Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
File: BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json)
Hash identifier: PnvXSOZSwz6fDyWEG1OPNmUiKCqMcNnWUAKzZ7ZW+SI=
Subject key identifier: 27:99:B8:EC:D6:DA:57:A6:51:5D:39:29:19:ED:83:18:38:E8:43:F4
Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
Certificate issuer: /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Certificate serial: 019D3788FCBD0ABA0206B3B7194465CEFDAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
Manifest number: 156E
Signing time: Sun 29 Mar 2026 03:00:17 +0000
Manifest this update: Sun 29 Mar 2026 03:00:17 +0000
Manifest next update: Mon 30 Mar 2026 03:00:17 +0000
Files and hashes: 1: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: JyV8MFrUmRgvH6tkFuv4tamZ3SgBYO+k6xG6sZh6kng=)
2: ue1Yig8TYgxiOV1FxPhvIsY035g.roa (hash: 3msZkfxcU6jcS509BBjupbbAc7uKaBkwJ1wFsWgzHXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:88:fc:bd:0a:ba:02:06:b3:b7:19:44:65:ce:fd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Validity
Not Before: Mar 29 03:00:17 2026 GMT
Not After : Mar 30 03:00:17 2026 GMT
Subject: CN=2799b8ecd6da57a6515d392919ed831838e843f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:0a:28:a1:1b:08:8f:3e:14:bf:f4:dd:7f:
2e:6f:7e:63:ef:b9:65:e3:fe:a4:cf:59:5e:dd:a1:
ad:e8:80:03:0d:bd:53:ca:ef:c3:82:2b:a4:ef:19:
6b:a5:78:a9:35:7a:42:88:52:20:09:9b:0c:ce:16:
3f:b9:19:4e:0b:6d:7e:a0:d6:5c:f6:f8:03:d3:7f:
2d:27:e1:68:2b:b1:ea:08:f3:ad:26:e9:f1:f8:53:
92:a2:b9:53:9e:a6:6a:a3:10:60:54:4d:3a:4c:1c:
81:ab:65:49:5f:09:f3:55:42:ef:23:41:91:0b:91:
23:09:0f:4b:02:72:31:14:f2:d0:d2:fc:bf:ed:79:
da:67:bc:6d:b6:9a:d5:b2:19:a1:25:1d:51:0d:4a:
43:69:5c:43:74:10:19:8b:64:d8:5d:4f:cf:a9:c0:
4a:8d:93:ad:86:08:d8:6c:e7:cb:e4:32:08:c6:d5:
ea:9e:6a:24:3f:85:d9:ff:ac:74:72:bc:6c:0b:26:
f4:33:ad:80:03:17:23:51:48:53:11:b6:82:17:90:
52:71:0c:dd:9b:02:64:26:1c:cc:38:38:8d:4d:29:
72:8c:88:40:39:98:6f:94:5b:f2:d4:be:43:d0:ab:
53:06:23:17:9b:dc:8f:b7:a7:0d:df:38:27:ac:70:
3d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:99:B8:EC:D6:DA:57:A6:51:5D:39:29:19:ED:83:18:38:E8:43:F4
X509v3 Authority Key Identifier:
keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4f:36:73:54:69:49:ae:19:86:b2:39:b2:5b:b5:44:de:b6:
21:56:56:e4:89:46:ad:85:3e:64:c1:28:f7:d3:c2:f7:e8:f8:
88:61:ee:07:ca:02:a3:97:84:1d:21:15:3d:a3:5b:28:12:d6:
69:d4:31:54:74:d0:90:5e:e9:e4:3a:ad:45:da:61:07:8c:cd:
ab:46:d9:2a:51:d5:e1:89:18:e3:14:6f:4a:28:f1:62:d6:a5:
9e:da:51:c7:88:9e:4a:ba:b4:47:74:7c:d2:45:9d:fa:1d:d9:
bd:0a:77:6f:3e:f2:14:82:c5:51:bd:25:97:ba:48:83:ef:68:
6e:73:74:a6:31:ff:7a:95:01:95:c9:d7:af:c7:df:9b:6d:dc:
48:3c:0f:b3:8f:00:fa:b3:c2:3c:c8:f9:da:f2:d7:d0:20:b1:
5a:88:31:1a:0b:d2:dc:f4:11:2d:ae:b6:d9:d3:f5:78:0c:42:
a1:eb:0c:48:59:5e:3d:5f:57:2a:8b:21:22:92:94:6d:ec:2b:
7e:84:09:9d:63:fe:3d:79:94:21:79:08:ec:d2:ab:36:e5:a3:
53:c4:21:a7:6e:4d:70:19:20:e0:99:34:3a:c7:ac:96:18:ae:
3f:7e:a8:b2:66:02:9f:27:ac:96:23:da:c6:e8:29:6b:fe:d5:
59:1c:ee:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:00 2026 by rpki-client