Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: v0oEx1WB0bxyoCPgWjLMADOdh7VsOR9ZVBbIzGaiv+o=
Subject key identifier: E4:94:46:87:84:2A:5A:79:D6:D1:BB:0B:FD:C0:DF:B3:90:05:E2:D1
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 019F8FB531F3E64B94057CB5B4542E58B580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 130E
Signing time: Thu 23 Jul 2026 16:00:44 +0000
Manifest this update: Thu 23 Jul 2026 16:00:44 +0000
Manifest next update: Fri 24 Jul 2026 16:00:44 +0000
Files and hashes: 1: 2LHgN_7jeOEmEp49TXPoGseMKE0.roa (hash: u3Ghkv3e1+pxpIVGrLETupfGggN3KGBiZERj/lx/mTg=)
2: BAmnsqa1Y3XwAhWIBdg_rlIiwQQ.roa (hash: CmXIqWWi6a32pBcCEhmjtOH3aPdFD9JpfLL82hDwVT8=)
3: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: qOy9V7FE8QWducQJpEZRWKCjbkhWWk6OZ+D1/cJKOOg=)
4: D0UZ3ILhNCgnCNWzBa3mcwr0Pno.roa (hash: 7TfPe1F/LyooXh4AcQzOEBSmrk6QV7hbqByjjSb/LoE=)
5: irmbqhZvbLwDaadAvsOuO73Fv60.roa (hash: slmG+791rR4vbKBt2GX9vt+pbLQ300ChM1656gXpasA=)
6: uF20gDelBhqD8H_SXBvP9wdoYdM.roa (hash: 5kyc2PB4MyCO3xQLXylbA12fI8U7MFXjthZystH1uCM=)
7: xNxFBI381uPH5ZExRW-GfLm6Rfg.roa (hash: vZwid8rlWfhpqTNd90KDkyYvVw1rv2g5tIEub9g+uLI=)
8: yuZ207ZJKtZoW9jfm_MLQlQ6DH0.roa (hash: YnYml4UkB8mK1DtGV4RcykMNaOP/4CH8hUy+LRFYkt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:31:f3:e6:4b:94:05:7c:b5:b4:54:2e:58:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Jul 23 16:00:44 2026 GMT
Not After : Jul 24 16:00:44 2026 GMT
Subject: CN=e4944687842a5a79d6d1bb0bfdc0dfb39005e2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:f0:a5:5c:41:01:ee:62:00:5b:67:17:7a:
22:9b:74:87:8e:d2:49:3e:82:b6:96:1c:5f:e9:81:
d7:ee:4c:5b:6e:82:51:30:66:10:1f:2c:48:97:77:
99:e3:67:6d:71:8c:b4:f2:72:44:ea:e0:2b:bb:5d:
38:f3:fb:c8:5f:30:5b:56:de:59:23:06:77:9a:81:
66:55:4c:33:38:92:cc:26:f7:73:e2:54:03:80:20:
ac:5d:20:34:05:5f:0d:65:ce:04:d4:49:d4:e4:a6:
a2:40:83:ef:a8:ef:f9:04:03:32:b4:e1:99:cf:ff:
94:7f:bf:1b:0f:76:9c:1d:cb:d3:2b:10:83:00:6d:
89:d0:30:71:d6:80:7f:87:67:4e:d4:f5:ad:b4:a2:
a1:48:ba:f2:b8:1b:8b:77:cf:1f:ff:b1:2c:f8:52:
6e:95:a4:12:b4:6e:4b:b1:a2:f1:f8:bb:bb:b7:26:
df:58:4d:5b:17:f1:98:61:d2:f5:bc:90:02:9b:ec:
32:65:ee:cb:b6:2b:2d:4e:5f:71:6e:87:17:06:3c:
06:90:22:76:8e:84:29:4d:3a:ea:a8:29:a9:fe:a8:
20:56:15:ce:47:89:1c:b7:67:b9:d3:52:37:af:a5:
ea:56:e4:e8:57:25:16:79:69:bb:16:0f:83:2f:83:
6a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:94:46:87:84:2A:5A:79:D6:D1:BB:0B:FD:C0:DF:B3:90:05:E2:D1
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c5:c7:71:6c:c6:12:b0:4c:04:c2:6b:77:bf:3e:b8:06:ad:
81:16:d1:a1:ce:77:e2:80:e6:99:9f:ca:41:a6:4d:82:7a:4f:
79:9c:7c:ab:b2:9a:36:90:5e:6b:d3:1e:56:d8:e5:85:9a:94:
83:42:ae:e7:25:38:b9:fd:67:99:6c:be:31:dd:5e:80:76:a3:
5a:63:2d:7b:f6:dd:b7:c1:fa:eb:86:2c:ca:49:2d:6e:cb:b9:
17:7d:75:4a:b1:d4:da:2a:d8:b9:08:bf:5f:ed:03:d1:36:7b:
2f:50:ed:84:0f:3b:35:cd:3c:ac:d4:85:10:4d:a4:31:7a:c1:
87:72:34:93:b2:e9:69:1e:5b:a7:09:89:32:13:10:4d:2b:e2:
af:cf:d9:1b:4e:91:c8:84:cb:1e:7f:07:47:b6:6d:41:11:88:
42:7f:51:06:79:57:8d:49:b1:a5:1b:c9:34:94:b3:59:b6:dd:
f0:c9:3f:1f:53:93:64:c2:86:14:46:ee:df:ad:4d:e7:ad:59:
e3:c0:57:2d:fa:ac:c5:10:51:b4:bf:de:58:23:fe:80:3c:0a:
3d:f3:3e:11:b7:a1:ad:f2:85:d3:a9:66:c9:06:9a:7a:93:68:
33:86:3b:a2:50:1a:dd:98:86:3c:0e:85:48:1b:b6:47:08:2b:
95:fe:25:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:33:07 2026 by rpki-client