Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: W2IvdO209s8vmitHp1H/t8u42OHH/3jXgs5bGZaPNqw=
Subject key identifier: FA:30:CB:2A:57:3C:E8:60:6E:AE:E8:82:85:DA:F2:57:A2:45:F5:06
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 01A1CA0DBFE451E9189FF7B5DA6A2A43FC70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 0FB1
Signing time: Wed 11 Nov 2026 10:01:01 +0000
Manifest this update: Wed 11 Nov 2026 10:01:01 +0000
Manifest next update: Thu 12 Nov 2026 10:01:01 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: XH82UyzBGCZ4/k1G6xLAfyvYWr7l4ZLuQF7SdtX01Xk=)
2: bEo8_8O2mw7PwZ1Q1MJJqc3Br9c.roa (hash: J6cPpgVeMRsfnWXOAjdK3KoD47LW/HrK99BGJHxHOac=)
3: mwL6ugxhwkwsvxWzk5gpM438ER0.roa (hash: MzMEcGzrb78MmWAPB5Ny/yePKvNxTfYRGwcwpRrll8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:0d:bf:e4:51:e9:18:9f:f7:b5:da:6a:2a:43:fc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Nov 11 10:01:01 2026 GMT
Not After : Nov 12 10:01:01 2026 GMT
Subject: CN=fa30cb2a573ce8606eaee88285daf257a245f506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:c3:84:f3:56:a6:94:d5:59:59:01:21:86:
d5:56:06:ae:94:b7:f2:c0:5e:f3:bc:13:2a:5a:9b:
ff:62:69:6b:1d:54:b0:67:20:7e:8a:08:3c:e9:ef:
0e:61:c0:d2:27:10:97:01:7a:e1:ec:96:55:77:51:
cf:a6:0a:0e:e5:7e:7f:d4:b9:88:f7:dd:2f:e8:be:
84:d1:d8:4e:84:f3:75:56:e8:e3:1b:ed:03:63:be:
68:4a:1a:b6:2a:8c:ed:90:70:fb:73:89:8c:d1:62:
66:0e:7b:bf:a7:ec:06:02:a4:e8:1a:7f:61:d9:0e:
5e:60:d2:bb:75:3a:04:9a:26:71:d8:e7:57:14:a0:
0a:1c:d1:96:52:dd:f3:60:bc:62:aa:54:dc:8c:d1:
8e:b4:67:6c:5d:c8:48:65:eb:69:fb:f2:41:48:60:
72:c2:92:1b:62:69:79:f8:8a:c4:f6:2a:dd:d5:2b:
77:76:65:fa:aa:98:49:e5:28:86:9b:c9:93:62:8d:
1e:cd:61:1a:71:31:49:ce:ef:ad:17:46:c8:a6:54:
ef:20:17:12:ac:85:41:50:09:de:8c:0d:5c:41:4b:
0d:9b:04:98:17:b4:13:72:33:37:7f:0e:8f:fc:cf:
8f:5f:f0:c4:3f:54:d7:d6:9a:b8:9f:e9:c0:08:38:
e2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:30:CB:2A:57:3C:E8:60:6E:AE:E8:82:85:DA:F2:57:A2:45:F5:06
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:35:07:35:2a:1e:b1:e5:51:2f:a7:3f:a4:1e:e4:c7:7e:1f:
f3:5c:f5:94:46:01:28:23:ad:91:c5:30:2a:60:85:ac:a3:ff:
90:95:77:c3:d9:3f:42:ab:4f:ac:78:5d:1a:16:5a:99:82:45:
24:f1:2e:25:91:24:02:41:1f:01:1f:59:30:fd:63:58:71:08:
ef:8c:81:4d:86:2d:d7:9a:0c:90:03:bb:ff:45:01:16:e9:25:
da:19:10:a5:b9:c2:c4:40:50:e5:1c:3b:45:ee:96:15:c8:1a:
b7:ed:91:a3:33:70:0f:df:5c:7b:0b:71:2d:da:8f:71:6b:cb:
33:ce:c1:86:fc:a8:ee:dd:ae:6d:b8:53:3c:4c:f5:fe:ff:dc:
38:7b:41:04:77:e7:91:cd:f0:90:83:79:f6:98:5b:48:10:57:
c9:bc:c1:cd:05:84:af:0b:4a:05:0f:ca:49:18:bb:15:d9:aa:
20:9f:ae:b7:1c:f3:bd:95:70:b9:b3:f7:00:27:d4:c6:e0:f3:
90:38:80:3c:df:e5:f2:63:1d:40:37:eb:d3:36:12:e8:86:bc:
5e:ed:0e:d5:13:cd:bc:b1:02:3c:9f:4d:29:6f:14:3e:d6:df:
00:de:f0:f7:2a:e6:b8:d1:d9:f9:6c:a4:19:df:50:7e:34:88:
9a:c4:e8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 20:47:04 2026 by rpki-client