Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: qxr/0WKuoBEyymqnGfPzhDJnkWOjbYp2N9NvZtkgs+8=
Subject key identifier: 4D:09:8C:FA:83:A2:13:10:9C:46:6E:BC:63:70:2B:A6:89:2F:FE:7A
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 019F17F9C4048694CBE39AEBC9E67459EDDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 13BE
Signing time: Tue 30 Jun 2026 10:01:12 +0000
Manifest this update: Tue 30 Jun 2026 10:01:12 +0000
Manifest next update: Wed 01 Jul 2026 10:01:12 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: TPKIwsfaPPt4Fj5YvFzoSj1Oxn34FLCvBHob9AJYyWc=)
2: K7kf19E8RqOIuQDE1HXceZnfBS4.roa (hash: qUFiFBy2dkZP8rGX/6QQZpm3Sx7bmtP7VKzuR3jDVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:c4:04:86:94:cb:e3:9a:eb:c9:e6:74:59:ed:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Jun 30 10:01:12 2026 GMT
Not After : Jul 1 10:01:12 2026 GMT
Subject: CN=4d098cfa83a213109c466ebc63702ba6892ffe7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:69:b4:0d:c8:54:a9:82:7d:f1:4a:01:df:
a6:57:1b:63:d3:be:2a:73:6a:cf:35:0b:72:57:d4:
48:14:aa:5d:f5:48:64:42:c4:b3:a0:e4:4e:80:f1:
23:48:9e:d7:39:97:d0:5e:1e:b6:38:50:36:83:c9:
24:1a:b0:f8:3c:b8:98:be:d9:09:7d:08:b1:9e:14:
0c:4c:ef:55:f6:3d:ec:c1:c2:b8:af:4f:c3:fc:a7:
3c:3e:f2:90:32:d7:76:ab:b6:03:8a:f0:06:14:3b:
05:09:ca:06:1e:5b:57:84:7d:23:87:32:f3:11:11:
e4:5e:2c:2e:c9:8d:16:a7:e2:09:0d:dd:35:51:41:
3b:36:0c:cd:ec:03:84:3f:5e:f0:1f:a7:f7:aa:73:
dd:62:38:32:27:f1:25:1a:8c:43:5b:49:20:5f:9d:
52:d0:bf:ec:21:30:18:23:76:da:bf:70:1d:d9:93:
7e:fc:0f:19:be:fa:1f:c6:dd:cc:49:2f:1c:fb:39:
ae:4b:32:81:6a:d7:c7:3f:a5:87:8a:42:b8:8f:f7:
5c:af:62:fd:c7:a5:cc:95:ba:6a:9d:da:9f:93:a1:
5e:7c:b4:ea:ed:26:ee:b6:46:20:8c:7c:0f:79:09:
b1:ab:c8:39:0a:3d:42:49:38:52:a3:90:fe:71:e1:
ea:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:09:8C:FA:83:A2:13:10:9C:46:6E:BC:63:70:2B:A6:89:2F:FE:7A
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:bd:32:45:9f:1e:04:79:f2:2b:65:79:13:c4:02:21:a3:2e:
11:39:ac:2a:35:4e:b2:04:ef:20:ea:e1:ec:45:ef:1c:bf:a3:
5e:79:7e:5a:67:6f:75:31:00:ec:43:64:c7:94:84:f5:ea:a6:
50:5a:a1:dc:f3:bf:45:57:ee:29:2d:42:b8:2e:67:aa:4b:f3:
79:f6:db:ff:78:3b:7e:f2:9e:8d:62:f2:75:6c:a2:40:39:13:
3b:02:48:ff:97:ee:22:79:ac:50:b1:5b:b7:64:a7:cd:3e:cf:
27:43:5f:03:7c:45:19:fa:11:4a:6c:76:15:27:9d:22:5e:08:
fe:51:72:70:2a:45:04:17:83:5a:6c:e5:08:a9:69:e2:b4:54:
de:ae:1a:23:b8:48:08:4c:c3:57:3a:4a:2c:cb:b0:e6:7c:7d:
b3:49:63:82:af:aa:89:2b:64:e9:59:91:d4:f5:56:fd:f7:5d:
d7:5f:d6:c1:1c:1f:f1:74:46:e1:0b:40:89:03:8c:fc:ae:f6:
ea:6e:33:82:c9:95:26:d5:cd:7c:ba:39:64:b8:d0:3e:68:91:
37:97:aa:37:57:95:8a:c7:2a:a0:99:8f:e2:1c:29:72:10:d1:
26:7a:7c:da:17:51:ba:0a:3b:2c:94:f0:1e:0e:64:0a:96:07:
38:56:b4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:24 2026 by rpki-client