Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: M0QOc0iJt7BP5Bg+HJcXZ1FvsaFMlcdIajzIUfaLDNk=
Subject key identifier: 5A:93:D4:DF:B1:7B:1C:CE:42:19:38:59:97:40:36:14:78:BB:EB:16
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 01A0D804CD251D45D1610995B094A3BDDE6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 13B8
Signing time: Fri 25 Sep 2026 10:03:08 +0000
Manifest this update: Fri 25 Sep 2026 10:03:08 +0000
Manifest next update: Sat 26 Sep 2026 10:03:08 +0000
Files and hashes: 1: 2LHgN_7jeOEmEp49TXPoGseMKE0.roa (hash: u3Ghkv3e1+pxpIVGrLETupfGggN3KGBiZERj/lx/mTg=)
2: BAmnsqa1Y3XwAhWIBdg_rlIiwQQ.roa (hash: CmXIqWWi6a32pBcCEhmjtOH3aPdFD9JpfLL82hDwVT8=)
3: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: GwA6a031VzXBUOoCcG3z/Qp9k9TIsB9FE7sRJrL9Krk=)
4: D0UZ3ILhNCgnCNWzBa3mcwr0Pno.roa (hash: 7TfPe1F/LyooXh4AcQzOEBSmrk6QV7hbqByjjSb/LoE=)
5: irmbqhZvbLwDaadAvsOuO73Fv60.roa (hash: slmG+791rR4vbKBt2GX9vt+pbLQ300ChM1656gXpasA=)
6: uF20gDelBhqD8H_SXBvP9wdoYdM.roa (hash: 5kyc2PB4MyCO3xQLXylbA12fI8U7MFXjthZystH1uCM=)
7: xNxFBI381uPH5ZExRW-GfLm6Rfg.roa (hash: vZwid8rlWfhpqTNd90KDkyYvVw1rv2g5tIEub9g+uLI=)
8: yuZ207ZJKtZoW9jfm_MLQlQ6DH0.roa (hash: YnYml4UkB8mK1DtGV4RcykMNaOP/4CH8hUy+LRFYkt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:cd:25:1d:45:d1:61:09:95:b0:94:a3:bd:de:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Sep 25 10:03:08 2026 GMT
Not After : Sep 26 10:03:08 2026 GMT
Subject: CN=5a93d4dfb17b1cce421938599740361478bbeb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:74:0d:bb:e7:db:7e:12:34:e7:19:18:25:0b:
90:29:f9:e5:7e:b4:2e:fb:d3:3e:f5:20:0d:67:66:
9b:f0:3c:52:c8:e4:a6:02:86:53:a6:7c:52:46:a8:
be:b8:30:41:d7:f8:54:27:a6:27:f2:49:bf:e0:dd:
43:75:57:63:23:2c:1f:7c:97:1a:81:c8:26:81:1d:
83:e1:a2:a0:6c:f2:0c:0a:5b:61:9f:89:47:24:d6:
35:9c:38:fb:50:e0:19:59:86:9f:7d:c9:db:50:0e:
50:93:e6:f1:13:6a:a1:b1:7b:58:96:26:e3:a0:3f:
ac:f2:17:2d:73:34:db:8c:87:02:4b:68:d8:0c:d2:
1c:dd:83:50:42:5f:5a:ba:2d:4d:10:64:e7:6c:73:
e3:79:52:7e:ad:5d:5e:a7:ed:61:7d:22:e4:89:d1:
fd:0f:53:dc:af:c1:49:e0:37:7f:4d:ce:01:8a:b3:
bc:e5:fe:c5:78:2a:ae:45:b3:8c:c9:68:e7:3c:49:
d0:06:b6:8d:df:48:43:66:ad:d1:c7:af:6c:ad:b1:
da:a0:3f:78:45:cd:32:c2:78:12:bf:e8:19:d1:40:
d8:b2:26:88:a8:8e:a3:e9:60:7a:06:f5:b3:d6:6a:
1c:3c:5c:a0:14:31:ae:a0:bc:a1:30:f0:71:a7:b3:
fd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:93:D4:DF:B1:7B:1C:CE:42:19:38:59:97:40:36:14:78:BB:EB:16
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f2:e3:d1:d9:65:f2:4e:a6:cc:13:3c:85:4e:79:e9:c5:15:
d0:74:4d:bc:d4:53:97:3a:82:32:1b:8a:92:0b:89:db:43:ab:
de:00:d5:e1:12:ce:67:e8:5b:80:9f:05:e5:24:84:7c:97:66:
b0:a9:60:a9:12:02:82:9c:46:f3:15:15:e6:d1:db:9c:9b:b9:
75:ae:2c:2c:28:f1:f2:f0:77:09:57:3e:83:ed:b0:ff:01:78:
86:81:b6:77:93:57:a2:92:c0:af:3d:48:2a:b1:a8:35:1b:eb:
72:0d:9a:14:86:80:14:79:a9:59:a6:48:cd:f8:95:c7:ff:83:
03:17:e9:4a:0f:9c:e0:92:eb:6c:65:39:fc:e0:4c:02:5c:45:
3d:2b:5f:d0:f8:73:d7:87:0d:c2:2e:5b:c8:79:6e:ce:1d:86:
31:66:d2:da:59:41:c0:64:48:8f:73:0e:c4:2f:22:c0:03:3e:
9c:dd:b2:4e:e6:24:d8:03:11:63:57:55:f5:b9:d0:dd:e3:eb:
e4:aa:bb:71:95:5d:95:3b:1a:ac:f4:67:05:0c:ea:ee:30:0c:
19:16:37:32:d1:2d:7a:a2:54:60:1c:4b:3e:fa:d2:ea:fa:08:
74:ef:ab:8a:69:4d:c8:a9:4c:47:55:e1:f3:8c:79:31:35:78:
b3:d3:bf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:36:25 2026 by rpki-client