Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: vHQ51wlFI9d5fYtgSE+oTJPklsM1EP0f9II5TJrL7gw=
Subject key identifier: DE:80:52:E2:2F:BA:12:F6:84:A1:62:25:84:98:B5:65:EF:CD:AD:BF
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 019E1DFDDCDA417E97272CD3F70E7C6B16C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 21:00:36 +0000
Manifest this update: Tue 12 May 2026 21:00:36 +0000
Manifest next update: Wed 13 May 2026 21:00:36 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: n5TwBhePTCzk2AAFX8/kOM7+7bfIESmr2vn+PlXi09g=)
2: k-u4T0e4tVorBoGy6nf5Gw5YRNs.roa (hash: rWH/QqNZxriq26jdgQuCLH1AphEv+lZpQduBEGoklCM=)
3: oCDLp44KeSMJvVZp5T2IShxlL4o.roa (hash: OLzEYYayae+FmqrETQJHCGxfQyGvHodRSRrVJfyY0No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:dc:da:41:7e:97:27:2c:d3:f7:0e:7c:6b:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: May 12 21:00:36 2026 GMT
Not After : May 13 21:00:36 2026 GMT
Subject: CN=de8052e22fba12f684a162258498b565efcdadbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:62:74:f0:1c:ae:10:f1:77:d3:be:1a:d7:2b:
a9:2c:20:9c:65:fa:ce:6f:3f:15:6b:28:41:ac:a9:
f4:98:d3:7b:a2:ba:5e:26:8e:c2:f5:fc:47:e0:66:
59:94:c7:b9:37:29:fc:61:60:af:e5:42:0d:32:09:
dc:e2:67:2a:7b:7e:54:45:bc:85:95:27:67:b6:46:
c7:b9:72:79:4e:71:ed:7c:0b:2c:36:06:22:45:2f:
0c:3a:31:6f:d7:fe:42:36:7a:74:11:e0:24:5b:6a:
16:08:d7:5b:f6:e5:ed:86:91:4f:3c:97:3c:52:03:
7a:ca:ec:76:71:5e:e0:aa:7d:e2:a4:37:42:e2:56:
e4:61:88:dd:d1:23:6e:12:79:d0:35:6a:d7:48:8f:
1c:be:24:8f:2c:f8:e9:3d:d4:18:d3:45:ad:c7:c7:
b4:c2:7a:73:ae:06:01:04:86:44:8b:a9:0f:97:d5:
f6:f9:4c:5c:38:d2:ed:ed:f2:1e:28:fe:6d:a4:85:
0b:e6:71:38:26:eb:78:c7:dc:42:cc:24:4c:da:da:
34:09:8f:3b:6b:e2:cf:bb:72:4f:ea:85:6a:3b:d2:
6e:77:11:0c:64:d3:69:55:a7:73:a6:3f:90:9c:26:
26:30:d1:f8:f4:9b:70:75:aa:7f:71:f3:c6:84:a0:
c8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:80:52:E2:2F:BA:12:F6:84:A1:62:25:84:98:B5:65:EF:CD:AD:BF
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:8c:39:95:26:72:8b:50:75:70:3a:47:b4:06:59:a1:b7:ce:
34:41:f0:c6:84:09:9b:0a:84:37:18:2c:32:49:a9:5f:b1:b8:
84:5e:3c:44:f4:3e:30:93:e6:60:bb:55:0d:06:dc:6e:f3:eb:
b2:f3:72:f0:11:bf:04:7c:67:74:f1:16:91:79:84:f8:31:4e:
76:e4:43:4d:5c:7f:58:c8:03:36:81:b7:52:88:b5:7e:8a:d8:
0f:0c:81:58:f6:bc:77:da:81:c4:02:0f:ae:29:71:92:34:06:
c9:ee:a6:93:65:f6:84:16:51:2b:9c:d4:53:e0:1a:8b:a1:ed:
b0:ec:fc:0b:dc:9e:30:97:45:8a:55:09:96:a5:d3:4d:eb:a0:
52:49:19:e1:68:32:89:08:fc:3b:89:98:a8:e9:96:e2:33:3b:
df:22:f3:8d:79:e2:ff:eb:ba:f0:17:ff:cf:45:e5:12:7f:76:
0e:a4:93:10:7a:47:ed:ad:4b:96:83:c4:af:99:13:d4:c5:0f:
db:ec:97:60:33:4c:9d:11:90:95:70:9b:84:b9:5a:2e:09:43:
78:82:ca:9c:7f:a5:9d:02:7d:b9:3d:4e:0e:a3:8e:29:39:3c:
a4:3f:38:84:ff:fe:75:e1:28:fb:ad:7e:1b:c9:63:94:7d:b7:
78:7d:8d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:51:59 2026 by rpki-client