Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: U7snFncBnJ2ansEDOVthFcFNu+okpUaRJgbwO6C5Rww=
Subject key identifier: C0:D5:7A:E4:BB:00:FC:D0:3D:22:36:35:D8:D9:6C:CA:67:9F:EB:E4
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 01A001A647625C9F5C8BD81CFBCF1D136996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 1437
Signing time: Fri 14 Aug 2026 19:01:09 +0000
Manifest this update: Fri 14 Aug 2026 19:01:09 +0000
Manifest next update: Sat 15 Aug 2026 19:01:09 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: JPjiXFmuKpwOBKtnBqmRJ2vCEeuV8IMmXmGCJa7iiKM=)
2: K7kf19E8RqOIuQDE1HXceZnfBS4.roa (hash: qUFiFBy2dkZP8rGX/6QQZpm3Sx7bmtP7VKzuR3jDVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:47:62:5c:9f:5c:8b:d8:1c:fb:cf:1d:13:69:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Aug 14 19:01:09 2026 GMT
Not After : Aug 15 19:01:09 2026 GMT
Subject: CN=c0d57ae4bb00fcd03d223635d8d96cca679febe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:25:e4:e6:ec:2a:d6:da:6d:72:c6:92:35:
32:2c:c8:89:67:68:ba:01:31:ed:94:d8:89:fa:f2:
ea:3f:cd:2a:7e:84:71:a8:70:39:44:09:4d:51:f6:
77:d1:42:08:e3:b8:9d:da:27:7d:74:36:33:b4:a1:
dc:34:21:76:29:8b:93:3e:21:e3:80:a3:1d:58:2b:
c7:92:92:c7:69:a4:18:f1:96:3c:ee:b7:95:17:5c:
af:e5:4f:5c:9c:2d:9a:72:cd:b8:21:41:3a:08:61:
f7:ef:fc:73:96:b5:68:17:40:73:c5:42:c4:16:3a:
df:f2:37:7c:53:73:a7:81:f6:8c:56:4f:71:d1:a5:
1f:03:2c:10:e5:ae:bd:74:fb:b5:46:8a:d8:89:d7:
85:6c:7e:e4:bb:02:70:18:52:28:00:50:cd:2e:ae:
69:d8:21:a1:5e:2d:01:73:09:22:1f:d0:55:ab:ec:
a8:ad:07:0b:24:fc:80:5c:5e:91:62:8f:0c:73:e4:
d7:ff:26:57:f9:70:b0:09:54:5f:42:e8:53:63:f7:
ac:76:38:b1:1e:d5:17:94:7e:4e:9a:b4:40:9a:ea:
fa:ff:26:11:94:29:08:41:6f:3c:48:17:28:bf:55:
ac:3b:10:a3:60:5d:70:c2:6c:9e:ae:69:b6:e2:9a:
92:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D5:7A:E4:BB:00:FC:D0:3D:22:36:35:D8:D9:6C:CA:67:9F:EB:E4
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bc:ec:b4:bd:aa:ab:07:b9:4e:10:bb:5d:8b:f3:da:3b:74:
8b:3b:90:a0:00:6c:cb:92:b0:1b:ea:56:aa:af:eb:e5:b7:a4:
81:05:d7:d7:4c:bd:10:9a:76:cf:2b:29:e3:7e:b6:06:0b:a1:
67:54:84:0b:8a:e6:d1:e9:6a:dd:65:1d:92:2c:c3:20:b5:a2:
b1:24:90:fb:05:c0:32:e4:94:37:07:43:ec:3f:d5:43:7b:51:
9c:a2:77:24:5c:d4:fa:6a:9c:9b:9a:c6:10:93:f5:cd:22:95:
69:33:ef:64:64:9f:cb:ad:ba:0a:18:8e:af:4b:58:58:3d:05:
ac:bc:40:05:c7:37:5b:08:1d:b9:34:ca:a0:23:04:46:c8:87:
3c:5c:a1:b2:31:d8:88:f3:5a:43:84:60:52:17:89:cd:7a:29:
1e:30:bd:ed:25:23:b2:fe:84:85:89:ff:f2:d8:0c:50:e7:b3:
8a:ba:eb:ca:99:a6:04:15:cc:9a:22:ae:cb:11:6d:11:40:9f:
93:e7:57:08:5c:06:e2:42:9b:d7:03:80:0e:ff:11:f8:94:0f:
15:77:27:58:a8:c4:8f:b9:33:39:1a:72:bd:f3:ac:2e:d5:70:
93:8d:7c:05:44:93:a7:33:be:2f:ce:a8:fc:95:a1:54:85:c8:
ea:f6:01:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:58 2026 by rpki-client