Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
File: BjyTAb89LhVgz69-3EGnw-yKFqY.mft (raw, json)
Hash identifier: Wz68Wf8Yv2kg76wGKvARcZJTlv6jLdzJ54gsObUyV4g=
Subject key identifier: E2:C6:60:08:95:2E:EE:B7:BB:54:CF:7D:5C:0A:E9:52:5B:86:5E:02
Authority key identifier: 06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
Certificate issuer: /CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Certificate serial: 019D37C0C9B30516A263AF81D718B23EE88E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 04:01:14 +0000
Manifest this update: Sun 29 Mar 2026 04:01:14 +0000
Manifest next update: Mon 30 Mar 2026 04:01:14 +0000
Files and hashes: 1: BjyTAb89LhVgz69-3EGnw-yKFqY.crl (hash: pTLBOOlNLurE33AlDRhDAnCmFSpKfu1m2glNB8lEyq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c9:b3:05:16:a2:63:af:81:d7:18:b2:3e:e8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Validity
Not Before: Mar 29 04:01:14 2026 GMT
Not After : Mar 30 04:01:14 2026 GMT
Subject: CN=e2c66008952eeeb7bb54cf7d5c0ae9525b865e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f8:1b:d4:05:de:8a:0f:96:38:85:47:34:f9:
5f:e3:1e:3c:38:e5:b2:8e:74:b6:06:79:20:59:09:
65:82:cf:50:c6:9b:18:4a:ee:03:44:ec:0c:06:ea:
c3:89:54:a9:e9:5e:37:88:e4:d9:0c:2f:cf:58:bf:
91:66:9f:f6:24:8b:3e:80:0d:e6:d9:0e:67:80:d5:
f0:c3:a0:a4:7a:7a:ed:40:01:de:61:f6:fd:1c:de:
e3:98:d4:11:26:67:bc:7e:9c:97:8b:1f:de:f9:9d:
c8:88:87:d4:fa:fb:d4:f9:d5:5e:ec:1a:fa:29:25:
01:8f:1c:0b:8f:46:00:95:6a:94:a5:20:f8:b6:c8:
f6:f4:d3:3e:b1:f2:2a:9f:7e:2a:c9:87:48:4b:c9:
c7:15:e2:2a:75:65:bc:18:86:9a:d5:a9:d1:28:2c:
1a:47:98:9d:aa:50:4a:80:d4:64:35:02:08:61:1b:
bd:0b:46:59:b1:2d:fa:22:49:b1:86:17:62:03:e8:
5f:68:b8:97:ac:ef:c8:fe:8a:c0:5b:31:11:42:2a:
73:1b:dc:0e:fc:fe:63:30:1a:bf:0a:69:1a:1b:75:
8c:f8:cc:d9:1a:6c:bd:11:c4:19:da:b8:7a:d6:5e:
06:22:8f:b6:40:2d:2e:ce:3a:61:6f:3b:5d:1f:8e:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C6:60:08:95:2E:EE:B7:BB:54:CF:7D:5C:0A:E9:52:5B:86:5E:02
X509v3 Authority Key Identifier:
keyid:06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:97:ba:fd:84:bb:d6:de:1f:c4:3d:9e:4c:73:ea:66:bf:5a:
e2:b7:a1:74:66:c8:11:99:dd:65:79:3e:a8:72:58:c7:f0:4d:
73:56:9d:e9:1f:d8:64:39:02:bd:8f:30:ea:42:4f:05:16:aa:
99:4d:ec:ad:d7:6c:5f:a5:7f:02:96:cc:70:dd:ea:2e:f3:8a:
d1:d1:b8:3d:c5:ae:a0:6d:8a:f4:eb:cb:99:a2:5d:59:b1:c0:
6e:f5:a0:62:13:72:f1:6f:e7:43:04:90:81:cb:5d:14:99:c3:
ad:c6:ce:cc:ef:4e:98:6d:28:c1:f6:a3:03:d4:1c:26:ee:b0:
8a:58:f7:14:b5:37:4f:fb:16:17:5c:ec:d7:bf:29:76:68:9c:
fa:76:9f:12:33:83:d5:d5:78:2c:ae:26:5d:6c:75:81:56:db:
49:ef:d5:5c:58:0b:b2:cf:ac:0a:20:bb:af:be:d3:94:00:4c:
2b:70:66:e7:df:00:57:f9:b3:8a:71:a5:ba:6a:e2:92:4e:28:
94:49:65:7d:ac:be:37:a8:1f:57:25:34:28:95:0d:4d:d3:e6:
13:19:15:5a:38:ab:83:fc:db:99:39:b9:5c:b5:cc:25:d8:83:
e8:80:7b:b4:35:1a:e3:90:a7:b5:c9:03:8a:87:8d:ff:5a:f5:
52:59:ef:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wMmzBRaiY6+B1xiyPuiOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2M2M5MzAxYmYzZDJlMTU2MGNmYWY3ZWRjNDFhN2MzZWM4
YTE2YTYwHhcNMjYwMzI5MDQwMTE0WhcNMjYwMzMwMDQwMTE0WjAzMTEwLwYDVQQD
EyhlMmM2NjAwODk1MmVlZWI3YmI1NGNmN2Q1YzBhZTk1MjViODY1ZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPgb1AXeig+WOIVHNPlf4x48OOWy
jnS2BnkgWQllgs9QxpsYSu4DROwMBurDiVSp6V43iOTZDC/PWL+RZp/2JIs+gA3m
2Q5ngNXww6CkenrtQAHeYfb9HN7jmNQRJme8fpyXix/e+Z3IiIfU+vvU+dVe7Br6
KSUBjxwLj0YAlWqUpSD4tsj29NM+sfIqn34qyYdIS8nHFeIqdWW8GIaa1anRKCwa
R5idqlBKgNRkNQIIYRu9C0ZZsS36IkmxhhdiA+hfaLiXrO/I/orAWzERQipzG9wO
/P5jMBq/CmkaG3WM+MzZGmy9EcQZ2rh61l4GIo+2QC0uzjphbztdH47vKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLGYAiVLu63u1TPfVwK6VJbhl4CMB8GA1UdIwQY
MBaAFAY8kwG/PS4VYM+vftxBp8PsihamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmp5VEFiODlMaFZnejY5LTNFR253LXlLRnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xZTM4NDYtOWM0Mi00OTk4LWE5NjAt
YjFkNzM3OTdhMjlmLzEvQmp5VEFiODlMaFZnejY5LTNFR253LXlLRnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8xZTM4NDYtOWM0Mi00OTk4LWE5NjAtYjFkNzM3OTdhMjlm
LzEvQmp5VEFiODlMaFZnejY5LTNFR253LXlLRnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpe6/YS7
1t4fxD2eTHPqZr9a4rehdGbIEZndZXk+qHJYx/BNc1ad6R/YZDkCvY8w6kJPBRaq
mU3srddsX6V/ApbMcN3qLvOK0dG4PcWuoG2K9OvLmaJdWbHAbvWgYhNy8W/nQwSQ
gctdFJnDrcbOzO9OmG0owfajA9QcJu6wilj3FLU3T/sWF1zs178pdmic+nafEjOD
1dV4LK4mXWx1gVbbSe/VXFgLss+sCiC7r77TlABMK3Bm598AV/mzinGlumrikk4o
lEllfay+N6gfVyU0KJUNTdPmExkVWjirg/zbmTm5XLXMJdiD6IB7tDUa45CntckD
ioeN/1r1UlnvWQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:58 2026 by rpki-client