Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: IIb0ecviwg+vgkl9MvM9v3zP0Z1z9tBGWkXg5snfdMU=
Subject key identifier: 9E:07:30:A4:01:A3:8F:79:CF:F1:06:52:34:6D:F8:A9:D6:71:E7:49
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 019E1EDA69271729371B4A92E24B44350985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 124F
Signing time: Wed 13 May 2026 01:01:30 +0000
Manifest this update: Wed 13 May 2026 01:01:30 +0000
Manifest next update: Thu 14 May 2026 01:01:30 +0000
Files and hashes: 1: 2LHgN_7jeOEmEp49TXPoGseMKE0.roa (hash: u3Ghkv3e1+pxpIVGrLETupfGggN3KGBiZERj/lx/mTg=)
2: BAmnsqa1Y3XwAhWIBdg_rlIiwQQ.roa (hash: CmXIqWWi6a32pBcCEhmjtOH3aPdFD9JpfLL82hDwVT8=)
3: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: zFBp/a9oymIBfuWPpcGduoUylWzyk7gAARpMXpgMrFs=)
4: D0UZ3ILhNCgnCNWzBa3mcwr0Pno.roa (hash: 7TfPe1F/LyooXh4AcQzOEBSmrk6QV7hbqByjjSb/LoE=)
5: irmbqhZvbLwDaadAvsOuO73Fv60.roa (hash: slmG+791rR4vbKBt2GX9vt+pbLQ300ChM1656gXpasA=)
6: uF20gDelBhqD8H_SXBvP9wdoYdM.roa (hash: 5kyc2PB4MyCO3xQLXylbA12fI8U7MFXjthZystH1uCM=)
7: xNxFBI381uPH5ZExRW-GfLm6Rfg.roa (hash: vZwid8rlWfhpqTNd90KDkyYvVw1rv2g5tIEub9g+uLI=)
8: yuZ207ZJKtZoW9jfm_MLQlQ6DH0.roa (hash: YnYml4UkB8mK1DtGV4RcykMNaOP/4CH8hUy+LRFYkt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:69:27:17:29:37:1b:4a:92:e2:4b:44:35:09:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: May 13 01:01:30 2026 GMT
Not After : May 14 01:01:30 2026 GMT
Subject: CN=9e0730a401a38f79cff10652346df8a9d671e749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:09:aa:aa:02:dd:be:79:21:47:46:a7:cd:d5:
c3:44:dd:dd:e5:62:0f:93:55:8e:9c:a1:a6:1a:aa:
6f:e8:f0:c2:33:62:20:63:f9:34:09:e0:be:b7:bb:
6b:ac:6e:f8:aa:23:cc:29:c4:0d:bd:67:28:8f:68:
fa:4a:ba:c3:93:e0:f0:ec:94:69:f2:c6:5e:39:dd:
14:90:0d:42:c5:bb:70:98:4a:29:f0:d2:1b:32:70:
3d:5f:05:fe:cf:33:31:ca:ad:8f:33:28:0a:9e:8c:
c2:32:79:67:3c:f6:e0:19:8a:4c:cb:d6:48:90:e5:
e2:94:59:12:7e:d5:cd:42:96:61:ee:07:e6:75:87:
1e:44:e5:4e:4e:39:e7:97:db:19:48:8e:95:ff:a7:
e8:67:7a:26:03:7c:4b:1e:37:39:92:f2:02:82:02:
36:83:e1:ee:ad:bd:0b:f2:1b:8c:bc:3a:b6:5e:52:
a7:dd:56:42:cf:6a:32:41:3c:0f:3a:6b:23:6a:75:
a8:2a:27:32:77:97:b4:6a:be:1d:a4:f2:4e:5f:89:
7c:0f:82:b8:9d:b7:4d:43:77:19:3a:46:55:62:54:
26:c2:3b:bc:08:80:d6:e3:3d:da:a0:bd:ff:a8:a5:
07:bd:75:5a:15:0f:33:7b:ac:22:94:8a:fe:0a:ae:
79:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:07:30:A4:01:A3:8F:79:CF:F1:06:52:34:6D:F8:A9:D6:71:E7:49
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:af:39:54:f5:97:a0:52:b0:40:5e:da:3c:ce:05:83:b9:41:
50:54:5d:90:d2:a6:f4:8c:4a:d8:5b:0c:3c:be:60:a0:d7:73:
9e:2d:9f:df:df:00:d9:6c:46:61:dc:0b:cd:74:a5:3a:93:2f:
0b:7e:aa:6b:9a:a3:28:f8:4e:39:ba:93:49:6c:82:44:67:3e:
bc:84:9a:5e:e9:e3:63:4f:1a:66:96:c5:88:26:c4:c1:cb:63:
0f:c5:e0:cc:c6:0b:7a:25:27:86:e6:57:0a:f6:8f:aa:6c:8e:
9a:80:75:4f:81:de:29:be:a0:3f:2a:69:a3:bf:e7:1e:cc:0d:
19:8d:39:da:0e:fc:c3:15:26:66:d1:99:43:70:ea:06:86:6d:
dc:df:e4:8c:a2:0a:4d:81:6b:b2:0f:bb:21:42:10:19:32:a8:
1e:ed:c5:72:3c:f0:fe:43:a9:9d:8d:a0:4f:0a:9e:47:d5:0a:
bc:3d:61:48:8a:64:97:e1:d8:b6:e5:f3:b8:44:3b:21:cf:55:
ab:21:81:2d:ed:0d:b6:ae:b4:44:f8:27:7a:59:0d:29:f6:aa:
8c:35:80:5e:8e:cb:35:3c:0a:e7:d7:95:7c:db:80:97:f9:6c:
b2:95:54:db:01:eb:58:09:86:77:56:4a:35:8c:3c:cf:23:98:
6b:df:e8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:29:52 2026 by rpki-client