Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
File: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft (raw, json)
Hash identifier: k1XfPQNmmd4b7MogBhPQsOzv/1bj5WZcxhRDbCiEmnQ=
Subject key identifier: D0:A2:52:F3:E8:E1:EB:23:A9:AF:05:1C:62:2C:D5:7A:F7:1F:58:8E
Authority key identifier: 04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
Certificate issuer: /CN=04904347a2361aced7c370f7446de708277ee6d1
Certificate serial: 01A13F397D4B8DBAFB46DA7698D907F565EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
Manifest number: 09A4
Signing time: Thu 15 Oct 2026 11:01:34 +0000
Manifest this update: Thu 15 Oct 2026 11:01:34 +0000
Manifest next update: Fri 16 Oct 2026 11:01:34 +0000
Files and hashes: 1: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl (hash: bgMCtYWdHmJoskgNtz7H8rFDDc3rFV5GIjKWn1UjqfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:7d:4b:8d:ba:fb:46:da:76:98:d9:07:f5:65:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04904347a2361aced7c370f7446de708277ee6d1
Validity
Not Before: Oct 15 11:01:34 2026 GMT
Not After : Oct 16 11:01:34 2026 GMT
Subject: CN=d0a252f3e8e1eb23a9af051c622cd57af71f588e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:47:6f:94:a1:35:19:b8:e9:b5:06:b4:6a:
81:53:50:89:04:9d:9b:f6:4d:86:1e:5b:8c:b9:ba:
9d:e1:a9:01:04:57:8c:de:25:e5:13:15:88:19:5f:
51:51:48:f7:76:bf:df:b0:c9:ad:32:aa:5a:5b:94:
da:7f:8a:da:13:23:47:e8:c7:03:8f:b4:1e:e6:0c:
23:19:58:2a:13:10:dd:53:61:ff:58:08:6c:aa:40:
30:85:e6:44:76:ee:c9:10:91:32:9c:32:11:5e:73:
ce:5f:20:56:c8:aa:ee:95:44:6d:86:aa:be:0c:2d:
31:4a:46:19:97:ae:37:07:ea:5a:a7:53:cd:cb:14:
ad:a6:58:a7:f7:2c:ae:84:5b:dc:1b:4e:1c:21:6c:
d2:47:4e:d8:4e:6a:56:84:5d:3d:11:fc:1d:05:02:
e7:6a:fe:a6:6b:ca:b9:0d:2f:fd:57:db:34:7b:8a:
ee:26:40:09:46:b7:ff:8d:3e:01:37:01:a1:6f:0a:
18:e0:28:70:ee:eb:3f:62:d8:f1:cf:78:9b:ea:0d:
b5:5b:23:cb:62:ee:13:8f:43:7a:3a:8b:cc:90:2a:
a1:7e:9b:8f:9a:2f:6c:de:d0:6f:b1:ed:2e:07:96:
d9:86:f5:37:1b:06:1d:90:61:6f:f4:4a:4d:7f:ef:
20:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A2:52:F3:E8:E1:EB:23:A9:AF:05:1C:62:2C:D5:7A:F7:1F:58:8E
X509v3 Authority Key Identifier:
keyid:04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:cc:54:c6:eb:4f:6b:f7:d7:26:56:d0:68:7c:90:b7:20:9a:
17:ad:12:0c:e0:d6:20:20:79:4d:c0:c4:e4:2d:b2:0f:11:f4:
e2:3c:61:68:3b:79:0b:04:3b:0c:40:3c:f5:10:49:be:66:d0:
c1:2f:10:d7:1a:e2:62:5b:fe:2b:c1:4d:a6:a4:fd:94:ed:4b:
d6:6a:8a:95:97:eb:6f:46:0b:96:a3:9b:28:49:a5:64:76:b6:
d5:b2:bd:d5:96:13:dd:23:43:2e:4f:15:08:9b:59:2e:6e:13:
44:7a:1b:ca:80:5f:59:12:7f:1c:9f:05:dc:11:8f:78:77:c2:
3d:41:6b:b7:a9:d9:cd:f4:61:88:8f:ae:75:67:ea:22:dd:36:
94:2b:e2:73:93:f6:34:b8:a1:81:13:c1:35:c0:2b:b9:b5:0d:
52:8f:cb:62:58:40:f9:09:cc:72:93:21:0a:ea:3a:5d:ec:bb:
ef:78:b8:36:b5:dc:e9:52:0f:12:80:eb:3c:47:44:45:67:0a:
ac:48:8a:d1:ac:19:4f:d7:25:93:5d:2f:40:40:7d:77:91:fb:
d2:9d:81:ca:c2:23:fc:85:10:7c:47:83:f3:40:75:a7:49:3f:
d0:6a:60:dc:67:91:77:37:ec:e9:2e:fb:a3:30:67:63:d1:d6:
ac:75:77:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:39 2026 by rpki-client