Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
File: Bjutx4U7BRAKayJN3O_Bji59PdU.mft (raw, json)
Hash identifier: QPIk6BqfR2AnE25fhi8JliymGAtwCC9ylGfKcJjJbeI=
Subject key identifier: A0:45:43:6A:2A:6A:EC:58:8C:E4:C4:57:85:36:E1:CF:DF:02:1E:34
Authority key identifier: 06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
Certificate issuer: /CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Certificate serial: 01A1389267533D7CD2EE8DCE128C59F15020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
Manifest number: 1248
Signing time: Wed 14 Oct 2026 04:01:20 +0000
Manifest this update: Wed 14 Oct 2026 04:01:20 +0000
Manifest next update: Thu 15 Oct 2026 04:01:20 +0000
Files and hashes: 1: Bjutx4U7BRAKayJN3O_Bji59PdU.crl (hash: beD09wf3BzpCSAjLglnixoZLGLTtIapQHkIDhp3HzeQ=)
2: kSI4irkD9U8KDXqCeEKiZkl6aR4.roa (hash: PoZR+wKPBBgyzuCqmdDQdwcuOsR3JlozNGdHHFlennk=)
3: oPMPQL97ioOPzcI3nCulVuvoz9s.roa (hash: sBtKUfuDXNASlU06N3GnwSJFJv6yHZNIVqXOTCSz1yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:92:67:53:3d:7c:d2:ee:8d:ce:12:8c:59:f1:50:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Validity
Not Before: Oct 14 04:01:20 2026 GMT
Not After : Oct 15 04:01:20 2026 GMT
Subject: CN=a045436a2a6aec588ce4c4578536e1cfdf021e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:57:fc:8f:be:28:02:9b:11:d0:4a:b1:1e:
1c:32:29:b1:43:55:e4:e0:da:62:53:bb:d3:6a:3f:
33:0a:99:32:ee:90:94:8e:e2:0b:34:56:66:42:fe:
aa:b8:b0:05:9c:c4:44:8c:47:0d:e9:7e:94:db:25:
5a:83:ca:97:a7:3d:87:c7:03:7a:7c:19:e3:6d:a1:
06:b9:3c:50:e5:ca:8f:a3:9b:01:f1:d3:64:ea:55:
4c:d5:52:10:f9:f9:24:b3:c4:85:27:19:9f:01:6f:
ed:ef:61:9a:47:97:59:7f:24:42:c1:b6:62:44:2a:
45:ea:2b:71:c3:a9:81:65:23:74:1b:3e:49:e2:23:
cd:43:7b:52:10:88:0f:b5:07:fa:1b:aa:a9:05:98:
bb:59:9b:93:a0:7f:fd:ea:e4:ea:04:0b:3e:a5:b5:
df:26:c5:5d:1c:03:7c:5d:03:b7:d0:84:b7:e2:84:
86:a1:82:6f:22:ec:f4:e9:83:3e:62:82:68:a6:1a:
77:50:d8:f6:f1:bb:3e:bd:62:55:0f:49:f7:d8:ed:
22:a8:a5:6a:27:a6:3a:c5:65:9b:68:ac:28:59:94:
c7:30:93:00:9d:04:b9:2e:a8:70:1e:dc:44:23:37:
83:ac:f4:27:63:f9:83:33:16:5c:93:59:5c:3b:fe:
98:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:45:43:6A:2A:6A:EC:58:8C:E4:C4:57:85:36:E1:CF:DF:02:1E:34
X509v3 Authority Key Identifier:
keyid:06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d1:35:82:da:9f:7c:d5:d5:93:8f:11:e5:e9:ed:eb:f4:8f:
b5:d8:d5:40:14:a6:8c:4a:87:7c:81:8b:ae:ae:bf:6b:c8:47:
58:5e:cf:73:30:8a:20:7f:fc:75:69:ee:af:2c:7e:54:67:82:
e4:c0:89:1a:3b:01:6f:3f:33:2f:ff:7b:52:4c:60:d0:26:b5:
64:35:68:e3:16:0a:5d:4f:94:3a:96:d0:0f:f4:34:3c:18:df:
94:e9:b3:82:ee:03:76:2d:db:c0:0a:ea:89:fe:2d:7a:75:6c:
ab:2b:91:a3:1e:56:55:b7:0c:08:cb:4f:d0:dc:24:15:48:03:
7b:ce:1d:4b:67:ea:4d:2c:64:b6:e4:ca:95:2f:da:4e:ef:b3:
19:4d:cb:fb:37:4a:14:a2:9a:c1:52:8b:9d:21:02:da:d8:46:
03:07:4b:82:81:58:e2:9c:8b:e0:92:7f:c4:c0:9d:43:0f:13:
7c:c6:4a:39:3b:50:7f:5a:16:29:4c:5a:a4:14:d1:fd:16:8a:
9e:43:bb:52:86:fb:3a:08:25:c2:59:cc:d6:85:ad:d0:cf:09:
c8:6a:2a:b7:59:df:67:55:96:2f:5c:75:8d:00:15:71:97:38:
1d:bd:0e:c8:05:37:b7:68:bd:37:27:06:51:43:45:d2:d6:ed:
c9:1a:4a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:50:42 2026 by rpki-client