Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: HAqh10fMjAWiC67lFGolEkdYshhCj/dvX+6ByEvWFNE=
Subject key identifier: 13:86:ED:77:D5:89:34:CA:AA:7E:BA:14:A1:0D:89:6F:C3:31:1A:28
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 019F90C811C36916AE2AA0704EE4B459C9B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 21:00:58 +0000
Manifest this update: Thu 23 Jul 2026 21:00:58 +0000
Manifest next update: Fri 24 Jul 2026 21:00:58 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: dTdY/y/JT3ADHq22NLA1hcPFzwTMdal8j6Jf71GxBeE=)
2: k-u4T0e4tVorBoGy6nf5Gw5YRNs.roa (hash: rWH/QqNZxriq26jdgQuCLH1AphEv+lZpQduBEGoklCM=)
3: oCDLp44KeSMJvVZp5T2IShxlL4o.roa (hash: OLzEYYayae+FmqrETQJHCGxfQyGvHodRSRrVJfyY0No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:11:c3:69:16:ae:2a:a0:70:4e:e4:b4:59:c9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Jul 23 21:00:58 2026 GMT
Not After : Jul 24 21:00:58 2026 GMT
Subject: CN=1386ed77d58934caaa7eba14a10d896fc3311a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:b6:be:55:9b:cd:f6:26:9f:00:0b:38:56:
3e:34:b2:92:f0:45:a7:5c:3c:0a:80:be:e7:50:1d:
8e:61:bd:c5:7e:14:fe:e5:8d:6e:0a:8a:a0:90:43:
87:51:84:88:14:b6:4a:2a:5d:3b:4a:46:f4:58:cb:
d2:3b:c3:bd:7b:3b:29:6a:0a:d3:cb:06:ce:a1:66:
7a:60:6a:d5:1e:f8:07:c1:63:25:d2:2f:ea:8d:6d:
e0:c4:c0:7f:e0:9c:e9:5e:17:97:0d:78:58:91:a4:
0a:35:12:57:23:97:eb:f1:82:b9:0e:e1:6c:4f:94:
96:0a:af:db:a1:2f:e9:fb:bf:68:f6:9c:6a:16:b9:
dd:6a:30:12:65:b9:b9:b9:1f:0d:75:01:f3:d3:91:
e3:94:eb:78:90:4d:fc:56:ad:65:c7:61:d6:56:b9:
8a:de:fe:bf:5f:ec:5f:cd:6e:34:8a:f7:41:d8:35:
4f:4e:13:7a:77:dc:e2:c5:63:de:69:e9:28:9a:b3:
5e:03:f7:d8:3a:d1:b6:71:cc:30:35:94:51:10:98:
b8:44:e6:c1:6d:55:96:e3:0d:8e:cf:8a:96:53:6b:
0b:a5:8c:26:d7:41:e2:da:79:97:14:fe:8f:55:ad:
6b:25:c6:4d:fc:6f:e2:65:47:f8:1b:9c:32:0a:ea:
1a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:86:ED:77:D5:89:34:CA:AA:7E:BA:14:A1:0D:89:6F:C3:31:1A:28
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:92:b4:36:da:e6:c5:77:85:12:fb:83:4c:66:8c:49:f1:cc:
6a:9b:ea:5d:df:c5:eb:29:23:ea:56:8c:d3:8c:00:1e:87:4c:
25:f2:8d:97:93:a6:61:3d:47:61:e2:b6:01:78:2e:a3:ef:ce:
d5:f9:02:7a:e7:70:62:f3:20:d9:16:a9:25:d4:34:05:a7:65:
3b:43:c2:9b:ba:ac:4e:56:c8:11:07:32:1c:c0:db:ce:cc:6b:
ef:1f:5c:15:27:4b:15:c7:e2:89:b8:0b:7e:3a:2f:e3:32:4b:
d5:d8:12:ca:ea:06:35:af:13:96:74:8d:07:5c:52:76:e5:53:
57:9f:3d:cd:d3:13:e1:e0:8f:f3:ee:72:17:c6:43:83:32:c9:
fd:fd:5f:bf:bd:db:87:6a:10:12:3f:91:0e:1c:da:37:5d:ac:
f4:56:08:fa:86:fe:fc:53:93:3c:a3:af:0b:f0:27:92:18:2a:
97:52:e3:b8:1e:70:91:e4:cc:e2:4f:c1:de:5e:d1:a7:8a:99:
87:b8:08:dc:64:70:98:1d:f9:50:65:b3:e9:ab:70:31:92:23:
5e:9e:bd:5d:47:f8:24:8e:bc:ea:8f:68:46:2d:76:fd:78:52:
df:f4:c6:df:5a:b1:d9:af:ee:f6:d9:ae:c8:5f:de:c3:3b:a2:
34:07:5a:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QyBHDaRauKqBwTuS0Wcm5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTMxMmJhNjVlOTBiZjhhY2Y0ZjU3MzI0YTMwYzBiNmNi
ZDFjMmYwHhcNMjYwNzIzMjEwMDU4WhcNMjYwNzI0MjEwMDU4WjAzMTEwLwYDVQQD
EygxMzg2ZWQ3N2Q1ODkzNGNhYWE3ZWJhMTRhMTBkODk2ZmMzMzExYTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQm2vlWbzfYmnwALOFY+NLKS8EWn
XDwKgL7nUB2OYb3FfhT+5Y1uCoqgkEOHUYSIFLZKKl07Skb0WMvSO8O9ezspagrT
ywbOoWZ6YGrVHvgHwWMl0i/qjW3gxMB/4JzpXheXDXhYkaQKNRJXI5fr8YK5DuFs
T5SWCq/boS/p+79o9pxqFrndajASZbm5uR8NdQHz05HjlOt4kE38Vq1lx2HWVrmK
3v6/X+xfzW40ivdB2DVPThN6d9zixWPeaekomrNeA/fYOtG2ccwwNZRREJi4RObB
bVWW4w2Oz4qWU2sLpYwm10Hi2nmXFP6PVa1rJcZN/G/iZUf4G5wyCuoaNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOG7XfViTTKqn66FKENiW/DMRooMB8GA1UdIwQY
MBaAFASjErpl6Qv4rPT1cySjDAtsvRwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lM2NmNzUtNDBiOS00MDM0LTg0Yjkt
Y2NjYmMyYWU2OTQ4LzEvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lM2NmNzUtNDBiOS00MDM0LTg0YjktY2NjYmMyYWU2OTQ4
LzEvQktNU3VtWHBDX2lzOVBWekpLTU1DMnk5SEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5K0Ntrm
xXeFEvuDTGaMSfHMapvqXd/F6ykj6laM04wAHodMJfKNl5OmYT1HYeK2AXguo+/O
1fkCeudwYvMg2RapJdQ0BadlO0PCm7qsTlbIEQcyHMDbzsxr7x9cFSdLFcfiibgL
fjov4zJL1dgSyuoGNa8TlnSNB1xSduVTV589zdMT4eCP8+5yF8ZDgzLJ/f1fv73b
h2oQEj+RDhzaN12s9FYI+ob+/FOTPKOvC/Ankhgql1LjuB5wkeTM4k/B3l7Rp4qZ
h7gI3GRwmB35UGWz6atwMZIjXp69XUf4JI686o9oRi12/XhS3/TG31qx2a/u9tmu
yF/ewzuiNAdaug==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:04 2026 by rpki-client