Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
File: BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json)
Hash identifier: ekyrXCEffI9rXM7V7rpg8paAUyUC0zETwsWO6RcJuFc=
Subject key identifier: 49:D5:52:F2:F2:AC:69:FE:6E:D8:D3:1F:0E:2C:A7:32:2C:52:D5:CA
Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
Certificate issuer: /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Certificate serial: 019F1867C84A4F8685F0F2A274504FBF5159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
Manifest number: 1667
Signing time: Tue 30 Jun 2026 12:01:22 +0000
Manifest this update: Tue 30 Jun 2026 12:01:22 +0000
Manifest next update: Wed 01 Jul 2026 12:01:22 +0000
Files and hashes: 1: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: 9l4TxMZDAwHAjQtRQFAI4eKJSlqqVQ/KdNeDPRmGgvI=)
2: ue1Yig8TYgxiOV1FxPhvIsY035g.roa (hash: 3msZkfxcU6jcS509BBjupbbAc7uKaBkwJ1wFsWgzHXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:c8:4a:4f:86:85:f0:f2:a2:74:50:4f:bf:51:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Validity
Not Before: Jun 30 12:01:22 2026 GMT
Not After : Jul 1 12:01:22 2026 GMT
Subject: CN=49d552f2f2ac69fe6ed8d31f0e2ca7322c52d5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:42:46:24:bb:a2:51:41:e9:51:0b:4e:63:53:
79:1c:3e:92:15:27:0a:39:61:6b:a0:25:c0:3e:61:
57:41:b7:6c:7f:6b:68:9c:21:26:d1:0e:dc:93:26:
77:6a:a6:db:e9:59:c4:95:78:85:12:4c:fb:80:53:
90:66:2b:ae:3f:30:4b:d4:c9:6f:70:27:66:dd:94:
1c:b9:11:c9:79:b9:d3:b7:b9:30:12:ee:3d:92:07:
97:98:83:d5:af:16:30:4d:8d:1a:0d:96:27:ad:47:
60:a2:a6:17:88:b7:2d:2b:b3:ea:ed:59:12:d2:59:
47:af:eb:8e:38:70:19:04:fe:02:45:d9:b9:e2:b0:
3c:46:d3:3e:ed:15:1d:e5:96:16:24:8b:1e:cd:82:
10:f6:9b:0a:ac:0d:a7:4d:ba:75:f3:1b:88:17:d0:
9d:db:88:bd:3a:dc:56:46:8c:19:a2:39:ca:a2:87:
1d:2d:44:2d:c1:41:af:9a:8a:77:05:77:6a:83:e9:
12:60:52:43:77:88:0f:b6:ad:0a:aa:e2:fa:9a:db:
19:a9:1e:4e:26:b5:bd:1b:14:4c:e2:f3:fa:47:e8:
22:a2:cb:c7:7d:56:50:6d:6a:89:3f:12:1c:e0:39:
e1:5a:35:b8:a7:6d:04:06:96:ac:3e:a8:13:bf:7e:
9a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D5:52:F2:F2:AC:69:FE:6E:D8:D3:1F:0E:2C:A7:32:2C:52:D5:CA
X509v3 Authority Key Identifier:
keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9d:3e:d0:1d:c9:d1:db:d0:42:37:bd:18:e6:1e:ac:74:1a:
10:e6:53:22:ac:20:94:b6:06:0b:3b:62:74:77:34:35:96:8f:
5b:e6:47:78:9d:5d:23:ea:81:8b:08:82:b5:c4:4a:63:96:b9:
dd:11:fe:65:ec:31:06:5c:d1:df:a4:0a:7d:07:57:2a:ee:96:
3f:7c:8f:96:97:16:e8:ea:30:e7:13:e8:e1:72:ac:36:7c:29:
22:86:38:c2:01:8b:81:0c:46:8a:72:3a:19:14:b7:78:23:69:
6e:22:03:70:9c:c5:65:26:2c:55:5b:74:6a:b3:34:bc:81:84:
ff:03:27:9f:5a:30:d7:9d:c8:e9:cd:ba:5e:a2:87:c2:f4:f9:
16:89:bd:57:4c:f3:fc:5c:2d:84:aa:52:b0:3c:37:e4:62:bf:
dc:1c:9a:d2:c7:c5:bd:48:36:33:fd:89:5f:0b:2a:b8:81:6d:
92:31:5a:69:cf:b4:3d:bc:39:60:50:85:e6:05:b0:f6:44:bb:
00:d0:a7:27:7a:ce:f5:2a:72:54:e0:4a:7c:7f:4e:95:1c:b0:
eb:a3:08:87:48:b9:da:67:5e:83:3b:93:22:6b:7e:74:e9:0c:
82:f7:0b:80:01:eb:1a:a5:60:c9:de:b6:08:b9:c1:a8:d0:55:
0d:57:5c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:18 2026 by rpki-client