Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
File: BkwamGxZM6O5EIToo_8IBm05jhk.mft (raw, json)
Hash identifier: 0PU+munR45ZFdZxty4NS9WrpuoHz98q5szlalBTlVz8=
Subject key identifier: 9C:70:19:75:7E:48:E3:62:93:6E:43:D4:7B:4C:47:88:32:EF:64:34
Authority key identifier: 06:4C:1A:98:6C:59:33:A3:B9:10:84:E8:A3:FF:08:06:6D:39:8E:19
Certificate issuer: /CN=064c1a986c5933a3b91084e8a3ff08066d398e19
Certificate serial: 01A11AF5433FBFC2449EE7ED7BA8E32C09F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
Manifest number: 0EA2
Signing time: Thu 08 Oct 2026 10:00:43 +0000
Manifest this update: Thu 08 Oct 2026 10:00:43 +0000
Manifest next update: Fri 09 Oct 2026 10:00:43 +0000
Files and hashes: 1: BkwamGxZM6O5EIToo_8IBm05jhk.crl (hash: IVkGNhZO2Opd+WPL+K/IEmegXQzk/wI7OzFBpwYvzPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f5:43:3f:bf:c2:44:9e:e7:ed:7b:a8:e3:2c:09:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064c1a986c5933a3b91084e8a3ff08066d398e19
Validity
Not Before: Oct 8 10:00:43 2026 GMT
Not After : Oct 9 10:00:43 2026 GMT
Subject: CN=9c7019757e48e362936e43d47b4c478832ef6434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:01:d2:71:37:9b:20:f2:84:b2:82:31:2e:
a9:81:e0:13:f7:96:61:72:c7:ba:50:c9:5f:52:25:
4a:ed:60:6e:c0:c2:86:9c:4c:c5:35:07:a6:81:2f:
a8:8c:af:6f:92:49:19:b6:b5:e5:ad:c3:3e:ee:e7:
31:89:b2:82:54:11:01:90:e8:a6:ee:be:c1:0e:5f:
35:ce:75:4a:9e:db:63:87:54:39:03:36:e4:55:60:
43:43:94:e2:77:9c:a9:1d:62:48:98:f6:cd:f8:c2:
6c:14:fd:4e:8d:2d:50:34:14:67:e0:28:1d:6c:da:
90:aa:89:7b:b2:c8:e8:be:44:c4:66:7a:ad:9c:53:
55:46:6d:e8:32:bd:a1:66:6b:1e:b4:0e:14:38:99:
17:85:e6:b7:f9:06:6d:b9:12:75:ab:2b:c7:06:33:
bb:76:a8:c4:eb:2e:b8:d6:a2:9c:72:da:0f:d1:1b:
df:66:74:1c:58:7c:e8:84:cc:a4:ed:dc:7f:97:46:
11:6a:18:83:7e:64:a3:f0:18:b4:05:23:6c:ce:81:
42:ca:9f:44:5d:ca:ce:46:2c:22:90:4e:6f:6f:b4:
3c:49:19:83:89:ed:0f:6f:fd:55:dd:5f:d7:4a:b3:
38:a5:e2:22:77:ac:33:f0:7d:b8:e2:f8:88:fa:e7:
44:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:70:19:75:7E:48:E3:62:93:6E:43:D4:7B:4C:47:88:32:EF:64:34
X509v3 Authority Key Identifier:
keyid:06:4C:1A:98:6C:59:33:A3:B9:10:84:E8:A3:FF:08:06:6D:39:8E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:0c:67:a7:da:75:38:4f:22:bf:29:91:86:2f:5f:d1:bb:49:
76:5f:70:c2:c5:6b:53:eb:c5:0d:24:68:a5:88:cc:67:77:cb:
e0:4e:6f:7c:60:f0:e5:de:1c:e9:8d:09:b8:f6:96:7b:aa:a3:
31:f7:4a:d8:39:c6:73:9f:10:aa:51:a8:ba:34:11:87:88:d2:
c3:13:65:71:c9:1e:0f:cd:a4:3a:1e:ca:9c:80:36:6e:fd:55:
47:a2:29:10:76:00:8c:62:10:84:76:92:20:7f:69:a1:55:70:
1b:61:b4:c6:cf:be:82:c2:72:fe:d8:1c:e5:ab:c7:bb:3b:9c:
ae:33:55:f3:54:ec:cb:7b:ec:87:bf:3d:a2:9b:53:f2:db:76:
4b:9f:4b:04:b1:b6:d9:58:4c:88:ac:da:99:ad:95:cc:c8:e7:
0d:d0:74:e2:ac:0c:28:ab:ae:0e:67:51:e9:5b:11:f6:75:58:
cd:c6:19:6d:7e:63:7b:bf:27:27:d8:9d:2a:4a:29:58:0c:08:
14:ea:2c:4a:5c:f7:b8:24:c3:e9:ca:9a:1a:99:4a:23:23:ea:
cb:f5:65:6b:c9:45:3f:b3:42:b3:d3:c5:1a:96:50:f7:25:15:
4d:58:f9:f7:9c:e4:ac:d6:c4:62:52:3f:93:ad:0f:ad:1e:45:
e7:81:68:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEa9UM/v8JEnufte6jjLAnzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NGMxYTk4NmM1OTMzYTNiOTEwODRlOGEzZmYwODA2NmQz
OThlMTkwHhcNMjYxMDA4MTAwMDQzWhcNMjYxMDA5MTAwMDQzWjAzMTEwLwYDVQQD
Eyg5YzcwMTk3NTdlNDhlMzYyOTM2ZTQzZDQ3YjRjNDc4ODMyZWY2NDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVMB0nE3myDyhLKCMS6pgeAT95Zh
cse6UMlfUiVK7WBuwMKGnEzFNQemgS+ojK9vkkkZtrXlrcM+7ucxibKCVBEBkOim
7r7BDl81znVKnttjh1Q5AzbkVWBDQ5Tid5ypHWJImPbN+MJsFP1OjS1QNBRn4Cgd
bNqQqol7ssjovkTEZnqtnFNVRm3oMr2hZmsetA4UOJkXhea3+QZtuRJ1qyvHBjO7
dqjE6y641qKcctoP0RvfZnQcWHzohMyk7dx/l0YRahiDfmSj8Bi0BSNszoFCyp9E
XcrORiwikE5vb7Q8SRmDie0Pb/1V3V/XSrM4peIid6wz8H244viI+udEkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxwGXV+SONik25D1HtMR4gy72Q0MB8GA1UdIwQY
MBaAFAZMGphsWTOjuRCE6KP/CAZtOY4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmt3YW1HeFpNNk81RUlUb29fOElCbTA1amhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mNjI1NTItMTRmMS00OTljLWFmNzgt
N2Y2YTY1NWZkNzg4LzEvQmt3YW1HeFpNNk81RUlUb29fOElCbTA1amhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mNjI1NTItMTRmMS00OTljLWFmNzgtN2Y2YTY1NWZkNzg4
LzEvQmt3YW1HeFpNNk81RUlUb29fOElCbTA1amhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgxnp9p1
OE8ivymRhi9f0btJdl9wwsVrU+vFDSRopYjMZ3fL4E5vfGDw5d4c6Y0JuPaWe6qj
MfdK2DnGc58QqlGoujQRh4jSwxNlcckeD82kOh7KnIA2bv1VR6IpEHYAjGIQhHaS
IH9poVVwG2G0xs++gsJy/tgc5avHuzucrjNV81Tsy3vsh789optT8tt2S59LBLG2
2VhMiKzama2VzMjnDdB04qwMKKuuDmdR6VsR9nVYzcYZbX5je78nJ9idKkopWAwI
FOosSlz3uCTD6cqaGplKIyPqy/Vla8lFP7NCs9PFGpZQ9yUVTVj595zkrNbEYlI/
k60PrR5F54FojA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:29:47 2026 by rpki-client