Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: 9jnAUxf8pp997OtxDFVV96jlxDO6svNPLHxi4B/PF80=
Subject key identifier: FE:25:2B:69:F5:02:87:C8:3D:F4:08:E1:AE:DE:21:74:A1:6F:A3:37
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 019D265ED8F229247001989A794CC4F1A088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 0D4A
Signing time: Wed 25 Mar 2026 19:00:43 +0000
Manifest this update: Wed 25 Mar 2026 19:00:43 +0000
Manifest next update: Thu 26 Mar 2026 19:00:43 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: Lik8swB+QFD7GwJKSO+oFFc7gLPMAQDSX+bzVCkKHWs=)
2: bEo8_8O2mw7PwZ1Q1MJJqc3Br9c.roa (hash: J6cPpgVeMRsfnWXOAjdK3KoD47LW/HrK99BGJHxHOac=)
3: mwL6ugxhwkwsvxWzk5gpM438ER0.roa (hash: MzMEcGzrb78MmWAPB5Ny/yePKvNxTfYRGwcwpRrll8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:d8:f2:29:24:70:01:98:9a:79:4c:c4:f1:a0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Mar 25 19:00:43 2026 GMT
Not After : Mar 26 19:00:43 2026 GMT
Subject: CN=fe252b69f50287c83df408e1aede2174a16fa337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:f8:85:40:ec:ac:ec:8c:1a:8f:13:4c:8b:
d0:be:2d:ef:83:df:b0:72:09:4e:2e:2f:46:cd:ca:
a8:8b:cd:f0:64:af:c6:80:6a:ae:ed:d7:19:14:ec:
ca:55:76:7e:c7:72:c1:29:62:e3:52:14:3e:5e:8f:
aa:9c:f8:40:dc:e7:d8:ea:c7:69:43:86:9f:9d:e4:
bf:55:05:98:08:15:b8:d6:e8:a3:a9:ba:d2:61:53:
93:43:b1:0a:59:fe:75:6d:da:0a:81:24:a2:20:ff:
93:9b:d7:24:2b:31:17:40:72:02:a7:cf:9f:5b:41:
ba:51:00:d0:e3:2d:fe:c1:1d:c7:2d:99:ba:c3:06:
74:28:ac:9f:62:39:c4:f7:22:a7:d6:a6:82:08:39:
27:d7:80:9a:76:a4:de:fa:8c:d6:ef:1d:fb:da:97:
c2:b6:83:db:c8:49:21:72:1a:29:db:ad:74:60:02:
b8:1c:79:ad:b4:e1:85:eb:50:35:5a:e0:55:0f:63:
11:65:a9:10:0b:60:b1:0f:4d:b4:ae:5a:a2:30:0d:
75:3f:7f:d9:7c:f8:89:63:d6:8d:1f:7b:2b:74:e9:
66:b3:34:7c:ce:f6:e6:43:96:35:a3:2c:bd:23:b2:
5f:53:27:31:d6:54:08:3f:6e:51:1b:58:9e:01:fa:
eb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:25:2B:69:F5:02:87:C8:3D:F4:08:E1:AE:DE:21:74:A1:6F:A3:37
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:47:28:6f:0a:f6:7f:6d:08:0b:3f:3e:1e:82:93:4e:e0:57:
8a:72:8a:5f:e2:06:4b:2f:e9:d9:1d:7c:65:c3:75:d0:55:a2:
be:e1:fa:ab:ba:24:31:b7:f1:ca:5d:c0:41:5f:12:8c:6b:2c:
d6:af:2d:b9:67:b2:20:06:ae:79:5e:5c:95:51:52:3b:99:6b:
9e:77:e2:6b:24:83:0d:44:28:8c:66:4b:c0:07:0e:d4:79:ec:
e7:71:3b:5d:d2:eb:a0:9a:99:2a:b4:25:9f:a3:44:1a:c3:b5:
1d:5a:5e:8e:7a:f5:ac:6c:2a:8d:77:0b:39:68:92:e3:b0:ff:
06:d9:11:c5:2d:e5:75:b4:bb:f6:2b:80:d6:c3:b5:c5:9c:2f:
80:56:69:fd:6c:f3:95:ab:05:82:bc:e5:62:9f:ad:56:cf:6a:
35:5f:31:46:78:c9:6e:f6:10:05:5c:86:2f:d5:7d:c2:33:da:
0d:e0:b9:1d:0b:b6:db:64:63:5b:3a:25:9f:92:52:0c:0e:f6:
0c:a6:c4:d6:c6:17:2c:e9:66:50:9a:a3:82:d7:d1:77:c7:65:
11:0a:28:f8:b9:52:5b:45:e0:11:6e:51:25:d6:a6:9c:c7:d4:
70:17:04:63:8f:49:71:e7:c0:2f:7f:1a:22:c6:ac:2b:d5:de:
70:a8:09:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:23:31 2026 by rpki-client