Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: 1BJ34H49r/ykEXZO9FcdWgvphwhcC+pCtLEmeaB0LbE=
Subject key identifier: 1B:FB:73:27:2D:09:D1:24:3F:7A:A1:7D:B4:C6:0A:48:64:F4:DB:41
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 019D984FF488FB7E9CFD0210FBA7AACE235D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 0D85
Signing time: Thu 16 Apr 2026 22:01:09 +0000
Manifest this update: Thu 16 Apr 2026 22:01:09 +0000
Manifest next update: Fri 17 Apr 2026 22:01:09 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: yG45yP3pq9p/RTqmbUHD9QgwoGja/WumYBWZVb5ZZ/I=)
2: bEo8_8O2mw7PwZ1Q1MJJqc3Br9c.roa (hash: J6cPpgVeMRsfnWXOAjdK3KoD47LW/HrK99BGJHxHOac=)
3: mwL6ugxhwkwsvxWzk5gpM438ER0.roa (hash: MzMEcGzrb78MmWAPB5Ny/yePKvNxTfYRGwcwpRrll8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:f4:88:fb:7e:9c:fd:02:10:fb:a7:aa:ce:23:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Apr 16 22:01:09 2026 GMT
Not After : Apr 17 22:01:09 2026 GMT
Subject: CN=1bfb73272d09d1243f7aa17db4c60a4864f4db41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:9d:2b:dd:49:51:7e:0e:08:4b:af:2e:9a:
a8:dd:bf:48:f3:af:66:66:bb:6a:a2:81:07:a2:fb:
1b:93:4f:8c:73:6e:15:e5:48:f2:d1:49:a0:59:7b:
01:eb:45:fb:8d:48:a8:cb:f4:ac:f2:81:3a:7a:80:
78:6c:e1:75:d2:56:d3:41:be:4e:40:9b:4b:59:b6:
d0:64:8b:27:e3:81:83:11:2c:41:01:bf:14:4e:e4:
d1:18:8d:e5:40:9d:3d:7e:9a:19:d8:25:64:68:c0:
e9:61:6f:0c:0e:b9:1d:82:27:a4:c3:e5:0e:9a:6d:
76:bf:7a:98:6c:fb:0b:0b:3c:b2:a9:f6:b5:db:71:
22:2e:8c:f1:99:2b:e5:31:45:97:ed:9d:93:d7:07:
a2:69:3c:20:16:81:33:6b:64:d1:0c:ca:9d:50:80:
2f:94:d9:f1:8a:2c:10:e9:3f:df:8e:e8:55:ae:3a:
7b:d2:f5:75:eb:62:84:7e:36:39:56:a0:07:76:80:
12:63:f4:2d:c8:34:bd:f7:c7:a2:46:8d:6a:03:78:
cb:39:00:bc:72:06:f2:be:c1:ae:ec:95:40:43:9b:
0c:d5:5a:9f:f4:a0:b5:77:a3:6e:96:77:ba:e9:33:
a4:82:7a:4b:b7:b5:84:e9:c4:cc:26:f2:bd:3d:48:
da:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FB:73:27:2D:09:D1:24:3F:7A:A1:7D:B4:C6:0A:48:64:F4:DB:41
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1b:bc:4e:87:85:87:94:99:60:8b:c6:2c:46:3a:ec:40:61:
e0:fb:de:d6:74:78:88:b8:31:c9:20:c6:cc:b9:cb:9b:de:6a:
dc:1a:8d:bd:7f:fa:c7:af:62:59:e3:65:3b:0c:2c:41:a9:47:
a6:dc:23:81:ed:8a:29:1b:95:3f:bb:f1:57:aa:87:e6:fe:6e:
5d:38:bd:84:ca:60:11:65:3b:0c:35:29:83:f8:44:67:bb:cd:
a3:f6:b2:90:0b:dc:60:d0:89:53:c7:78:47:ea:9f:1e:9e:42:
e8:9a:06:7f:a1:00:52:bf:ca:70:62:56:a6:04:18:f9:6a:3d:
f5:be:aa:ea:4c:84:dc:96:fd:b8:aa:a8:6b:6d:58:c8:0f:06:
b9:19:20:f5:c8:98:2f:6f:d5:7e:5f:cc:34:41:ba:5d:06:64:
a1:ee:41:de:93:f7:ed:a6:3b:2a:97:a2:f3:a3:e8:c9:a7:6b:
88:42:e6:14:5f:da:ee:c9:ec:15:90:41:27:f7:d1:e2:0a:bd:
ad:d6:3a:b9:da:62:84:b1:8e:13:38:bc:96:a0:68:06:39:fc:
c2:60:55:b1:ed:02:f1:dd:b1:80:5e:10:4c:17:da:aa:40:59:
c5:6a:03:03:b9:1f:9e:2d:a1:0f:b6:0e:45:b2:ce:72:cc:a4:
76:20:c9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:41:03 2026 by rpki-client