Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
File: BkwamGxZM6O5EIToo_8IBm05jhk.mft (raw, json)
Hash identifier: HAp0yagsllsf3ujlFc77qMUjJ+NiLhAnXR5vpyO4XlU=
Subject key identifier: DE:89:5D:A8:16:68:BE:84:2E:9D:8C:86:32:2D:CE:91:6D:4A:F6:F1
Authority key identifier: 06:4C:1A:98:6C:59:33:A3:B9:10:84:E8:A3:FF:08:06:6D:39:8E:19
Certificate issuer: /CN=064c1a986c5933a3b91084e8a3ff08066d398e19
Certificate serial: 019D2703B237E881A05586A1579E5504F9A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
Manifest number: 0C96
Signing time: Wed 25 Mar 2026 22:00:46 +0000
Manifest this update: Wed 25 Mar 2026 22:00:46 +0000
Manifest next update: Thu 26 Mar 2026 22:00:46 +0000
Files and hashes: 1: BkwamGxZM6O5EIToo_8IBm05jhk.crl (hash: ZnrqBaM+bSmLe15f+I7xeOtzDHs2Dodx0ovXqWmZQiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b2:37:e8:81:a0:55:86:a1:57:9e:55:04:f9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064c1a986c5933a3b91084e8a3ff08066d398e19
Validity
Not Before: Mar 25 22:00:46 2026 GMT
Not After : Mar 26 22:00:46 2026 GMT
Subject: CN=de895da81668be842e9d8c86322dce916d4af6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:7e:89:28:9d:cb:8b:05:05:23:f7:e1:f7:
0b:81:f0:8a:32:58:96:42:5e:be:a8:73:0f:8c:ad:
67:af:23:4a:93:c5:99:9c:56:4d:10:aa:ad:66:0d:
05:5c:cf:93:50:a6:97:05:61:00:33:02:69:1f:4f:
bf:6c:40:41:69:ba:47:fd:55:9b:e9:a0:9c:d2:c4:
f1:b5:4d:3d:4e:04:a6:e2:64:f1:f2:85:20:b4:40:
0f:a5:03:5e:97:ed:35:a3:9e:69:7e:04:a5:c0:0c:
48:02:2d:87:17:33:59:3c:83:74:a9:0c:36:57:f6:
f2:57:66:e2:7c:11:15:05:c9:b5:90:5c:c0:7f:f7:
c4:ab:5e:fd:c5:f1:d2:c7:7a:79:d7:ba:37:e6:ce:
ad:7a:c8:72:cf:71:0c:61:cd:b3:c1:ae:73:19:5c:
d5:f8:2c:f0:de:6d:15:38:1b:65:78:00:f1:50:ef:
38:5f:90:4e:d2:84:6b:e5:00:db:c5:6b:42:dd:b9:
c9:89:e2:e4:c5:37:2c:5c:b1:c7:49:f6:f8:fe:72:
5f:72:34:5e:b1:fd:37:3e:75:8f:ee:74:b5:08:29:
80:68:b1:95:8d:ff:c9:54:1b:f6:d5:92:e7:44:b4:
01:31:58:33:82:27:02:5a:31:88:0c:4d:4a:74:d8:
2f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:89:5D:A8:16:68:BE:84:2E:9D:8C:86:32:2D:CE:91:6D:4A:F6:F1
X509v3 Authority Key Identifier:
keyid:06:4C:1A:98:6C:59:33:A3:B9:10:84:E8:A3:FF:08:06:6D:39:8E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:dd:ba:a6:e1:8e:a3:50:b9:b6:23:9b:1e:f4:3b:1a:a6:b3:
2a:8f:29:8f:3f:72:83:71:d6:aa:e3:1e:c3:1d:ac:37:81:73:
20:c9:94:b1:46:8c:79:16:1a:7b:45:99:a9:7b:58:2c:97:8d:
c5:b7:b5:1b:0b:c9:3a:da:74:23:12:68:58:d5:19:37:e7:4d:
69:e9:98:ab:ce:da:e7:ac:d4:bf:1f:56:0e:07:6e:0d:de:5a:
9c:40:42:fd:aa:f3:34:3d:bd:d8:1c:4c:0b:80:05:45:c1:d4:
d2:b9:9e:4d:f2:bd:a9:2d:e4:04:35:e9:32:94:1f:49:db:88:
03:a5:d1:42:2f:60:da:aa:13:63:dd:13:db:91:31:bd:d7:6e:
57:1e:3d:8b:fa:85:7d:0a:0e:d3:36:e2:9f:5c:5a:2f:2c:98:
60:c6:b9:dd:15:ff:74:d4:96:7c:82:44:61:6a:c7:dd:e6:44:
89:83:aa:77:84:6d:8d:cb:f0:63:40:c7:37:1f:84:b9:e6:6d:
8a:be:44:50:c0:6b:70:d0:00:a9:a4:01:1a:98:7e:3a:c2:9a:
f3:5a:84:01:35:5b:25:6b:0f:e7:40:8f:b4:c7:67:48:62:ff:
92:e7:5e:a1:43:da:97:be:b1:40:84:1b:e5:dd:7d:41:19:7e:
11:69:e7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:46 2026 by rpki-client