Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
File: BjyTAb89LhVgz69-3EGnw-yKFqY.mft (raw, json)
Hash identifier: cqgtKo2A0slEVQ88XIt9oF8HV2cfctFLwu2nwLIaTFg=
Subject key identifier: 8D:0B:FA:4A:E5:D4:C1:D4:3B:B6:CF:20:6A:FD:A1:14:AF:E8:8F:B0
Authority key identifier: 06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
Certificate issuer: /CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Certificate serial: 01A0005CC3EBF1BF2D903FB4D5D242177E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
Manifest number: 19FD
Signing time: Fri 14 Aug 2026 13:01:14 +0000
Manifest this update: Fri 14 Aug 2026 13:01:14 +0000
Manifest next update: Sat 15 Aug 2026 13:01:14 +0000
Files and hashes: 1: BjyTAb89LhVgz69-3EGnw-yKFqY.crl (hash: SJLE4t9Tf2P1shuq06FqLYHCSDPgTLIf9txpkpRcQ58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:c3:eb:f1:bf:2d:90:3f:b4:d5:d2:42:17:7e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Validity
Not Before: Aug 14 13:01:14 2026 GMT
Not After : Aug 15 13:01:14 2026 GMT
Subject: CN=8d0bfa4ae5d4c1d43bb6cf206afda114afe88fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:c3:6a:50:44:3f:c7:2c:c2:4c:11:5a:12:
1d:d4:9f:54:f6:c5:d7:28:68:67:70:66:ad:36:81:
fc:51:8c:de:3a:84:92:c2:8e:62:81:f5:0e:d6:dc:
87:2d:1b:ed:06:d0:a6:6d:34:c8:6f:cc:fd:17:38:
ff:fa:4d:0c:15:85:80:7d:f3:02:97:bc:10:cf:b4:
38:8b:ff:a2:28:44:73:9b:ca:9d:27:46:61:3f:cb:
65:89:dd:04:5f:17:43:b6:c5:90:74:e2:d7:e7:b6:
b3:28:eb:02:69:6a:95:f7:b7:f9:62:fe:1e:5b:a0:
d9:62:c1:a4:7e:60:43:69:c8:5b:1c:da:f1:d1:67:
09:5b:68:42:d7:37:fa:8f:40:3a:35:87:de:64:d3:
e3:e7:ae:b7:80:64:4b:3d:47:0a:a9:58:78:bc:e0:
bc:16:63:d4:c2:48:b8:36:64:51:36:90:c7:11:24:
8c:a3:45:5e:a8:58:f8:1d:ae:14:7d:60:16:dc:40:
37:08:60:88:7d:f9:07:f1:2a:1e:7a:88:c8:63:21:
c2:71:77:01:63:d7:af:f5:ef:76:c2:12:4f:2a:88:
e6:63:c7:2b:d7:d5:b2:3b:75:46:76:ed:04:a8:c3:
f9:f9:57:48:9c:6a:68:97:44:96:5a:5a:19:a8:4c:
a8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0B:FA:4A:E5:D4:C1:D4:3B:B6:CF:20:6A:FD:A1:14:AF:E8:8F:B0
X509v3 Authority Key Identifier:
keyid:06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ed:f1:5d:fc:ae:e7:d1:0d:e6:99:f1:3e:b9:ab:d5:9c:a3:
6a:6c:15:5e:2a:76:cb:fb:65:2b:23:1c:4a:67:2d:fd:d5:16:
15:aa:8c:24:42:e9:85:16:ee:50:16:f1:fb:86:92:7e:67:5d:
77:07:a5:ee:cc:ad:bf:d6:d5:13:89:6e:17:95:98:55:11:2b:
9f:9d:15:2c:d0:8f:5d:f5:18:ef:32:12:a1:7d:ed:ee:36:25:
ab:9e:c5:f4:b0:4e:ef:ec:99:16:e1:f0:2f:cc:49:a3:fa:36:
e2:cd:04:6a:eb:3e:fa:0c:7f:53:8a:34:9a:fa:16:e4:a7:db:
a8:7a:02:1a:4e:04:07:8d:72:ec:ba:c0:13:43:3f:f4:a5:58:
59:0b:9c:f1:ab:46:ab:1a:d0:34:30:d2:63:81:f8:c3:90:2c:
3e:a7:6d:8a:78:6b:5d:05:be:74:30:b1:0d:4d:10:b3:73:23:
44:ef:46:d5:bd:c3:14:c3:b7:75:56:74:e9:3b:af:4a:e3:d5:
cb:3a:1f:cd:ab:71:45:6d:db:76:1e:5e:98:74:0b:22:89:fc:
48:2f:83:15:e6:e4:b2:4f:8c:04:26:22:7b:76:a8:0c:d4:bd:
ef:37:9c:d0:88:44:66:96:c7:2f:b6:20:df:d2:b1:4d:84:c9:
fc:33:32:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:53 2026 by rpki-client