Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: u7B2vgHIUFROT4mx0AeftzFsuedAcNqwaGpzbCnTnS0=
Subject key identifier: 8B:DF:96:95:37:0D:6D:F1:5A:50:02:E4:DF:73:2E:6B:63:CE:F9:39
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 019D26CD98684B62133E05EAB84C944FC6EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 21:01:41 +0000
Manifest this update: Wed 25 Mar 2026 21:01:41 +0000
Manifest next update: Thu 26 Mar 2026 21:01:41 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: GUe77JaeMOzo2lzVK+UiallOQNSObQWAuZ1nGJCOUk0=)
2: k-u4T0e4tVorBoGy6nf5Gw5YRNs.roa (hash: rWH/QqNZxriq26jdgQuCLH1AphEv+lZpQduBEGoklCM=)
3: oCDLp44KeSMJvVZp5T2IShxlL4o.roa (hash: OLzEYYayae+FmqrETQJHCGxfQyGvHodRSRrVJfyY0No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:98:68:4b:62:13:3e:05:ea:b8:4c:94:4f:c6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Mar 25 21:01:41 2026 GMT
Not After : Mar 26 21:01:41 2026 GMT
Subject: CN=8bdf9695370d6df15a5002e4df732e6b63cef939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:0c:da:73:0f:a2:84:4b:08:b2:68:01:03:
3b:5c:66:9a:6e:70:b7:37:a8:98:f7:ab:db:6b:93:
b0:30:13:00:39:6e:54:9a:b1:e2:10:f9:6c:f0:e1:
7c:4a:c5:d3:1a:bf:ac:b0:30:d0:85:25:df:50:40:
1a:62:d5:30:72:8a:f5:23:03:0a:ce:c6:6d:16:94:
d0:de:e0:bd:9c:bf:d2:bb:ad:e0:0e:46:0a:af:d9:
61:18:b8:2e:6a:02:9e:ea:66:2d:4d:19:e2:5a:9b:
d6:a3:48:2c:1e:07:12:b7:5c:6e:e4:03:18:f3:bb:
91:22:12:c7:28:f2:8d:63:10:ab:36:f5:e1:1e:be:
b1:27:59:a2:7f:8a:16:ff:b5:2d:ac:cf:8e:55:44:
02:30:5b:d9:a1:1c:4a:dd:3b:61:7d:4b:b6:17:88:
e4:1d:27:e0:19:2f:6a:5b:a9:dc:62:fc:0b:b0:88:
b6:a8:52:ce:4f:28:85:da:b6:5a:bd:f6:34:55:06:
ce:2b:f3:fe:e1:a5:96:dc:bc:7b:40:36:27:4a:e7:
01:b3:d0:29:41:3f:b6:6b:52:0b:a1:2b:a1:7f:fc:
c2:ec:c8:12:e1:f5:a1:a3:40:db:2f:d0:0c:05:eb:
29:05:8e:2f:4e:11:7d:c8:9f:77:6d:2c:b7:b8:71:
09:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DF:96:95:37:0D:6D:F1:5A:50:02:E4:DF:73:2E:6B:63:CE:F9:39
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ba:89:08:cf:ca:d8:89:3a:01:a2:d7:4c:60:3f:87:31:35:
1c:9f:d5:ce:4e:49:28:90:53:cd:e1:d7:15:d4:7c:6f:d4:48:
d0:f4:be:a7:b4:e4:57:34:fc:59:32:94:6d:fa:ff:fe:a7:15:
ee:6d:a9:08:aa:4a:77:f3:42:1d:54:7b:33:b9:f8:db:96:fa:
9e:fc:ef:a9:80:74:8b:f1:2e:29:8b:f3:63:d4:b9:e5:8c:4f:
a2:b9:fa:c7:87:56:52:c0:a7:e1:e5:a6:ba:1e:95:b0:39:67:
7b:85:78:c2:d3:c5:ba:b8:ef:13:5a:46:4f:92:7a:99:b0:29:
d9:11:69:39:68:e6:dd:4e:15:e9:d9:2c:55:20:b9:34:fc:7c:
15:e2:6b:03:4a:fe:31:8e:00:43:5b:35:20:2e:29:20:78:c1:
32:58:6b:3c:8c:8b:f2:4d:a6:c4:4a:4e:b8:82:22:9b:da:71:
a0:7c:be:03:20:4f:30:6d:a4:0c:4b:76:6a:66:8a:f2:2a:fb:
26:c3:2f:bd:a3:09:37:81:ff:2f:6a:4d:bb:42:ba:fd:08:41:
c2:5e:c9:d2:ba:83:ad:b0:52:99:9d:2d:04:79:76:e4:a8:96:
0a:84:71:ea:10:eb:46:d2:1c:47:cf:23:82:11:82:ad:b8:0f:
cd:f0:df:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:12 2026 by rpki-client