Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: pvFy1o9RNyqlNruo7EEETxRzq7uKeXyRDex+vg2EUKI=
Subject key identifier: A0:A3:66:48:9E:87:35:5F:DE:44:70:D3:D4:B9:A1:DF:03:26:22:4E
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 019FA9750D34B088A2E446751FF1963E34FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 0E97
Signing time: Tue 28 Jul 2026 16:00:48 +0000
Manifest this update: Tue 28 Jul 2026 16:00:48 +0000
Manifest next update: Wed 29 Jul 2026 16:00:48 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: orVEyEs2nlEcftKocSF33sHl3KRzqROyhVmOO9k67TU=)
2: bEo8_8O2mw7PwZ1Q1MJJqc3Br9c.roa (hash: J6cPpgVeMRsfnWXOAjdK3KoD47LW/HrK99BGJHxHOac=)
3: mwL6ugxhwkwsvxWzk5gpM438ER0.roa (hash: MzMEcGzrb78MmWAPB5Ny/yePKvNxTfYRGwcwpRrll8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:0d:34:b0:88:a2:e4:46:75:1f:f1:96:3e:34:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Jul 28 16:00:48 2026 GMT
Not After : Jul 29 16:00:48 2026 GMT
Subject: CN=a0a366489e87355fde4470d3d4b9a1df0326224e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:26:50:31:8c:84:9f:86:a2:b4:41:41:dd:
64:3a:ab:87:09:22:ce:9e:82:c8:c4:0b:b6:60:af:
db:ac:30:b3:6a:1d:da:69:8e:6c:c0:c8:75:56:4a:
92:84:97:09:09:3a:93:ca:23:7a:01:39:9c:c4:de:
9d:69:17:f2:b3:09:59:7d:69:05:b5:b4:8b:0e:fe:
3c:4d:73:fe:14:ae:ef:43:9c:d0:e1:bf:6a:61:6c:
b4:08:d7:1f:9c:2e:da:8a:78:4d:70:d9:4e:b6:04:
be:a4:48:15:60:d5:37:7e:b2:fe:18:2e:a5:2f:65:
43:23:35:1a:c6:6a:20:5f:75:0e:61:34:15:3a:09:
f9:5f:d2:d0:de:ad:2b:9c:22:4e:bf:77:f7:12:fd:
81:3c:6e:64:84:4f:b7:11:35:dd:50:ac:b6:36:5b:
0f:e6:45:0d:99:1f:2d:7b:6c:23:bb:b2:12:c5:71:
c0:61:42:bf:63:f2:68:a6:58:b1:dc:aa:dc:05:6f:
a2:78:6d:de:f9:e7:0e:14:6d:4c:d7:9f:cd:4c:d6:
0c:cb:81:eb:c8:ea:ed:e5:85:f3:0e:5a:df:ce:bc:
a5:61:04:db:48:02:88:91:14:22:9f:10:0c:26:17:
dd:2e:06:36:50:69:71:3a:5d:65:13:bb:c9:be:4d:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A3:66:48:9E:87:35:5F:DE:44:70:D3:D4:B9:A1:DF:03:26:22:4E
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:99:da:34:98:8a:37:64:11:02:e2:6a:fe:c2:dc:c0:f5:02:
3c:77:cc:6a:59:c6:da:03:cb:db:02:a7:10:42:46:c5:74:1f:
de:db:d8:85:e4:45:94:14:24:d9:30:96:a4:84:3a:5e:68:6c:
0a:f7:b5:cd:9f:b7:f5:e8:5b:09:97:4a:6d:a1:78:d2:97:63:
f8:5c:be:a8:62:68:8e:28:d9:ce:a9:a8:9d:82:b7:89:c3:4f:
70:ea:20:31:b8:70:a1:13:1f:24:89:e5:44:95:8d:eb:0f:4b:
f2:97:1d:31:c9:f4:7b:e0:49:3e:9e:aa:0b:b4:b3:d8:09:e8:
f1:81:06:4a:4b:61:80:52:db:37:6c:38:16:56:da:8d:19:a6:
a4:ef:4e:00:7e:26:4d:ae:21:01:8c:14:81:8c:44:16:34:2a:
11:28:5b:d0:d9:e3:13:f2:63:9d:4b:91:fc:d7:aa:86:87:ef:
72:00:b6:6b:86:ef:64:c2:93:13:80:0b:2b:f9:a7:58:a8:af:
61:d1:7a:73:4a:64:e2:86:11:4b:f0:32:3d:2e:3d:3c:38:d0:
64:99:d1:05:7f:d7:e9:77:73:ae:5c:4c:1c:9f:fc:b0:f4:a3:
94:8b:d1:8c:42:43:7c:dd:10:56:fd:e4:fb:23:d0:eb:e6:35:
e1:9a:1a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:12:48 2026 by rpki-client