Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: VPmN7xzjhdtowq6zrxeZN+Phl2zxqKILyAEhH2Qguxo=
Subject key identifier: 45:32:EF:CA:13:A6:77:F7:87:92:53:2C:30:F6:1D:0D:D3:BD:DA:CE
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 01A1404C5A317CC6192D8F5480BE57DD4086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 14DC
Signing time: Thu 15 Oct 2026 16:01:47 +0000
Manifest this update: Thu 15 Oct 2026 16:01:47 +0000
Manifest next update: Fri 16 Oct 2026 16:01:47 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: I0c2uTJN4WT//FVWAnBl1xIHlWE6YuXotccnRrQwBMg=)
2: K7kf19E8RqOIuQDE1HXceZnfBS4.roa (hash: qUFiFBy2dkZP8rGX/6QQZpm3Sx7bmtP7VKzuR3jDVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4c:5a:31:7c:c6:19:2d:8f:54:80:be:57:dd:40:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Oct 15 16:01:47 2026 GMT
Not After : Oct 16 16:01:47 2026 GMT
Subject: CN=4532efca13a677f78792532c30f61d0dd3bddace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f5:22:45:a0:6f:a9:d2:2f:a6:9e:68:27:96:
25:f2:72:aa:bd:48:b9:87:6c:b0:52:b7:7a:44:3e:
8e:6c:38:67:85:52:a0:6d:48:8a:59:cb:ec:30:55:
31:8a:cc:31:b4:83:50:0a:c4:24:43:07:f4:1e:56:
3f:a9:77:b1:e0:39:26:32:79:0a:b3:28:22:7d:b5:
f6:47:d5:ea:f8:50:65:5e:d0:16:8a:f8:e7:71:af:
57:d2:94:0b:8f:1d:08:18:53:85:31:70:e3:8c:ba:
ce:dc:4c:43:c5:8c:72:98:84:91:b9:0c:40:67:1a:
3a:19:81:3b:9e:20:94:9c:97:1f:01:b0:5e:c4:70:
14:fc:fd:af:af:cf:8a:ce:ef:2a:3d:d0:da:6c:4d:
7c:7c:15:2f:4a:ac:94:c3:3c:23:e6:03:4e:d8:dd:
d5:ed:ab:78:e9:49:9f:b0:b1:54:f4:15:98:21:29:
0a:93:b6:8c:62:2f:ff:7e:5e:41:3e:35:cb:ec:30:
63:41:58:f2:e1:78:95:02:b2:b1:60:b0:b4:ef:c3:
93:a0:fa:aa:a6:d4:11:00:9f:f2:ce:24:de:83:d7:
72:8f:df:c8:0e:da:6a:6a:1c:d8:65:af:23:c1:73:
dd:0e:85:21:0b:48:95:ee:d4:8f:10:59:8a:9c:ca:
f2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:32:EF:CA:13:A6:77:F7:87:92:53:2C:30:F6:1D:0D:D3:BD:DA:CE
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:07:56:28:7c:40:5a:8f:e5:ef:fe:3f:39:f2:02:56:f6:47:
81:f2:ee:f5:9b:bc:19:c2:bc:c5:7e:a5:e0:cb:94:10:3d:bd:
1f:91:60:bc:df:0d:83:c8:2a:b8:ec:02:bc:39:ff:43:bb:0c:
ce:87:37:5a:1e:e2:83:38:e6:38:44:c3:08:9a:9d:1b:72:ab:
98:72:98:bf:e7:9d:dd:40:c1:2d:2a:dc:ea:c5:f9:a7:64:da:
93:2f:9b:a2:ac:27:56:e6:86:b5:da:59:2a:70:83:a3:e7:c6:
da:a1:7c:7d:66:77:a1:4e:18:f6:e7:96:5d:2f:5f:38:cc:bf:
49:fa:d9:e3:80:5c:2f:4b:97:62:33:03:98:7b:79:e7:e6:30:
10:22:6a:a8:c3:98:24:31:d8:27:3a:12:b4:07:a4:34:fd:47:
d1:0c:4f:61:12:78:69:9d:75:a9:7a:e7:28:a4:82:62:22:c1:
77:ab:9a:bf:df:70:1d:ac:76:42:76:f4:69:b9:ab:f6:8b:4d:
07:31:16:86:0f:59:07:2f:be:c0:0b:c7:e5:44:da:f5:7b:0e:
ed:b8:dc:46:41:4e:36:58:fe:b5:b3:c8:c1:7a:9f:08:ac:50:
be:6e:3d:bc:1c:0c:fa:99:dd:fd:4c:6e:04:e0:db:a7:7f:67:
8f:5e:3d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:45:21 2026 by rpki-client