Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: 0t4eTEFsmfUmW/ZjsmT0K4ztpZXu2zaFjTei+WNu+O0=
Subject key identifier: E7:82:5D:1A:3E:75:21:F9:68:6E:6F:F8:C3:F8:08:CE:54:BE:50:41
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 019CAAC629C7A0E104447EB2F7BA97715F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 0D0A
Signing time: Sun 01 Mar 2026 19:00:39 +0000
Manifest this update: Sun 01 Mar 2026 19:00:39 +0000
Manifest next update: Mon 02 Mar 2026 19:00:39 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: hRQrAqMf/+7RHJttLtpV0CAPoJhpFb9oNaz7xXOWdso=)
2: bEo8_8O2mw7PwZ1Q1MJJqc3Br9c.roa (hash: J6cPpgVeMRsfnWXOAjdK3KoD47LW/HrK99BGJHxHOac=)
3: mwL6ugxhwkwsvxWzk5gpM438ER0.roa (hash: MzMEcGzrb78MmWAPB5Ny/yePKvNxTfYRGwcwpRrll8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:29:c7:a0:e1:04:44:7e:b2:f7:ba:97:71:5f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Mar 1 19:00:39 2026 GMT
Not After : Mar 2 19:00:39 2026 GMT
Subject: CN=e7825d1a3e7521f9686e6ff8c3f808ce54be5041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:d1:8a:53:ad:2d:2c:c1:f4:15:b0:f5:4c:
31:54:a1:22:b6:11:3a:42:fd:6b:84:13:45:16:67:
ed:28:35:e0:1f:85:61:15:cf:89:16:1b:3c:b4:6a:
17:00:d3:f6:b9:df:cb:f7:4d:9f:e5:ab:b6:2d:33:
b7:5c:cb:27:1e:f1:99:7e:79:7f:f9:90:da:e0:f0:
9d:69:b9:55:84:c3:4e:ec:09:64:76:e6:aa:89:6a:
ad:6f:f6:d4:c6:dd:92:22:8f:13:76:cd:56:d2:98:
c4:65:15:4a:be:67:1f:92:3f:ec:25:bd:59:ae:b2:
8b:57:27:e1:26:cb:18:28:9d:3a:18:68:37:58:38:
e4:4a:1a:a8:24:24:6c:35:9a:2d:c8:44:b3:cb:1c:
15:43:67:ca:25:e8:3e:74:7f:7b:44:fa:d1:05:a4:
2b:54:ae:d7:ae:af:12:5d:6a:d4:af:83:f8:cb:5e:
e9:03:75:b4:68:7e:77:23:49:4a:33:cb:68:32:e5:
4a:07:31:39:e6:7d:26:41:e4:b9:5a:8b:ae:9d:52:
92:29:39:00:71:c7:e4:3e:7f:6f:df:62:79:79:8f:
b2:ca:a7:cd:c6:5d:11:82:fb:bf:b2:ff:77:97:81:
2b:36:61:23:c9:a9:04:9e:d8:44:b7:05:f1:15:ea:
3d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:82:5D:1A:3E:75:21:F9:68:6E:6F:F8:C3:F8:08:CE:54:BE:50:41
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:73:44:fb:b1:3b:fb:82:d0:5f:0f:92:e2:6e:9b:36:ce:f3:
f2:59:5b:8b:8f:86:e5:b0:22:5e:da:54:83:38:68:09:ce:89:
38:8a:51:0a:a1:fc:27:67:d6:3f:2d:98:50:c8:bf:56:0e:4c:
28:b4:c0:88:bd:31:fe:a6:5d:32:fc:91:35:ad:e5:2f:92:f0:
4c:19:d0:dc:2b:42:9d:0e:3d:3d:a4:c7:20:31:42:6a:77:92:
ea:53:db:9e:4e:17:1e:fc:ed:ec:51:73:3b:a9:5e:8c:83:fe:
78:11:8c:ae:3e:7d:8e:ab:d5:f6:81:ea:83:50:68:2c:c8:42:
33:32:18:f3:96:fe:b7:77:04:4f:4c:8a:8a:27:e1:5d:ea:13:
03:a9:7c:2a:9d:64:43:c3:6f:36:a6:61:82:45:be:b0:ca:70:
a5:58:93:d1:59:bb:3e:6f:48:37:c8:52:f6:a8:f3:ec:d5:04:
b4:7a:6d:fd:46:c5:fa:78:20:2c:f3:26:94:1b:9a:a3:c5:5f:
a7:e0:f2:73:53:95:ef:65:b9:c1:9a:dd:73:0f:bf:33:fd:f7:
2a:79:3b:16:0e:a3:42:ea:67:38:67:cd:ba:fb:81:6c:cb:2b:
ad:7c:e9:7a:66:89:db:e5:9f:e6:4b:75:f1:70:14:ba:e0:29:
6c:d1:89:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:04:30 2026 by rpki-client