Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: 44ygXSPmCw35cODbTolJ1kgGEeZ6cetjmStSWLB8rCY=
Subject key identifier: 02:F8:BD:BD:29:91:99:77:AE:EA:E4:E3:1F:5F:94:1B:B5:96:09:42
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 019F9059D52284D0C775AB80CE48339540AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 0E8A
Signing time: Thu 23 Jul 2026 19:00:34 +0000
Manifest this update: Thu 23 Jul 2026 19:00:34 +0000
Manifest next update: Fri 24 Jul 2026 19:00:34 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: 2Mt8wGKWZZnESESebvqeMkUA4S9H8kS+6x/5JftLa8I=)
2: bEo8_8O2mw7PwZ1Q1MJJqc3Br9c.roa (hash: J6cPpgVeMRsfnWXOAjdK3KoD47LW/HrK99BGJHxHOac=)
3: mwL6ugxhwkwsvxWzk5gpM438ER0.roa (hash: MzMEcGzrb78MmWAPB5Ny/yePKvNxTfYRGwcwpRrll8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:d5:22:84:d0:c7:75:ab:80:ce:48:33:95:40:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Jul 23 19:00:34 2026 GMT
Not After : Jul 24 19:00:34 2026 GMT
Subject: CN=02f8bdbd29919977aeeae4e31f5f941bb5960942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:89:fb:47:f7:da:56:75:11:b5:5e:53:a3:
6e:33:a6:e0:8b:93:b8:0c:f8:7d:49:fe:37:b1:1c:
d3:0c:0a:7e:b3:45:3f:bc:a7:6c:82:51:a0:c8:19:
0a:34:24:be:fa:40:bf:48:26:1c:dc:de:eb:a8:99:
51:a4:6d:53:02:df:1d:a2:4d:95:0c:14:0d:29:08:
61:00:3c:4f:2b:08:ee:ae:63:18:a6:58:4d:2b:5d:
b9:18:82:7a:7e:57:e9:03:95:99:ea:bc:9c:c7:19:
ac:8e:e5:ba:fb:b2:2e:4b:7b:19:73:ee:1c:24:f2:
ba:b1:c8:56:6c:50:e4:40:49:81:c7:e5:05:ab:d6:
7e:3b:74:69:32:23:0d:d5:42:22:41:2f:34:62:b4:
f3:d6:88:0a:32:2e:54:19:66:08:ff:04:b9:59:b8:
db:f7:c3:83:03:c6:b6:61:0e:b3:1b:a0:9c:6d:49:
15:91:e4:f9:6d:69:ff:b6:d0:96:bb:78:b4:a8:b9:
71:3c:dd:d7:2b:d6:34:3e:bf:a1:92:2e:20:e4:08:
38:fc:b7:c8:31:ef:02:af:f6:62:13:bf:41:a7:ed:
5d:20:b1:c0:3e:bc:c1:67:f2:e1:26:7f:c3:f4:7f:
5f:29:af:15:2d:8f:5f:1f:4d:65:85:54:cc:f3:c2:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F8:BD:BD:29:91:99:77:AE:EA:E4:E3:1F:5F:94:1B:B5:96:09:42
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:68:25:8a:e3:fc:f8:20:7f:87:1c:d5:fd:cf:e0:42:2f:e3:
cd:08:61:4f:39:0e:69:e5:21:53:46:01:32:5d:2f:bd:70:6f:
4b:c4:ac:d7:22:a6:1c:cd:38:9b:cf:86:d0:ce:fe:1e:94:b0:
11:00:2a:b2:67:a2:a5:dd:b6:7d:fd:fe:9e:8d:e2:8f:51:33:
87:9d:56:e8:05:44:09:4b:72:c5:b0:47:90:3e:23:1a:95:a8:
64:26:f7:06:15:ea:eb:01:62:2e:c3:91:fd:2a:d9:16:5e:9b:
3c:75:61:53:a4:a3:c2:93:48:5c:b8:3e:86:49:b1:6e:98:02:
d9:a6:a1:f0:b2:3a:f5:ea:53:8e:92:87:09:55:6e:6a:75:b3:
38:27:d8:58:4f:22:1f:d3:dc:68:01:1e:62:06:95:a0:1e:ae:
94:f7:c3:2b:a0:5b:a3:19:aa:4c:a5:08:8a:1f:35:99:d6:78:
e3:b2:0f:45:3e:7c:0c:a9:23:e6:1a:a7:a8:ac:ed:a0:4c:81:
25:88:45:13:7d:cd:dc:56:3c:bf:bc:8c:e7:89:12:78:be:9b:
7c:71:1a:87:4c:58:7a:2a:41:7e:0f:dd:4f:e4:42:02:5a:e1:
a3:7e:0e:0d:c6:45:4e:70:ef:c2:97:48:f3:d8:f4:2f:ba:d4:
1d:f8:37:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:50:35 2026 by rpki-client