Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
File: Bjutx4U7BRAKayJN3O_Bji59PdU.mft (raw, json)
Hash identifier: Pp9pvgqLxcZp9bznVPYRj80qrKJnBx8RsbX75U0N8vI=
Subject key identifier: D5:63:93:B3:F1:71:15:B6:DD:74:DD:36:BE:F2:10:62:49:60:A1:B2
Authority key identifier: 06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
Certificate issuer: /CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Certificate serial: 019D3909B40C863D73360406DF1A3D2B53C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
Manifest number: 1036
Signing time: Sun 29 Mar 2026 10:00:30 +0000
Manifest this update: Sun 29 Mar 2026 10:00:30 +0000
Manifest next update: Mon 30 Mar 2026 10:00:30 +0000
Files and hashes: 1: Bjutx4U7BRAKayJN3O_Bji59PdU.crl (hash: AuOYKgbD9XphWcXTvHWC+fFptKKgiXIxhQHJeN6LBRI=)
2: kSI4irkD9U8KDXqCeEKiZkl6aR4.roa (hash: PoZR+wKPBBgyzuCqmdDQdwcuOsR3JlozNGdHHFlennk=)
3: oPMPQL97ioOPzcI3nCulVuvoz9s.roa (hash: sBtKUfuDXNASlU06N3GnwSJFJv6yHZNIVqXOTCSz1yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b4:0c:86:3d:73:36:04:06:df:1a:3d:2b:53:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Validity
Not Before: Mar 29 10:00:30 2026 GMT
Not After : Mar 30 10:00:30 2026 GMT
Subject: CN=d56393b3f17115b6dd74dd36bef210624960a1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:14:a4:1e:91:f0:a1:36:38:f6:4d:d8:d7:74:
ad:ea:ec:71:df:62:0a:37:68:1b:b0:36:81:d6:b6:
af:0e:43:b0:1c:cc:35:ca:57:aa:cb:21:d2:1e:29:
7f:dd:c6:33:95:aa:0a:21:66:d6:d4:cb:87:57:b7:
e9:00:47:4c:53:ad:e4:5a:e8:ac:7a:df:45:d0:a1:
d2:75:96:9d:cc:15:bb:e1:52:1d:8a:2d:90:26:b7:
e5:98:92:48:2a:dd:af:2d:98:ad:d5:b1:8a:fc:49:
48:a6:c2:62:ea:ff:12:2c:e6:95:fe:58:53:cf:ca:
b7:4a:bd:5b:1d:8f:21:52:57:26:61:14:ea:9d:03:
48:83:2e:be:f2:f2:99:78:7d:5c:6f:b2:3c:5c:20:
df:aa:01:88:b5:6a:3b:00:55:e4:f6:ca:ed:6b:b2:
32:64:02:fd:79:37:8a:62:59:ce:38:bf:d2:bd:af:
c9:d4:21:5c:0d:f6:49:db:9e:b6:f9:ba:6c:a0:87:
3b:96:87:a0:58:89:4a:38:3c:01:12:8d:d5:35:08:
2f:ac:e9:bd:fd:93:cd:28:63:8c:0a:4e:41:ad:6a:
5d:f0:b2:aa:fb:a8:18:6a:d8:6d:3b:44:6e:2d:60:
53:b4:fc:6c:46:5a:c8:5e:15:9b:2a:86:0c:8b:d9:
8c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:63:93:B3:F1:71:15:B6:DD:74:DD:36:BE:F2:10:62:49:60:A1:B2
X509v3 Authority Key Identifier:
keyid:06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d1:b7:27:ca:4b:e6:60:29:59:dd:e2:3e:2b:2a:1e:c1:27:
bd:d8:43:14:d8:39:fc:5a:51:52:b5:50:8c:19:ab:b4:8b:9a:
37:e0:e8:99:b3:7e:12:8b:e2:4c:6e:a4:38:2f:24:49:77:0a:
33:71:b6:d0:c0:dc:88:7f:be:6a:4a:80:a7:26:1e:fc:31:76:
86:d8:2d:32:64:a1:a6:a4:83:e2:24:2d:e3:a7:4b:3e:51:59:
75:bd:d8:2d:5b:70:6a:73:96:6d:4b:a7:9e:bd:a5:17:a1:89:
4a:f8:a7:04:ae:56:c9:2a:4d:a0:ec:4a:1b:b0:5e:17:8b:d1:
57:a7:ba:5a:ba:42:08:ff:67:6d:8f:6d:0f:e9:44:be:3f:67:
db:4a:79:77:0f:93:f2:41:6f:bc:4e:41:93:bf:ae:6a:dd:c3:
49:fc:27:1f:7e:d3:33:cf:f7:08:07:aa:76:a8:d8:98:eb:08:
db:3e:4c:51:f7:71:34:d6:d6:51:f0:79:76:51:02:97:e4:8d:
bd:97:b4:23:a2:2e:ea:d0:96:a3:f2:d5:70:78:c0:60:ec:3f:
4e:d7:8d:3d:57:1f:47:1c:f0:8f:6d:76:01:70:f0:6f:34:af:
e7:ab:2b:82:69:2f:94:ec:7a:5d:eb:ab:26:4a:2b:2e:d7:c5:
b9:e6:18:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:56:03 2026 by rpki-client