Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
File: BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json)
Hash identifier: G7xgiyqxWLO33EGXnOidw1RSdVIF+wyX2MStn182prs=
Subject key identifier: D1:89:CC:A0:8E:A9:D2:EE:9A:26:67:EA:A7:8F:6E:D1:F0:91:85:DE
Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
Certificate issuer: /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Certificate serial: 019E1D59346768188483BFD3D94309D131DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
Manifest number: 15E5
Signing time: Tue 12 May 2026 18:00:45 +0000
Manifest this update: Tue 12 May 2026 18:00:45 +0000
Manifest next update: Wed 13 May 2026 18:00:45 +0000
Files and hashes: 1: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: oXdsAu1KHCqs7ivCf0Wq9gF0yLzyzSvAnjVRzG15nSw=)
2: ue1Yig8TYgxiOV1FxPhvIsY035g.roa (hash: 3msZkfxcU6jcS509BBjupbbAc7uKaBkwJ1wFsWgzHXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:34:67:68:18:84:83:bf:d3:d9:43:09:d1:31:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Validity
Not Before: May 12 18:00:45 2026 GMT
Not After : May 13 18:00:45 2026 GMT
Subject: CN=d189cca08ea9d2ee9a2667eaa78f6ed1f09185de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:28:8e:ac:2c:71:b4:0c:81:03:c0:b1:dc:bf:
35:51:b0:e7:a5:cd:39:98:27:ef:52:1a:76:19:b6:
75:18:a1:89:af:24:9c:8f:d3:97:f8:1f:02:02:bb:
ea:19:7d:f1:15:a4:01:0f:01:ca:16:20:85:db:e8:
06:e1:57:b6:5d:5f:80:4d:fa:27:9f:e6:2d:b8:3b:
82:91:11:99:85:02:25:88:ed:5a:cc:96:f4:d1:bc:
d0:02:3e:c6:c2:78:23:62:e5:52:b0:ea:90:5c:a3:
e6:dd:7d:84:a0:5b:6e:88:ec:74:a7:03:0a:0d:47:
fb:60:6f:7f:d0:b7:dc:9e:46:4a:27:f1:07:9d:e8:
c5:48:1c:71:6f:98:19:a7:de:f7:3e:c8:62:cd:5c:
e8:d6:ce:c9:99:b1:39:94:88:d8:b8:58:32:d8:cb:
b1:0d:7f:76:b5:b8:a0:b0:f5:f5:8c:e8:7e:9d:a6:
90:56:85:95:09:c6:c2:e7:4c:15:61:05:74:35:30:
4f:69:e4:d3:33:99:56:d9:95:89:51:86:82:07:6c:
85:d8:ac:af:ae:be:5a:03:39:14:50:f9:3a:65:b7:
b6:a9:fc:da:95:5e:83:10:c6:d5:84:e4:f3:75:34:
aa:f8:19:af:0b:1d:63:0f:fe:46:3d:9b:36:07:ef:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:89:CC:A0:8E:A9:D2:EE:9A:26:67:EA:A7:8F:6E:D1:F0:91:85:DE
X509v3 Authority Key Identifier:
keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:31:7e:a9:f3:4d:f2:74:a5:28:3c:44:d7:33:aa:c9:9d:cc:
13:e5:17:dd:1b:c9:b8:42:45:23:c3:85:37:4e:6d:85:c5:d8:
78:84:4e:63:2b:4a:ab:80:af:ba:ce:71:cf:7a:05:dd:ca:5f:
cc:3d:48:23:19:92:cf:2f:3f:7c:92:57:a6:a4:a5:2c:d2:73:
f1:b4:e4:cc:f0:3e:75:e4:a6:97:a2:8c:1f:14:8b:6b:d0:5b:
c6:7b:e6:a3:62:68:4c:8b:51:a5:96:4c:fa:16:b7:37:e6:24:
6a:bd:5b:a7:58:8f:f5:d8:a1:47:2f:78:27:35:46:23:d2:ea:
5e:56:64:49:43:af:c5:0d:30:80:01:c7:30:74:1d:58:1b:8f:
b9:11:5f:33:8a:b3:be:bd:bf:fa:cb:01:82:30:d7:9b:49:b8:
c5:17:0d:2b:0a:d2:5d:1c:cc:16:68:ca:f8:18:e0:48:26:be:
80:29:e2:64:96:ca:3c:bc:89:2d:2e:91:0d:f0:95:ae:23:d1:
eb:df:5d:8b:5c:39:c2:6d:45:84:b0:a6:a4:04:c6:b2:35:fe:
ed:10:af:7f:c9:11:4a:39:c0:4c:2b:f0:5f:a9:05:53:e0:be:
2d:87:eb:3b:75:c6:93:9b:21:d5:71:de:e0:f0:d7:78:3e:f0:
f8:8e:b4:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWTRnaBiEg7/T2UMJ0THbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0OTkyNmUxY2M1ZTYxYzVjODBlYjQ2YTlkN2I2ZjVmNjNh
MTY2MWMwHhcNMjYwNTEyMTgwMDQ1WhcNMjYwNTEzMTgwMDQ1WjAzMTEwLwYDVQQD
EyhkMTg5Y2NhMDhlYTlkMmVlOWEyNjY3ZWFhNzhmNmVkMWYwOTE4NWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyiOrCxxtAyBA8Cx3L81UbDnpc05
mCfvUhp2GbZ1GKGJryScj9OX+B8CArvqGX3xFaQBDwHKFiCF2+gG4Ve2XV+ATfon
n+YtuDuCkRGZhQIliO1azJb00bzQAj7GwngjYuVSsOqQXKPm3X2EoFtuiOx0pwMK
DUf7YG9/0LfcnkZKJ/EHnejFSBxxb5gZp973PshizVzo1s7JmbE5lIjYuFgy2Mux
DX92tbigsPX1jOh+naaQVoWVCcbC50wVYQV0NTBPaeTTM5lW2ZWJUYaCB2yF2Kyv
rr5aAzkUUPk6Zbe2qfzalV6DEMbVhOTzdTSq+BmvCx1jD/5GPZs2B+8WzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGJzKCOqdLumiZn6qePbtHwkYXeMB8GA1UdIwQY
MBaAFASZJuHMXmHFyA60ap17b19joWYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkprbTRjeGVZY1hJRHJScW5YdHZYMk9oWmh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jMzljYWYtYjc3Ny00OTRkLWI2ODIt
OGU5ZGY5NmRjZTQ1LzEvQkprbTRjeGVZY1hJRHJScW5YdHZYMk9oWmh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jMzljYWYtYjc3Ny00OTRkLWI2ODItOGU5ZGY5NmRjZTQ1
LzEvQkprbTRjeGVZY1hJRHJScW5YdHZYMk9oWmh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjF+qfNN
8nSlKDxE1zOqyZ3ME+UX3RvJuEJFI8OFN05thcXYeIROYytKq4Cvus5xz3oF3cpf
zD1IIxmSzy8/fJJXpqSlLNJz8bTkzPA+deSml6KMHxSLa9Bbxnvmo2JoTItRpZZM
+ha3N+Ykar1bp1iP9dihRy94JzVGI9LqXlZkSUOvxQ0wgAHHMHQdWBuPuRFfM4qz
vr2/+ssBgjDXm0m4xRcNKwrSXRzMFmjK+BjgSCa+gCniZJbKPLyJLS6RDfCVriPR
699di1w5wm1FhLCmpATGsjX+7RCvf8kRSjnATCvwX6kFU+C+LYfrO3XGk5sh1XHe
4PDXeD7w+I60zw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:15:14 2026 by rpki-client