dc:
6c:bc:c3:ca:ef:9e:6e:d1:95:db:ec:3f:a2:1c:24:bc:61:58:
ae:18:54:73:ad:ab:37:17:3f:ff:8f:a3:9d:eb:2b:f1:3c:1d:
6e:fa:91:6a:ff:c6:22:28:9b:b1:51:76:8b:9d:96:b4:13:c0:
9f:ff:1a:b1:58:aa:43:f3:bd:19:7b:93:06:f1:1c:be:69:68:
43:50:21:5e:1f:43:11:e8:47:d1:9b:7d:6f:4d:a3:39:09:38:
12:24:5d:73:2a:52:0a:8a:c5:89:f8:4e:e2:a0:12:fd:ad:da:
f9:36:f3:e5:d8:17:14:3d:3b:d0:b1:60:89:8b:12:b8:f2:a7:
fe:5a:d4:c8:5b:43:4d:84:06:d0:6b:0d:4b:66:82:c9:4c:e2:
6e:76:eb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:38:44 2026 by rpki-client