Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
File: BkwamGxZM6O5EIToo_8IBm05jhk.mft (raw, json)
Hash identifier: HCE51/32bxp+56bWkBkcHQee75k0Nm0nDFH/l9AKKW0=
Subject key identifier: 9E:45:47:AB:FF:64:7B:69:A4:F0:5D:39:E6:3F:E7:AB:E5:FD:36:C0
Authority key identifier: 06:4C:1A:98:6C:59:33:A3:B9:10:84:E8:A3:FF:08:06:6D:39:8E:19
Certificate issuer: /CN=064c1a986c5933a3b91084e8a3ff08066d398e19
Certificate serial: 019F92ED742F3708450D7C512AD743CD6685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
Manifest number: 0DD7
Signing time: Fri 24 Jul 2026 07:01:02 +0000
Manifest this update: Fri 24 Jul 2026 07:01:02 +0000
Manifest next update: Sat 25 Jul 2026 07:01:02 +0000
Files and hashes: 1: BkwamGxZM6O5EIToo_8IBm05jhk.crl (hash: TvFKh09+PPf+xMEsyLevJE5VIDMvOm0BhwF9lslQ7CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:74:2f:37:08:45:0d:7c:51:2a:d7:43:cd:66:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064c1a986c5933a3b91084e8a3ff08066d398e19
Validity
Not Before: Jul 24 07:01:02 2026 GMT
Not After : Jul 25 07:01:02 2026 GMT
Subject: CN=9e4547abff647b69a4f05d39e63fe7abe5fd36c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:ed:e8:32:26:52:96:bd:f2:3f:d8:8f:bd:
9b:fa:10:97:fd:d8:7b:6f:5b:09:26:e8:1f:80:bf:
35:b0:f9:c5:82:f7:d9:12:d8:56:d3:d7:f7:4a:aa:
8d:b4:0b:5e:ed:ee:e4:88:93:db:ce:00:3c:9a:c9:
9d:66:c3:32:79:7d:44:d6:b4:07:49:3d:bc:44:24:
99:2d:50:6c:05:30:9f:86:4c:c5:02:93:3f:41:8f:
a1:2c:c1:f4:36:40:7b:21:e8:34:e6:8a:d7:93:95:
f0:1a:bc:20:f8:c1:c6:85:4c:7e:0f:96:8c:91:67:
35:a3:84:a9:41:eb:6d:4b:dc:ca:74:83:7c:6c:75:
6c:86:31:b5:3c:10:c9:23:e6:02:5a:a8:ce:2c:c5:
26:b8:25:af:ae:e4:ce:ec:47:dc:09:43:29:bb:f5:
72:1e:04:8a:e8:f7:b0:14:05:aa:dd:cf:0b:34:2b:
2a:de:a6:ae:12:35:df:c1:68:0f:70:b0:69:8b:81:
a0:4d:70:f1:c4:24:eb:f3:c2:cc:73:dd:b7:81:80:
30:30:49:2f:f8:34:dd:37:1a:c3:95:8e:37:f4:83:
a8:59:d6:63:13:65:bf:3b:a9:7e:3b:2b:e8:51:38:
d8:40:e2:24:b2:1f:93:ee:b4:27:ee:5c:4f:2f:42:
46:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:45:47:AB:FF:64:7B:69:A4:F0:5D:39:E6:3F:E7:AB:E5:FD:36:C0
X509v3 Authority Key Identifier:
keyid:06:4C:1A:98:6C:59:33:A3:B9:10:84:E8:A3:FF:08:06:6D:39:8E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ae:51:29:bd:4a:fc:8d:0a:32:eb:a2:14:ad:bb:9a:1a:e9:
10:6a:68:1e:c4:90:ab:54:78:94:78:5e:7a:94:c3:5f:70:67:
f6:ea:21:a4:5e:7b:b6:71:58:34:3c:85:45:6a:87:d6:de:31:
10:42:8f:b6:30:bf:53:0e:09:aa:6f:ef:2d:f4:ce:5b:ef:6a:
f9:87:97:2b:61:2a:6f:02:c7:09:53:42:40:20:c1:69:2f:b0:
3e:15:48:6d:52:22:f1:48:0b:ae:37:3e:02:49:f3:12:f4:e3:
29:e1:dd:ef:46:c2:26:dc:ad:81:93:92:dd:75:56:d2:d3:47:
47:d3:48:b3:ea:6d:73:25:8a:69:75:a3:d0:d0:2f:51:3b:ef:
62:40:2f:b3:26:86:fe:9a:a8:33:a7:c8:83:dc:2d:7a:b8:13:
ed:9f:f0:62:5a:c8:a5:6e:1b:b2:fd:d6:54:4d:14:af:e7:f6:
c7:78:04:b6:76:45:b2:58:61:4c:ec:2b:1b:9f:71:a9:b3:52:
c3:87:c9:1a:82:92:6e:32:ff:86:e1:d0:b7:61:88:23:ec:5f:
62:c2:93:8c:70:ee:b7:fb:44:6d:7c:45:47:db:e3:ac:23:d0:
17:0a:85:5a:74:e5:2f:aa:43:9e:85:a1:0f:43:34:c5:53:c4:
a4:1c:a5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:31:37 2026 by rpki-client