Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
File: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft (raw, json)
Hash identifier: rkNkmpSkVjmjdW8EFiDjwhcf5yyxak+Gflox/54sjSA=
Subject key identifier: 5A:84:44:F7:D9:98:C5:D6:92:0F:5C:02:AA:1C:C4:B5:DA:C2:23:C0
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial: 01A06E7096541F740A08E667E194376D44A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
Manifest number: 1A39
Signing time: Fri 04 Sep 2026 22:01:07 +0000
Manifest this update: Fri 04 Sep 2026 22:01:07 +0000
Manifest next update: Sat 05 Sep 2026 22:01:07 +0000
Files and hashes: 1: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl (hash: X2jMpe2RHINyzVBQM0fz/S3dXk55ViiHo4mZ82Pt+DI=)
2: MJnpHwqWRCcgwA2k13dIsZbF1wg.roa (hash: PFwAyy/D0gAKEytNprzS6x7dl1CAJgdTy4faTQEJoSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:96:54:1f:74:0a:08:e6:67:e1:94:37:6d:44:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
Validity
Not Before: Sep 4 22:01:07 2026 GMT
Not After : Sep 5 22:01:07 2026 GMT
Subject: CN=5a8444f7d998c5d6920f5c02aa1cc4b5dac223c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:52:fc:44:26:e1:74:d4:da:4e:41:d4:c0:03:
d8:7e:03:9a:e7:1e:56:90:1e:f0:bb:c9:94:f7:23:
b9:f9:4a:7c:d1:90:79:79:fc:3e:fd:14:d6:5a:c2:
d8:04:47:ae:8e:bb:e1:99:a4:28:39:e1:3e:bc:a5:
8c:a1:43:c2:75:3f:08:4a:02:69:80:98:cd:b1:32:
dd:fb:37:8c:cc:b3:9a:f4:8e:43:4f:f0:21:39:cc:
e4:d7:7e:af:39:a8:0c:3c:a9:b6:ca:a0:51:29:d6:
3a:51:55:a1:9e:4f:77:18:2c:0a:bd:d0:40:10:06:
e2:b0:b3:37:08:dd:2c:d8:2e:d9:2d:e7:d6:98:6e:
a8:e3:79:1c:0e:f4:15:db:2f:60:05:65:c3:58:7c:
6a:79:0d:66:49:46:26:49:5b:46:e0:2c:61:da:ff:
d5:30:68:9e:3d:54:ab:11:a0:41:b2:48:95:10:87:
9d:08:66:a2:9d:25:37:72:ba:49:f6:b1:34:bd:c2:
9c:53:99:70:9b:4c:1d:02:81:a5:75:99:54:96:54:
14:4d:13:45:57:3e:12:6f:f9:74:70:e8:ed:0f:88:
4f:fe:fb:29:f3:22:24:c9:55:0c:ac:b4:c6:c3:a7:
e3:23:c3:71:c8:33:a9:98:1e:cb:bd:eb:92:dc:cf:
ae:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:84:44:F7:D9:98:C5:D6:92:0F:5C:02:AA:1C:C4:B5:DA:C2:23:C0
X509v3 Authority Key Identifier:
keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1d:39:9d:c7:b7:c6:d3:a3:c6:3f:df:c7:57:db:8b:37:2a:
9f:6b:66:fb:04:57:76:62:f7:67:b3:72:6d:af:05:00:1d:5a:
a3:35:cf:fc:ea:74:9c:b9:b2:d5:72:cc:fd:4a:25:56:57:1a:
ff:76:cf:9e:f9:44:55:fd:81:bf:bb:4a:ce:2d:ee:36:e2:ae:
85:06:bf:c2:09:9d:40:4f:41:e2:11:e6:fb:f9:97:b1:9d:93:
f1:aa:06:03:ac:35:20:3d:59:e4:d5:a1:cf:ae:c7:73:c5:a7:
2c:4b:d4:c2:b0:ec:54:9e:bd:79:ba:6f:69:10:7c:97:01:ae:
b7:18:80:52:0e:af:f9:2b:56:e1:72:24:b6:1e:82:51:1b:6d:
bf:c4:10:cf:1c:92:9b:c1:e0:0f:d8:de:5c:8a:b4:ac:d7:d7:
2b:2b:c6:30:b4:25:b4:ce:b7:9a:53:e9:5b:31:8f:af:bb:bb:
c0:80:da:c6:f7:22:65:e7:20:68:0a:7d:d2:1e:12:41:84:e9:
91:d6:9e:bc:31:a2:31:1e:cf:69:31:41:5f:67:bd:c9:c2:1a:
b0:84:6c:c7:16:68:8d:18:89:07:c8:e0:02:7a:e1:85:46:44:
b4:52:fc:18:c8:4f:6c:77:ea:2b:c7:b2:07:70:3d:7b:9c:44:
a5:08:12:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:22:40 2026 by rpki-client