Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: AvIEJedIYsr1VTcQsQSvQ18SUy9sa6+pvVKqYyznhCE=
Subject key identifier: B2:05:7A:3C:DF:33:85:8A:C7:93:40:48:77:9C:F3:13:0A:29:DA:AF
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 01A0CB223FA93F590A5C072ACCF80025D98E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 0F2D
Signing time: Tue 22 Sep 2026 22:00:14 +0000
Manifest this update: Tue 22 Sep 2026 22:00:14 +0000
Manifest next update: Wed 23 Sep 2026 22:00:14 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: bBxpSuvc6DzA4bzfF1gZeXvP2Y5uYNY+gA4w23MX5SI=)
2: bEo8_8O2mw7PwZ1Q1MJJqc3Br9c.roa (hash: J6cPpgVeMRsfnWXOAjdK3KoD47LW/HrK99BGJHxHOac=)
3: mwL6ugxhwkwsvxWzk5gpM438ER0.roa (hash: MzMEcGzrb78MmWAPB5Ny/yePKvNxTfYRGwcwpRrll8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:3f:a9:3f:59:0a:5c:07:2a:cc:f8:00:25:d9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Sep 22 22:00:14 2026 GMT
Not After : Sep 23 22:00:14 2026 GMT
Subject: CN=b2057a3cdf33858ac7934048779cf3130a29daaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:b8:c0:ea:d1:9b:15:54:a9:33:57:3a:e6:
5f:43:4f:0d:d0:8b:57:e4:80:97:a7:f6:a4:e0:25:
e9:33:7b:e9:d9:de:d1:bf:c2:aa:b6:c9:ed:c3:7b:
13:89:8d:ce:a5:18:b5:7d:3b:23:d3:d6:49:3d:f8:
87:9c:82:67:7f:1e:5c:23:71:ed:01:27:41:89:a2:
71:a3:50:64:9a:bc:53:a3:f4:cd:ea:13:25:6a:19:
45:b1:12:f4:08:c2:ae:d3:bf:9e:a3:f9:90:fc:69:
bc:1d:25:47:8c:a9:f9:71:db:71:35:90:47:86:33:
c9:c3:06:3e:26:b0:06:98:ae:27:05:e1:41:59:4b:
81:28:ea:92:13:04:fa:46:0f:59:6c:d7:78:96:16:
a2:46:1d:b4:79:da:24:0b:f7:b0:fd:47:56:09:29:
7c:1e:9a:bb:6f:23:57:69:70:b3:ad:78:1c:89:54:
f0:10:9e:f9:e9:ff:54:36:e7:54:aa:ad:d2:4a:f2:
c9:aa:0e:21:3e:1a:04:79:9e:48:99:39:a7:c6:92:
44:e2:3e:7c:22:a1:bf:ed:66:58:04:3f:f9:93:d6:
74:ef:c0:a9:12:98:7f:77:6f:57:d7:5d:b9:b6:2d:
0a:8b:9c:5a:70:26:b5:b4:71:ce:4b:2c:b5:ac:c6:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:05:7A:3C:DF:33:85:8A:C7:93:40:48:77:9C:F3:13:0A:29:DA:AF
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:92:59:59:86:e7:cc:72:74:c9:c5:9e:97:a9:b5:65:34:d6:
59:bb:67:ba:53:ad:2d:23:b7:2e:6d:12:e3:dc:c2:58:e5:33:
c3:ae:1d:37:e2:71:c7:a6:f2:73:7a:a1:a3:29:f4:81:0b:d7:
2e:94:7f:67:a0:b4:44:26:cc:eb:d3:9f:cb:31:99:b4:28:1b:
b3:b8:fc:51:ad:57:3b:e7:0e:2b:a4:45:11:ba:31:97:b1:b7:
1b:fc:2b:40:cb:30:03:96:04:22:72:31:6e:7f:d9:03:6f:b9:
55:ab:ed:72:1e:b4:31:db:db:4c:8b:1e:87:fa:11:8b:62:a5:
68:bd:1d:18:b8:a8:f4:cf:99:fc:30:93:ce:e1:fa:cd:21:a1:
43:91:9f:2a:81:a8:5d:94:3d:32:5f:7a:91:cb:ee:84:e0:93:
76:3a:c3:eb:67:20:65:eb:16:bc:bc:d7:f0:39:d8:6e:d4:a0:
93:9f:05:e4:61:a0:3c:37:cd:38:1e:7f:5e:05:0f:97:f3:cc:
9b:37:fc:d1:5f:b1:b9:9e:b0:22:df:f8:ed:6c:1a:53:73:d1:
6c:00:b4:39:ae:20:20:80:5f:47:54:97:a9:7d:48:e9:47:51:
6b:8c:35:07:8f:9e:56:fd:8a:0a:79:5e:8f:fb:c9:f2:0a:f3:
32:0e:0a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:05:12 2026 by rpki-client