Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
File: BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json)
Hash identifier: crgY0IFIadVjSwsV1CxD3NtY3gWrpC+VnOZ2mRmrI8c=
Subject key identifier: A2:F5:5F:49:AC:4A:01:22:E7:DA:FD:06:15:AD:F0:EC:DC:E0:51:73
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Certificate issuer: /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial: 01A0CB22AFB193FB08E6DF0B4E7511DC89BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
Manifest number: 1A6C
Signing time: Tue 22 Sep 2026 22:00:43 +0000
Manifest this update: Tue 22 Sep 2026 22:00:43 +0000
Manifest next update: Wed 23 Sep 2026 22:00:43 +0000
Files and hashes: 1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: FrXJt9Uh4cxjNo0jNKuXAq0cpSCE18lQZdcU56Bmnfc=)
2: I1mm66oM2FV4eaJVlqE4cO8L7zY.roa (hash: ukmH8m+pY6kpoWVsiBBxCRnRwFuMJQWX3qtjANjdYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:af:b1:93:fb:08:e6:df:0b:4e:75:11:dc:89:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Validity
Not Before: Sep 22 22:00:43 2026 GMT
Not After : Sep 23 22:00:43 2026 GMT
Subject: CN=a2f55f49ac4a0122e7dafd0615adf0ecdce05173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:25:7a:0e:8c:1c:69:49:e7:1a:31:24:d7:
a8:9b:89:38:d0:ac:34:05:44:30:72:b3:af:f1:1a:
ee:98:8d:58:09:fb:ef:bf:03:e6:51:de:00:96:34:
37:a8:6a:fc:53:ac:7d:6b:ef:25:b9:bb:c4:2d:6a:
af:8b:fc:de:14:fb:b7:2d:86:68:89:65:6a:f5:6c:
8a:f4:d8:e0:3d:0c:33:5d:7d:39:2e:8b:16:08:78:
00:df:65:d4:61:17:46:06:2f:fd:7b:91:53:37:8d:
da:24:96:bb:45:9f:6b:3f:3d:1f:e5:3f:6a:ea:14:
49:79:34:1f:45:8b:b0:5d:57:ad:a6:98:a4:cb:6b:
71:f7:80:8e:ea:47:d1:31:6e:68:94:c2:9f:8d:ef:
2a:0d:44:f2:21:9f:22:bb:df:27:19:06:6a:bb:34:
46:0c:cd:4f:ab:e3:8c:77:bc:d6:20:88:b8:24:56:
08:1d:bc:09:03:30:a5:5c:ff:90:47:2d:51:0f:a7:
d3:50:37:fa:3b:94:24:29:f1:8e:e3:bb:06:6e:ad:
79:86:ea:3e:d0:f4:c2:44:1a:c2:23:dd:7a:b5:58:
c4:b2:30:f8:b0:de:e3:38:80:4c:dd:19:4b:40:0e:
2a:3a:48:d7:06:14:31:84:ef:a2:fc:dc:3e:73:9d:
3e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F5:5F:49:AC:4A:01:22:E7:DA:FD:06:15:AD:F0:EC:DC:E0:51:73
X509v3 Authority Key Identifier:
keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:53:18:2c:7c:22:28:e0:b6:a7:e2:32:0d:57:d9:2d:69:89:
16:94:f8:72:b8:4d:75:b7:d1:0b:49:b9:3a:68:dd:e0:4d:0a:
98:02:95:58:e1:d3:7e:b7:59:bc:fd:19:1b:96:c1:f6:c1:23:
79:5d:b6:35:06:f0:54:17:fb:3c:1a:31:d8:98:b4:3b:fa:97:
a3:9c:b4:bf:0a:5b:2b:50:19:3a:1e:87:8c:5f:40:9c:76:5d:
f1:e3:93:52:ee:b4:8c:d8:9c:ee:31:3e:00:5f:de:68:78:e4:
88:3f:ca:82:a1:54:20:c9:de:7f:d9:14:3f:b6:af:72:73:d5:
66:48:24:be:4e:41:26:89:f3:03:6d:9b:d3:65:e5:fb:39:cc:
2d:f9:29:fc:ab:de:11:e4:c4:a9:5c:55:13:ee:f6:b7:d5:09:
57:f5:86:2a:58:4a:53:5a:0e:b4:a4:85:8c:02:39:09:b7:78:
f4:04:da:3b:31:2f:dc:da:fd:b1:4b:92:a2:74:92:59:c1:48:
e9:40:b3:9e:ed:0d:ae:47:ef:06:c6:96:bb:d4:e4:9e:51:c3:
c2:8a:3a:e8:17:c9:1a:92:7c:bd:2b:15:d0:75:0d:76:b1:cd:
2d:a4:ef:a2:df:2b:6c:73:09:3a:0d:8e:c4:72:b1:7d:78:11:
77:86:10:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:28:32 2026 by rpki-client