Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
File: BKSudHHI82IdUyVtdfEQt0iZeJg.mft (raw, json)
Hash identifier: RqqFprDrbJ8dvy8FE3qK5L4a6cNqQz09gCZxBb6F/uk=
Subject key identifier: 3C:93:7F:B7:32:0E:E7:15:CA:45:E0:75:E5:CC:3B:C2:1A:27:A1:54
Authority key identifier: 04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
Certificate issuer: /CN=04a4ae7471c8f3621d53256d75f110b748997898
Certificate serial: 019E1D90EDE84F52DBE093BB7035558F9D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 19:01:37 +0000
Manifest this update: Tue 12 May 2026 19:01:37 +0000
Manifest next update: Wed 13 May 2026 19:01:37 +0000
Files and hashes: 1: BKSudHHI82IdUyVtdfEQt0iZeJg.crl (hash: Skg+OPA6aKOyDamka5h+M/5OSfP4xdqsoibixiaEWZE=)
2: ZN4yF-e-6U6siCtfTnv-FW1OUx0.roa (hash: I9BYHq4fiuWBb+LO42h3XEWS7qzon5TJhCXafUyINuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:ed:e8:4f:52:db:e0:93:bb:70:35:55:8f:9d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a4ae7471c8f3621d53256d75f110b748997898
Validity
Not Before: May 12 19:01:37 2026 GMT
Not After : May 13 19:01:37 2026 GMT
Subject: CN=3c937fb7320ee715ca45e075e5cc3bc21a27a154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:51:56:e5:8a:d6:22:f4:88:1b:e4:6f:60:
9b:16:30:f7:0d:29:a1:bb:b9:4e:f4:f1:58:75:34:
27:69:5e:83:de:f0:16:1c:95:c9:cc:21:e8:77:0c:
83:67:5c:c5:f0:5e:06:bd:4c:55:26:f9:87:d4:a2:
f8:4c:5a:f9:d1:2e:88:0b:41:ca:25:c3:8b:a1:ba:
cb:9a:a4:39:05:ee:4b:68:04:ba:45:8a:bd:de:77:
35:63:3c:e3:22:1c:b4:40:31:45:e6:30:d5:0b:9c:
f0:8c:c7:45:17:ae:ba:04:87:56:b6:a0:0d:8c:81:
3e:2c:87:ab:97:2c:e5:12:44:89:9f:86:db:72:48:
ce:53:a3:71:3f:4f:96:5d:da:4c:67:58:ea:34:d6:
9b:e8:4c:49:86:8e:3e:bc:76:2a:50:84:48:26:f7:
82:ea:9b:9f:1e:31:25:e3:f2:a1:e3:1b:a0:83:9e:
bc:53:64:31:6d:63:b7:c7:80:6c:3a:32:19:4c:5f:
24:eb:ae:28:9e:f4:36:86:d0:65:83:1f:6f:03:97:
c2:69:2d:c1:43:f3:56:4c:40:75:1c:5d:4e:03:d0:
1f:da:ff:18:eb:49:fb:0c:9c:1c:38:57:45:61:e1:
fb:2b:70:47:93:f1:ba:58:cf:17:dd:4a:55:b4:22:
bc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:93:7F:B7:32:0E:E7:15:CA:45:E0:75:E5:CC:3B:C2:1A:27:A1:54
X509v3 Authority Key Identifier:
keyid:04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:38:b1:da:c7:90:7f:26:5a:ae:28:d4:15:d0:f1:bc:02:33:
b6:8b:fe:88:41:c6:7d:17:ca:09:69:00:42:49:99:a8:d6:c1:
24:a2:09:40:9d:08:f9:a4:31:23:14:d2:28:1f:21:eb:c9:63:
2c:a4:1e:a7:0c:f6:90:ba:df:5e:a3:12:99:e2:25:32:a8:06:
4e:20:5b:94:39:54:f9:c7:79:42:23:ea:a7:ee:88:ca:90:68:
f3:fd:98:12:3d:9e:af:eb:69:e5:39:28:a1:a4:df:9f:c4:56:
7f:c9:52:b6:a6:0f:dc:49:41:cb:9d:bf:89:c6:ac:60:55:81:
8a:ad:e8:91:de:e9:24:f3:19:d8:ef:87:9f:fd:04:aa:87:69:
f6:30:4c:14:c5:89:1e:32:44:c7:32:4f:cc:81:6d:45:08:78:
15:0e:23:95:b1:ae:1f:f3:ae:4f:3f:e6:ab:f0:c7:9e:d1:b2:
76:b7:f7:40:2d:7b:c2:ea:43:13:a8:5d:eb:ca:e6:42:10:38:
b4:63:e0:f3:00:a6:7e:53:c9:e2:75:65:20:0b:44:21:f4:2d:
5f:61:c4:ca:53:f5:9f:33:a2:cd:ee:5e:28:c9:a8:40:5e:a6:
63:93:9c:3f:44:e7:6a:73:dc:c3:f5:f0:33:03:4c:b4:07:ad:
bc:d1:de:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:33 2026 by rpki-client