Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: +0X/PsTe56VnaeQCFqEXiY3I+NpZ0WeLqbjHrnbd17U=
Subject key identifier: FC:C3:FE:08:56:80:5C:50:4C:8E:F9:B4:94:30:F7:1C:71:BC:FB:BC
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 01A0C17AF2054179894E3E0D33B8C5577FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 0F28
Signing time: Mon 21 Sep 2026 01:00:55 +0000
Manifest this update: Mon 21 Sep 2026 01:00:55 +0000
Manifest next update: Tue 22 Sep 2026 01:00:55 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: dSM8qjwodkhnZBIZkbnl+sPt2n8DX089PuRiyEXRUqE=)
2: bEo8_8O2mw7PwZ1Q1MJJqc3Br9c.roa (hash: J6cPpgVeMRsfnWXOAjdK3KoD47LW/HrK99BGJHxHOac=)
3: mwL6ugxhwkwsvxWzk5gpM438ER0.roa (hash: MzMEcGzrb78MmWAPB5Ny/yePKvNxTfYRGwcwpRrll8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:f2:05:41:79:89:4e:3e:0d:33:b8:c5:57:7f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Sep 21 01:00:55 2026 GMT
Not After : Sep 22 01:00:55 2026 GMT
Subject: CN=fcc3fe0856805c504c8ef9b49430f71c71bcfbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:28:4a:c2:ba:56:09:47:89:f1:fe:f3:f2:
e8:18:ef:05:4b:90:ab:26:e6:5e:97:99:15:c5:e3:
36:7c:19:c9:02:00:23:66:33:66:12:dc:af:9b:1d:
de:b6:cb:0c:fe:0a:19:b8:54:8b:e3:cd:b7:aa:2c:
15:89:bc:61:a3:c9:0f:0c:06:f7:0a:e9:e9:51:04:
cd:32:a8:83:ef:24:d0:60:1d:4d:ae:a9:c6:4e:1b:
dd:f5:ca:7a:ef:fa:83:87:a0:51:13:38:8b:d9:47:
c4:c6:9a:b4:c2:c5:cb:27:35:7b:d5:26:7b:e2:e7:
21:91:96:a0:f9:4e:bd:6b:0f:e0:f3:3b:74:7e:90:
e7:d2:fd:e6:48:8e:a2:22:61:bc:a5:6b:68:bc:84:
90:48:0e:39:32:a7:be:01:5c:2c:65:cf:c0:5a:e3:
68:74:e9:ff:35:8d:56:e0:7b:f9:89:5f:a8:4d:84:
0f:57:0e:41:7d:9b:55:da:6c:79:70:8c:30:67:79:
26:07:fb:16:a8:55:77:f5:d5:3b:8f:f7:11:11:0f:
35:f3:bc:3c:7b:31:f6:84:77:b3:3a:05:46:50:48:
1d:34:ff:06:de:27:a7:ae:48:99:a2:f9:3c:f3:53:
2f:2f:24:14:0e:a1:1e:32:5f:e6:7b:aa:33:4d:41:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C3:FE:08:56:80:5C:50:4C:8E:F9:B4:94:30:F7:1C:71:BC:FB:BC
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:44:61:ed:27:34:08:ac:67:68:cf:0a:cd:81:57:cf:51:a2:
07:4b:bd:4c:7e:02:76:f1:78:c0:74:b4:37:33:3d:94:02:25:
bf:45:17:69:43:d8:17:71:45:55:2d:d0:82:a2:d9:82:67:b9:
2f:6e:b1:36:7c:3c:11:f6:57:a8:b2:b7:42:40:54:d4:ef:4b:
62:55:1d:5e:d9:ff:7e:6c:1b:98:99:0b:80:56:13:86:48:61:
3d:01:15:31:7b:10:41:35:df:32:da:b8:58:c4:ae:0e:15:e6:
a6:7a:4b:4e:03:f7:d9:0f:04:55:d0:b8:14:02:bf:f4:08:af:
27:43:60:58:1f:f9:5d:3b:9f:05:a2:13:3a:17:4e:ba:32:49:
c3:b3:05:16:96:d0:56:54:5a:b8:62:45:78:f8:b4:5a:39:d2:
2a:a6:8e:0f:c5:56:47:4d:38:3b:e2:9b:5e:49:8b:0e:f0:8a:
60:d7:fb:53:14:cc:dc:2c:f2:91:ff:2d:2c:61:9b:6c:e4:41:
51:52:ce:85:9f:bb:05:0e:56:91:12:6a:45:db:70:9c:ed:d1:
34:ed:74:0f:bc:cc:03:d2:48:cd:6f:b8:4d:68:d5:6e:55:5b:
dd:b2:ee:2c:e8:ec:e9:b3:02:f0:d3:ae:3c:fe:17:da:e2:09:
87:7d:11:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:56:41 2026 by rpki-client