Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
File: BjnEhGuIwtcOMc5MD8y0z03qVDY.mft (raw, json)
Hash identifier: Qiz9NoPKq9vyi57Wrtl75ybzZuZGGvIMFV7e8t5jwUc=
Subject key identifier: 91:77:93:B2:28:43:1E:C5:A3:3D:B8:1B:D5:FF:72:BD:7F:28:66:62
Authority key identifier: 06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
Certificate issuer: /CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Certificate serial: 019F1867F82E8ECBE368FF6CCE3AB033E48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
Manifest number: 1991
Signing time: Tue 30 Jun 2026 12:01:34 +0000
Manifest this update: Tue 30 Jun 2026 12:01:34 +0000
Manifest next update: Wed 01 Jul 2026 12:01:34 +0000
Files and hashes: 1: BjnEhGuIwtcOMc5MD8y0z03qVDY.crl (hash: Zqd+5bqIlYmGwKjNUi8qjrdjRtCz+Fjt+/B9l9QmQHI=)
2: vPxdfCRr7Mec8_8j7TMsJJiAeMU.roa (hash: plhGyyYWuXxFt5Kt0sAfESxedvatjKxLfotDc86oZ3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:f8:2e:8e:cb:e3:68:ff:6c:ce:3a:b0:33:e4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Validity
Not Before: Jun 30 12:01:34 2026 GMT
Not After : Jul 1 12:01:34 2026 GMT
Subject: CN=917793b228431ec5a33db81bd5ff72bd7f286662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:e1:c6:76:b1:15:64:f2:6c:84:96:74:9c:
20:df:c8:74:a5:d5:77:e6:3a:f8:44:5e:eb:b0:1f:
58:f0:75:c1:69:42:dc:ae:27:b5:46:69:9f:22:bb:
ef:6f:75:06:17:a2:f6:a8:a5:27:3b:64:9b:da:73:
be:99:69:bb:3a:46:cd:9c:3d:57:0a:8f:61:2a:05:
3e:59:8f:9b:44:63:8a:f6:5f:44:15:2f:21:16:7f:
12:01:7a:95:c3:0b:99:81:14:43:71:a3:75:af:d3:
0a:e0:f3:73:b6:7a:fe:c3:12:3a:23:1e:00:25:66:
3b:46:a0:ab:ad:2c:9e:0c:e7:14:a2:1f:8f:e1:b4:
78:52:00:67:05:07:3d:03:49:15:8e:42:4e:43:a9:
1f:75:c3:23:9a:f0:f9:c0:74:01:c7:b1:a6:cf:05:
2d:08:b7:b7:1c:66:a1:49:ae:60:46:53:ef:43:fb:
9d:8c:c3:9a:2f:1f:78:a8:77:2c:7b:95:e0:eb:58:
35:60:45:23:bb:42:21:db:9d:80:c5:5b:20:02:5a:
db:84:53:a2:bd:7e:82:2b:55:66:d7:0d:44:a0:e8:
90:a3:f4:86:8d:3f:c8:b5:09:be:ec:a0:b4:7d:ea:
8b:b4:6d:bb:a6:b1:21:c5:34:0f:29:b9:a6:df:a4:
d2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:77:93:B2:28:43:1E:C5:A3:3D:B8:1B:D5:FF:72:BD:7F:28:66:62
X509v3 Authority Key Identifier:
keyid:06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ee:55:1a:9c:4e:15:a3:3f:7b:ce:f9:6a:6f:e1:96:ba:09:
0a:95:05:cf:50:42:ed:61:0e:df:10:31:55:f6:03:be:81:66:
dd:c1:13:cf:73:f2:91:5c:cb:9f:a8:13:ff:d3:a5:71:cf:f8:
df:38:3e:08:9f:9a:7c:7e:39:e1:16:ff:12:b2:9f:93:cd:f5:
ce:9d:6d:2a:f9:fa:f6:b2:6d:10:f8:e7:6e:d9:98:84:43:dd:
66:86:ad:1e:98:fb:2d:c2:7e:d2:61:a0:ba:86:42:30:e2:2a:
94:36:fa:7b:9d:48:f4:c8:e6:19:9c:dd:00:95:3e:eb:8e:7b:
f2:36:fd:61:6c:16:3d:27:72:8e:f2:49:50:cb:bb:47:ff:83:
5d:dd:ac:25:73:d4:75:31:a1:6e:63:1e:47:59:0b:fd:4a:0d:
33:c0:49:23:8b:14:33:34:0e:86:ef:41:b0:76:7f:96:98:db:
32:34:93:f0:b3:52:70:91:55:63:67:49:37:01:c2:a7:f4:a7:
0e:e2:fe:a2:57:d9:38:fb:48:31:ee:9d:ab:94:58:a4:37:ce:
b8:8e:1d:4e:dc:c1:a6:b1:94:c9:f5:4a:ed:8a:81:ed:0f:f7:
0d:31:17:52:ad:f5:93:53:53:44:53:39:75:5a:e5:7c:a6:3b:
28:e4:a4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:22 2026 by rpki-client