Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: W6BtyrF15A7PQ+dmwPAs9IfMP6UoVsUiuLZcevyvixk=
Subject key identifier: EA:80:CD:1D:64:FC:D6:22:87:DD:87:34:B5:7A:A5:97:32:E4:35:00
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 01A0D53975149617CF729E7BF026352496BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 21:01:47 +0000
Manifest this update: Thu 24 Sep 2026 21:01:47 +0000
Manifest next update: Fri 25 Sep 2026 21:01:47 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: 0BzX6IRMlUvwfHp/DJ8UdD47/YeiENcoUJBSlFVHy0Y=)
2: k-u4T0e4tVorBoGy6nf5Gw5YRNs.roa (hash: rWH/QqNZxriq26jdgQuCLH1AphEv+lZpQduBEGoklCM=)
3: oCDLp44KeSMJvVZp5T2IShxlL4o.roa (hash: OLzEYYayae+FmqrETQJHCGxfQyGvHodRSRrVJfyY0No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:75:14:96:17:cf:72:9e:7b:f0:26:35:24:96:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Sep 24 21:01:47 2026 GMT
Not After : Sep 25 21:01:47 2026 GMT
Subject: CN=ea80cd1d64fcd62287dd8734b57aa59732e43500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:94:20:0e:09:81:9e:04:ad:66:67:b8:fd:
70:3f:90:2d:91:25:17:bd:ab:68:dd:8d:66:a7:6a:
60:a6:20:30:19:80:da:46:20:04:1f:cf:04:bf:b4:
2a:78:64:0e:f8:fc:78:88:64:a7:c8:09:6a:6c:53:
09:4e:b8:66:c1:e7:dc:29:2f:d6:9f:09:ec:ec:ed:
7a:4b:17:6a:af:8d:9a:e2:25:2d:b5:b4:fc:58:86:
5e:12:99:bc:11:90:85:b1:2c:ca:48:99:49:3e:17:
bc:c8:f6:d0:50:c2:2b:eb:f4:c2:8b:88:43:fd:ac:
06:59:15:46:f7:2a:3e:cb:f3:73:ad:c6:0c:fc:b0:
3a:95:89:df:22:42:73:d4:5e:99:8a:a6:5e:af:08:
0b:a3:f9:ee:13:0f:8e:72:57:3f:72:fc:1b:c0:ab:
e5:f0:0a:4c:58:82:44:56:6d:04:41:9d:2d:a7:a0:
cc:a7:0c:81:e1:6e:9b:6a:ed:bf:2e:c4:ec:cf:fa:
46:74:8e:e7:32:c9:a8:d4:37:4c:5d:a4:d5:a1:03:
97:5d:cd:44:8e:03:94:b4:cb:d1:05:89:97:48:49:
8d:a2:b4:5c:ea:b7:30:fd:31:a7:62:d2:6c:ec:d2:
47:6a:a9:a4:05:09:0d:6a:f0:d1:47:ce:8b:98:36:
fa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:80:CD:1D:64:FC:D6:22:87:DD:87:34:B5:7A:A5:97:32:E4:35:00
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:51:84:ec:17:b0:a0:20:4f:99:2b:2f:c0:3c:9c:03:ed:5c:
79:77:fc:7a:92:3d:07:29:bd:65:d3:5c:2c:97:1f:18:3b:f2:
9d:e7:e5:a1:8a:3b:b4:a4:87:f7:49:f7:f6:87:68:4d:74:08:
ff:39:5a:4b:90:76:af:9e:6e:10:5e:3e:6d:fb:81:7c:41:8f:
d3:57:a1:a7:31:c8:67:52:9e:4f:93:90:5d:2d:7a:4f:0d:96:
2d:3f:f2:e0:66:d5:cc:79:5d:df:3d:ba:9b:25:ae:da:3a:57:
e7:3a:72:f6:0c:45:00:bb:94:66:ca:c3:ff:02:db:8e:ef:d2:
4c:46:a3:77:b6:2c:61:8e:d8:f6:9a:4d:91:43:2c:c7:ea:a6:
61:01:52:fb:54:87:d8:92:27:27:c2:9f:83:74:59:f6:91:f4:
9e:f0:64:32:e6:41:1f:f1:58:94:73:75:e1:42:19:d1:44:11:
15:94:64:cc:25:7e:03:d3:29:91:71:cd:99:aa:88:d8:06:dd:
10:a7:63:ba:72:c8:a6:69:6c:fc:c0:d9:5e:c7:ad:77:8f:d2:
46:5b:a3:ec:64:1c:da:7e:2f:53:00:4f:e1:ae:6d:fa:8b:c0:
27:de:30:31:a8:74:59:44:dd:52:7a:17:5b:1c:d0:b1:60:8a:
99:85:0a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:46:47 2026 by rpki-client