Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
File: BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json)
Hash identifier: AmGcQgoJc8iee8kaLqcSdeFe5Rstv4khmONqmqPj4ZU=
Subject key identifier: 95:D9:C9:A5:29:BD:D0:8E:76:58:E4:70:A7:FD:9B:EA:95:61:A4:F0
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Certificate issuer: /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial: 019F924833E4D19CE21FC68A802BA2A303E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 04:00:33 +0000
Manifest this update: Fri 24 Jul 2026 04:00:33 +0000
Manifest next update: Sat 25 Jul 2026 04:00:33 +0000
Files and hashes: 1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: 8bn8FNZnro3Y6V9IeBsyDjWZ931B8R9X4AnXAPZpxhQ=)
2: I1mm66oM2FV4eaJVlqE4cO8L7zY.roa (hash: ukmH8m+pY6kpoWVsiBBxCRnRwFuMJQWX3qtjANjdYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:33:e4:d1:9c:e2:1f:c6:8a:80:2b:a2:a3:03:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Validity
Not Before: Jul 24 04:00:33 2026 GMT
Not After : Jul 25 04:00:33 2026 GMT
Subject: CN=95d9c9a529bdd08e7658e470a7fd9bea9561a4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b7:ca:01:4d:1b:e9:5e:f3:cd:20:05:e3:47:
7e:39:a6:00:4d:8c:c9:87:01:5e:b0:61:ec:61:ed:
88:a5:90:6c:2f:bf:be:bd:a5:7b:89:ee:88:5c:ff:
00:c3:b8:ad:b8:df:bf:db:7d:59:df:df:1f:92:2d:
e9:73:58:11:55:13:1a:aa:ec:89:7b:ab:90:2c:17:
f4:55:44:28:a2:ad:ad:6f:6e:82:b6:d4:47:01:05:
fc:58:e9:98:2a:f2:50:f2:4e:df:2e:19:6f:39:95:
05:ed:74:81:ad:46:f6:8f:66:e1:3f:55:6b:08:c0:
87:58:aa:b0:f7:a4:be:66:d0:87:e4:39:f9:aa:58:
f2:6d:e6:d1:2a:e2:26:81:fe:bf:85:b7:45:c4:aa:
40:06:a5:e1:b4:04:d6:79:cd:a8:55:f6:48:1d:da:
29:e0:31:32:35:f1:3f:03:6f:c9:6a:aa:a9:db:1d:
77:8a:21:3e:58:1c:82:d0:21:81:92:16:15:46:48:
0a:8d:ba:6c:53:21:8b:3b:be:be:0e:85:40:f5:02:
e1:ee:57:56:4d:0d:d9:98:e4:c0:36:b4:b0:79:b0:
5e:45:24:6e:92:7a:ac:30:91:bb:63:f2:e9:f3:40:
22:91:e3:e5:54:df:c5:20:46:ca:14:05:06:cc:1e:
f2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D9:C9:A5:29:BD:D0:8E:76:58:E4:70:A7:FD:9B:EA:95:61:A4:F0
X509v3 Authority Key Identifier:
keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2b:75:ee:2f:84:23:48:37:5e:90:5d:ef:56:c5:30:e5:7f:
80:01:33:fc:9c:27:f3:d0:a6:18:46:52:73:de:c6:0f:fd:cd:
69:83:b2:be:67:b4:a9:b4:1f:48:a5:d8:10:cc:a6:65:73:40:
c8:a1:ad:86:14:f4:84:6f:95:1a:59:7d:b8:3c:92:bb:ac:b2:
1f:79:1f:8e:92:c4:77:e3:e3:4c:d1:ff:26:a2:95:0e:f6:a7:
c6:b2:46:25:18:e5:98:98:3c:43:ef:dc:a4:4e:77:07:ff:96:
f2:a5:6c:00:ac:62:d0:dc:89:70:26:2d:59:36:87:76:d4:f5:
7e:42:04:4e:f7:82:4a:4f:51:08:41:00:27:52:18:09:ee:79:
36:b2:f8:1f:df:ac:b6:b4:16:e5:b3:35:33:e7:14:cd:5f:7e:
7b:56:75:c1:d7:e9:04:26:73:49:87:f2:47:ed:64:d0:d3:98:
3c:a2:7e:10:db:29:03:fe:26:c5:c4:f7:e2:36:75:97:45:e9:
bc:c4:6c:ae:1e:ff:12:cc:22:3c:94:4c:41:a3:ba:e3:56:46:
26:a1:50:7c:10:cf:87:41:e1:32:2b:8b:f6:8d:11:83:46:9d:
be:65:19:be:72:fa:64:08:b1:71:2b:1a:e9:c5:e7:0e:ea:2c:
b4:3e:c0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:24 2026 by rpki-client