Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
File: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft (raw, json)
Hash identifier: 42+5j+NggYEvecktHXiV1Wlcam4Wa4cv6RDZPPRg7qE=
Subject key identifier: AB:B8:54:DF:7C:3D:12:86:51:1F:D9:FF:21:93:DF:EE:3C:7F:8F:C0
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial: 019E8D92477987132E3BD8433300309C23DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
Manifest number: 1940
Signing time: Wed 03 Jun 2026 13:00:34 +0000
Manifest this update: Wed 03 Jun 2026 13:00:34 +0000
Manifest next update: Thu 04 Jun 2026 13:00:34 +0000
Files and hashes: 1: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl (hash: wsAEXdt78x210w6rv2pZoJpXVL1h2cGbtbA6zL6h2zQ=)
2: MJnpHwqWRCcgwA2k13dIsZbF1wg.roa (hash: PFwAyy/D0gAKEytNprzS6x7dl1CAJgdTy4faTQEJoSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:92:47:79:87:13:2e:3b:d8:43:33:00:30:9c:23:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
Validity
Not Before: Jun 3 13:00:34 2026 GMT
Not After : Jun 4 13:00:34 2026 GMT
Subject: CN=abb854df7c3d1286511fd9ff2193dfee3c7f8fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:36:f1:d0:11:d8:f0:61:da:ea:e3:16:b9:
88:74:0f:24:57:07:0f:c4:b0:48:ab:38:be:8e:e1:
43:24:44:fd:fd:b1:75:0d:9c:4c:77:f0:44:d1:06:
6b:fb:b3:e2:3e:1e:44:7c:4d:87:ad:d2:0d:5f:5b:
4f:91:f7:3c:ff:ae:07:8b:54:ca:15:15:93:e0:d5:
79:44:00:fa:07:f7:9c:3c:ae:25:6c:e8:e8:29:68:
37:da:17:ff:4d:37:20:88:b2:ea:c4:9c:ca:d4:46:
2e:bd:11:ee:0a:ae:95:05:b5:27:2f:4a:a4:23:ea:
9f:7f:a5:92:34:2c:64:da:f1:14:aa:c2:7e:8c:66:
80:c1:ae:ca:df:8a:ef:f2:63:fb:21:28:f1:f6:f5:
d4:36:9c:d7:b2:a3:34:d5:10:bd:df:09:15:17:49:
bd:88:bb:32:1b:a0:d4:d4:ee:8e:61:fa:78:96:96:
30:d6:c7:22:80:61:7b:15:d3:e8:1c:c1:39:a0:57:
32:36:79:9b:f9:07:6c:6d:7b:63:55:38:c0:cf:13:
28:fa:c5:60:03:aa:e8:e6:4c:f6:38:7d:60:95:18:
21:61:4f:bf:64:48:96:86:96:6a:00:94:79:25:3e:
c3:5b:1b:94:02:72:eb:e0:6b:94:76:15:b6:29:ba:
9e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B8:54:DF:7C:3D:12:86:51:1F:D9:FF:21:93:DF:EE:3C:7F:8F:C0
X509v3 Authority Key Identifier:
keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bf:d4:88:d1:c0:32:78:64:8c:05:64:85:aa:b5:8d:1f:f0:
15:df:16:25:67:cc:af:fb:23:53:51:32:7d:05:75:bb:43:3b:
c2:cb:13:62:1e:4a:4c:55:34:45:7a:3c:e9:df:4f:5d:43:f8:
29:87:34:f2:7e:0b:ef:72:07:68:64:2e:62:98:84:0f:83:f1:
e3:93:67:5b:45:68:d6:3d:1b:5c:aa:ad:ff:df:30:09:f3:b1:
e3:cb:67:ff:c3:10:ca:13:f6:56:1e:76:65:ca:ca:fc:b2:14:
fe:be:10:f9:b1:9d:5b:22:36:94:e6:04:59:48:71:6d:de:14:
32:d6:e9:ce:56:ed:a8:bd:7a:70:59:7a:0a:f3:9d:27:3a:53:
d1:a2:95:bc:a6:b2:38:db:e0:12:8a:e7:ef:7b:73:f0:70:a9:
c8:f7:4c:24:bf:0c:78:6b:de:44:b0:6d:06:ee:6c:8c:f8:d0:
14:2a:71:d4:2e:d7:ea:60:62:05:cc:78:67:ed:99:55:42:f5:
4c:b4:69:12:2a:40:49:20:22:f3:ec:17:c3:19:3c:30:dc:0b:
67:ec:08:87:9b:5f:ea:c4:6b:d1:e9:bf:3d:34:7c:0f:c2:5d:
13:13:c1:db:a3:e0:79:fd:47:32:53:37:f3:b8:db:e4:c4:a5:
4a:51:76:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:57:26 2026 by rpki-client