Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: BWf+/UIzBGE7pJE5GqlIz9eWJcnVifctVh0b8kqYa7c=
Subject key identifier: EC:4C:AF:99:5C:33:89:66:9E:B2:C8:40:1B:6D:98:10:11:57:B3:1B
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 019D27A88E9448DB8A5C4A76ACF8FD0D368A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 11CF
Signing time: Thu 26 Mar 2026 01:00:51 +0000
Manifest this update: Thu 26 Mar 2026 01:00:51 +0000
Manifest next update: Fri 27 Mar 2026 01:00:51 +0000
Files and hashes: 1: 2LHgN_7jeOEmEp49TXPoGseMKE0.roa (hash: u3Ghkv3e1+pxpIVGrLETupfGggN3KGBiZERj/lx/mTg=)
2: BAmnsqa1Y3XwAhWIBdg_rlIiwQQ.roa (hash: CmXIqWWi6a32pBcCEhmjtOH3aPdFD9JpfLL82hDwVT8=)
3: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: y3BHKsiENgLVJKUY3MBMHvc0+koH+eILru+zzkN60O0=)
4: D0UZ3ILhNCgnCNWzBa3mcwr0Pno.roa (hash: 7TfPe1F/LyooXh4AcQzOEBSmrk6QV7hbqByjjSb/LoE=)
5: irmbqhZvbLwDaadAvsOuO73Fv60.roa (hash: slmG+791rR4vbKBt2GX9vt+pbLQ300ChM1656gXpasA=)
6: uF20gDelBhqD8H_SXBvP9wdoYdM.roa (hash: 5kyc2PB4MyCO3xQLXylbA12fI8U7MFXjthZystH1uCM=)
7: xNxFBI381uPH5ZExRW-GfLm6Rfg.roa (hash: vZwid8rlWfhpqTNd90KDkyYvVw1rv2g5tIEub9g+uLI=)
8: yuZ207ZJKtZoW9jfm_MLQlQ6DH0.roa (hash: YnYml4UkB8mK1DtGV4RcykMNaOP/4CH8hUy+LRFYkt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:8e:94:48:db:8a:5c:4a:76:ac:f8:fd:0d:36:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Mar 26 01:00:51 2026 GMT
Not After : Mar 27 01:00:51 2026 GMT
Subject: CN=ec4caf995c3389669eb2c8401b6d98101157b31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:be:05:d2:8a:d9:60:db:46:df:af:e2:69:
eb:dc:4f:2c:7f:6b:05:0e:c2:0c:2e:4f:25:55:a6:
53:a8:06:79:9f:d2:47:9e:d6:6a:d4:a6:48:97:c9:
f4:4a:50:0c:8e:3b:1f:1d:63:8a:be:09:77:d1:48:
90:12:16:95:6a:79:3f:02:9e:a4:c1:5a:9b:bc:0d:
b0:09:bd:00:69:3d:df:a9:3e:b6:f7:94:4b:8e:1c:
55:f9:6e:2f:11:a2:79:47:be:31:9c:2a:7d:36:fa:
68:82:92:1d:4d:55:b2:ae:04:6d:af:95:24:d6:74:
17:11:b6:68:67:fb:a7:c9:5a:4f:2a:bc:99:76:fc:
b6:b8:64:e9:e6:d8:ac:fe:2e:7c:41:b1:90:5e:23:
d9:2a:63:db:3c:c7:97:c3:27:3f:9a:e1:af:f1:ed:
58:b6:01:ee:1c:82:b5:e6:f4:6e:a0:a9:67:65:e4:
9b:c4:ba:1b:48:5c:0a:52:1a:f3:ab:e1:3f:b9:38:
6b:a2:91:15:0c:d3:ae:35:c9:6d:0b:bd:d8:4d:34:
f6:f9:61:9d:7c:66:f1:a1:86:25:b0:99:83:25:01:
ba:66:82:2d:5b:01:4e:ed:51:a7:a5:2f:2a:ca:59:
0e:c7:d9:59:f3:10:39:e4:76:83:6d:50:66:63:75:
d6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4C:AF:99:5C:33:89:66:9E:B2:C8:40:1B:6D:98:10:11:57:B3:1B
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0b:df:c1:2b:69:c4:dd:d0:0e:ae:76:87:a8:22:1e:2e:30:
f8:7e:0d:d4:f2:87:9b:80:ed:6c:99:7b:1a:fa:24:63:3e:f3:
91:aa:17:06:62:9d:99:67:ac:12:3e:85:9d:0b:de:9e:e5:36:
13:f8:e6:09:78:f3:42:96:95:18:95:78:32:ff:44:0e:dd:88:
c2:ae:e0:7a:fe:95:d5:73:fb:2a:a0:3f:4e:9f:53:1e:7d:c4:
c2:00:3e:a4:20:0d:31:c3:fa:db:2d:4d:4b:34:c2:f0:a5:d2:
27:ca:c1:26:b2:0d:81:99:4d:f9:07:6e:b9:ab:71:22:38:18:
ff:13:2a:a0:5d:0f:d4:fe:0a:da:f3:a8:46:28:65:62:ee:68:
3d:04:90:ec:e0:25:af:86:00:6d:4f:74:52:c7:a9:44:b2:0c:
6f:a1:7c:0f:1e:76:f4:20:ed:3d:55:02:30:3d:00:89:8b:7f:
1a:c0:8b:b5:0a:1b:3e:60:e5:65:29:a2:67:c2:3d:98:a4:f9:
bb:28:05:f4:0f:f6:f1:e0:27:bf:3d:1f:81:13:bd:7e:1a:13:
e1:18:5d:9b:7f:6c:99:d7:23:1a:8d:3a:79:95:b3:14:0e:bb:
c2:74:b8:c0:93:19:e4:96:83:f9:b5:4a:b0:a4:e2:9a:87:76:
8b:f5:60:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:57 2026 by rpki-client