Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
File: BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json)
Hash identifier: 5ttsdikb0tvCFtF8gOTZpkWeOSiSW3AjtZy6HfgorY4=
Subject key identifier: 8C:A5:18:26:02:18:7C:14:25:C4:42:9D:7B:40:06:50:F0:72:05:90
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Certificate issuer: /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial: 019E1D91009E5AEC2818632E165BFD679607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 19:01:42 +0000
Manifest this update: Tue 12 May 2026 19:01:42 +0000
Manifest next update: Wed 13 May 2026 19:01:42 +0000
Files and hashes: 1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: 3WuExJQI7Aosn/ZsMR23ELJBJNC8IDPprsRztgQS4fU=)
2: I1mm66oM2FV4eaJVlqE4cO8L7zY.roa (hash: ukmH8m+pY6kpoWVsiBBxCRnRwFuMJQWX3qtjANjdYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:00:9e:5a:ec:28:18:63:2e:16:5b:fd:67:96:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Validity
Not Before: May 12 19:01:42 2026 GMT
Not After : May 13 19:01:42 2026 GMT
Subject: CN=8ca5182602187c1425c4429d7b400650f0720590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:79:cf:55:c8:1c:d5:bc:2d:3b:75:74:64:
ec:31:d0:23:20:9e:bd:a2:f6:0c:aa:97:21:b0:0f:
8e:49:f1:80:d6:2d:15:28:04:6c:70:a5:6e:b7:23:
19:a5:52:3f:ba:1e:a0:e7:75:c1:cf:5c:fb:73:31:
a9:0f:4f:2c:37:2b:f9:3c:c2:0e:31:42:54:ad:1b:
29:e9:d7:69:4f:ec:c9:4e:79:1b:54:0f:a5:58:80:
50:a3:b9:dc:79:4b:1b:b6:3e:37:d1:9c:71:f8:6c:
02:ed:90:b3:43:a4:15:40:ec:51:2c:84:93:00:6f:
39:4f:37:f1:ea:d5:b9:f2:d3:f9:7b:8f:86:ae:90:
8b:ed:16:3c:0a:4a:6c:97:76:4c:3b:a0:09:a1:19:
6f:0b:31:2b:ef:37:35:c3:fd:76:a9:88:25:55:38:
ef:43:14:0d:71:9e:e7:09:9a:5b:b8:86:35:70:a4:
e4:fe:3e:4a:c2:c7:3b:54:26:3f:44:7f:6f:28:dc:
2b:66:01:18:af:66:09:56:6d:5c:85:41:5b:c9:68:
f3:26:ec:85:91:bc:03:95:d0:05:f5:e3:7d:e9:44:
da:f5:a9:43:8e:24:12:be:50:c6:9d:7f:34:1a:96:
e0:b5:c5:77:24:c0:05:e6:e4:f5:2c:6a:6e:a9:de:
41:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A5:18:26:02:18:7C:14:25:C4:42:9D:7B:40:06:50:F0:72:05:90
X509v3 Authority Key Identifier:
keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f5:5c:18:ec:84:0f:a0:71:63:e9:2f:2a:cd:61:74:4e:be:
c5:42:2e:a8:f0:e9:91:65:68:3d:d1:3e:b9:cf:b6:09:ec:97:
20:20:de:9c:e5:b6:b2:e0:df:c9:d9:93:03:c9:f4:5e:69:79:
6a:f8:9d:5b:20:ec:bb:23:0c:dd:d0:52:bd:c6:7d:6b:0a:10:
ab:83:34:5b:f4:53:39:38:51:9f:fb:ed:fa:47:aa:b5:7b:a9:
09:12:d1:00:51:09:cc:5d:a1:6c:1a:36:ac:6b:c9:b6:9a:b9:
c0:5a:15:a6:61:e4:9e:89:ad:e2:d4:55:2d:d8:a1:24:71:c7:
b6:2e:81:fa:93:77:31:9c:ce:ea:9b:05:73:47:6e:e4:39:e6:
4e:0e:c0:a1:06:e9:94:7c:cc:56:ef:f6:73:c6:83:21:37:38:
d4:e4:17:72:4f:10:00:5f:54:19:c7:44:9c:58:db:7f:4b:d8:
cc:d7:e6:95:26:8a:1c:c9:9a:bf:f7:a1:2e:df:51:dc:7a:cb:
c5:7a:26:b2:88:fa:ad:20:90:f3:34:cb:3a:c1:f8:80:fa:c2:
c2:68:4c:be:41:85:8c:04:e7:ec:54:74:c5:e9:a5:f0:2f:a8:
dc:86:f6:6a:55:aa:e6:d0:56:a9:b6:ee:5c:a4:b0:b3:7f:4a:
16:35:4d:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkQCeWuwoGGMuFlv9Z5YHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTljZmYyNDk4MWQ3MjYzZDFiN2Q2Mzc3OWY1ZDY3M2Rl
MmJkYmMwHhcNMjYwNTEyMTkwMTQyWhcNMjYwNTEzMTkwMTQyWjAzMTEwLwYDVQQD
Eyg4Y2E1MTgyNjAyMTg3YzE0MjVjNDQyOWQ3YjQwMDY1MGYwNzIwNTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscx5z1XIHNW8LTt1dGTsMdAjIJ69
ovYMqpchsA+OSfGA1i0VKARscKVutyMZpVI/uh6g53XBz1z7czGpD08sNyv5PMIO
MUJUrRsp6ddpT+zJTnkbVA+lWIBQo7nceUsbtj430Zxx+GwC7ZCzQ6QVQOxRLIST
AG85Tzfx6tW58tP5e4+GrpCL7RY8Ckpsl3ZMO6AJoRlvCzEr7zc1w/12qYglVTjv
QxQNcZ7nCZpbuIY1cKTk/j5Kwsc7VCY/RH9vKNwrZgEYr2YJVm1chUFbyWjzJuyF
kbwDldAF9eN96UTa9alDjiQSvlDGnX80GpbgtcV3JMAF5uT1LGpuqd5BLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIylGCYCGHwUJcRCnXtABlDwcgWQMB8GA1UdIwQY
MBaAFASpz/JJgdcmPRt9Y3efXWc94r28MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktuUDhrbUIxeVk5RzMxamQ1OWRaejNpdmJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lZWNmOGItM2Q2My00YzljLWJkODQt
Y2QwZDllNTc0MmNiLzEvQktuUDhrbUIxeVk5RzMxamQ1OWRaejNpdmJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lZWNmOGItM2Q2My00YzljLWJkODQtY2QwZDllNTc0MmNi
LzEvQktuUDhrbUIxeVk5RzMxamQ1OWRaejNpdmJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPVcGOyE
D6BxY+kvKs1hdE6+xUIuqPDpkWVoPdE+uc+2CeyXICDenOW2suDfydmTA8n0Xml5
avidWyDsuyMM3dBSvcZ9awoQq4M0W/RTOThRn/vt+keqtXupCRLRAFEJzF2hbBo2
rGvJtpq5wFoVpmHknomt4tRVLdihJHHHti6B+pN3MZzO6psFc0du5DnmTg7AoQbp
lHzMVu/2c8aDITc41OQXck8QAF9UGcdEnFjbf0vYzNfmlSaKHMmav/ehLt9R3HrL
xXomsoj6rSCQ8zTLOsH4gPrCwmhMvkGFjATn7FR0xeml8C+o3Ib2alWq5tBWqbbu
XKSws39KFjVN0g==
-----END CERTIFICATE-----
Generated at Tue May 12 21:42:57 2026 by rpki-client