Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
File: BkwamGxZM6O5EIToo_8IBm05jhk.mft (raw, json)
Hash identifier: yfCA9xFnQISuHPU3fRq3O+IZin5jj8a87JmxRQnj0kE=
Subject key identifier: 5D:DE:A3:11:22:5F:42:F5:8F:8F:10:FE:4E:92:E5:0B:0A:FC:98:92
Authority key identifier: 06:4C:1A:98:6C:59:33:A3:B9:10:84:E8:A3:FF:08:06:6D:39:8E:19
Certificate issuer: /CN=064c1a986c5933a3b91084e8a3ff08066d398e19
Certificate serial: 01A0D383C45E07902A8E635ABA71D94F147F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
Manifest number: 0E7D
Signing time: Thu 24 Sep 2026 13:03:43 +0000
Manifest this update: Thu 24 Sep 2026 13:03:43 +0000
Manifest next update: Fri 25 Sep 2026 13:03:43 +0000
Files and hashes: 1: BkwamGxZM6O5EIToo_8IBm05jhk.crl (hash: PxQKXbCIK4TsmrmQMtrGNu0pk94pjFsV/Ku5HX/8470=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:c4:5e:07:90:2a:8e:63:5a:ba:71:d9:4f:14:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064c1a986c5933a3b91084e8a3ff08066d398e19
Validity
Not Before: Sep 24 13:03:43 2026 GMT
Not After : Sep 25 13:03:43 2026 GMT
Subject: CN=5ddea311225f42f58f8f10fe4e92e50b0afc9892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:38:53:09:9b:a3:15:1a:54:6b:a0:57:3a:75:
97:d6:94:f9:09:6a:d4:c2:d7:93:53:62:11:89:f5:
d1:d1:3a:05:ea:5d:12:14:3a:a8:22:28:53:a5:d2:
a6:d1:e3:52:ac:a0:97:8b:61:0e:26:47:af:09:58:
04:c9:59:1f:f0:72:37:c2:41:be:cb:0f:b7:ba:ff:
25:72:f4:08:56:d1:c4:9b:dc:34:b4:e4:e1:66:a1:
bf:d9:33:42:ee:ff:ed:cb:0d:34:3d:c1:21:31:cb:
b9:f3:19:fa:03:2c:79:34:e9:1d:35:ef:84:aa:5e:
7d:d3:59:79:2d:e4:37:a4:71:43:3f:61:6a:83:0d:
29:9d:ad:00:b1:89:49:da:6c:27:96:82:25:95:db:
e4:44:8f:5c:06:e9:76:1b:f1:54:03:be:03:92:cd:
bf:64:6b:7c:48:c4:12:fc:bb:f0:ae:a3:9f:6d:b7:
b9:a0:e3:cf:f3:f1:08:ca:2b:07:31:3b:ca:e8:60:
fe:91:fb:62:2c:d1:24:c5:d6:bf:3a:8a:98:f4:6a:
54:3f:19:73:6c:8f:bb:13:e6:f2:12:05:76:1e:cb:
db:c4:01:fa:ac:53:92:cb:55:90:cb:75:89:ec:6b:
14:7d:2f:a1:6c:cd:10:6d:a9:c9:84:dc:02:b5:4b:
40:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DE:A3:11:22:5F:42:F5:8F:8F:10:FE:4E:92:E5:0B:0A:FC:98:92
X509v3 Authority Key Identifier:
keyid:06:4C:1A:98:6C:59:33:A3:B9:10:84:E8:A3:FF:08:06:6D:39:8E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ef:36:ef:0c:3d:4a:85:4b:f7:d5:bb:39:93:01:a5:f0:36:
9d:fc:41:68:c1:60:10:c7:56:dd:c9:a3:29:f7:ca:45:55:43:
2f:50:7e:6a:2d:1e:8d:14:c4:1e:90:8f:e6:2e:8f:51:19:9c:
4a:c1:ef:91:42:ad:9e:ea:08:0a:83:ee:2a:2c:a0:10:9a:cf:
8d:8a:e4:b8:4b:7f:a1:6a:6d:ff:77:fd:a3:4d:ca:2e:f7:7e:
1f:e1:97:25:cc:0b:1e:a7:21:a5:06:cf:77:84:75:5c:ea:8d:
98:4c:96:10:d3:7e:94:2e:80:78:51:b5:2a:fb:9a:0c:4f:75:
a7:34:51:c3:0a:14:f0:7e:cc:e5:eb:f0:41:f2:b3:31:0c:a4:
fe:01:7a:1d:93:3e:3d:a4:32:fc:bf:0f:23:ef:56:4b:99:26:
ce:f1:8f:77:f9:55:d4:84:1c:1e:7d:ce:11:12:36:c6:32:bb:
00:1a:69:42:5a:56:19:7b:74:a6:e5:53:e6:18:42:69:cd:96:
4d:b8:06:4e:34:97:98:8a:b7:fa:af:3d:3b:5a:b3:7d:6e:38:
0e:d4:ad:e6:e3:3d:0f:5c:c9:4c:1f:7c:90:7c:31:88:bb:9b:
f0:a8:d3:16:45:4e:57:60:1b:3b:3a:b5:d0:46:a1:dd:b1:20:
f8:3a:a9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:38:45 2026 by rpki-client