Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: BXMnIHgtfVArW2ty1UhLGV5JX219egEbyczNipvrRdw=
Subject key identifier: 94:CE:C3:C6:DD:A3:AE:7B:95:6E:EF:32:2D:1C:40:33:78:D1:94:C3
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 019E303B31E663AA760ADB9BCC8FDCC24D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 1346
Signing time: Sat 16 May 2026 10:00:46 +0000
Manifest this update: Sat 16 May 2026 10:00:46 +0000
Manifest next update: Sun 17 May 2026 10:00:46 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: XRZ3WalWN7yITMoruNBKOG/lakxS4tJQsl70zIS3J7U=)
2: K7kf19E8RqOIuQDE1HXceZnfBS4.roa (hash: qUFiFBy2dkZP8rGX/6QQZpm3Sx7bmtP7VKzuR3jDVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:31:e6:63:aa:76:0a:db:9b:cc:8f:dc:c2:4d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: May 16 10:00:46 2026 GMT
Not After : May 17 10:00:46 2026 GMT
Subject: CN=94cec3c6dda3ae7b956eef322d1c403378d194c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d2:dd:da:27:dd:ab:f0:29:6e:f7:e1:4c:42:
04:e4:15:91:a1:21:e1:97:c2:74:4c:33:9d:84:52:
7c:ff:51:13:09:9e:19:0f:b9:18:2b:d5:a1:41:d6:
55:33:e7:fe:08:2e:84:d1:6c:7b:58:03:da:ac:8e:
94:45:19:64:57:f9:8c:e4:24:81:e3:f4:a4:84:74:
a1:70:29:3c:3c:53:48:8b:aa:7e:e2:7e:f5:63:3f:
f1:63:e3:eb:3a:cb:1e:51:1e:d5:4b:e3:de:72:3a:
3b:2d:d5:83:3e:a3:15:ca:52:4a:b1:30:a8:2a:92:
3c:77:14:dc:74:60:f5:81:05:85:cb:d5:76:7c:16:
59:2d:d1:ad:45:e3:5e:63:2c:e8:a2:bd:d0:b6:84:
fe:26:51:70:24:bf:1a:a1:92:d7:58:6c:33:88:f0:
3f:11:6b:a3:01:8d:4e:e2:df:e8:06:a1:af:7a:91:
f1:2b:44:95:d9:2c:2d:b2:ea:5a:cc:e6:4e:96:68:
cb:ab:2c:bb:78:1b:c1:b2:7f:bd:40:cb:74:d4:2b:
ed:82:e7:4a:fa:fc:6a:6c:a0:00:4a:41:6d:82:c4:
fd:d7:86:9a:de:d1:8b:6c:6c:34:20:64:9b:de:86:
49:b6:ba:8b:e5:9d:ff:59:6e:ad:13:39:79:ee:e8:
8c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CE:C3:C6:DD:A3:AE:7B:95:6E:EF:32:2D:1C:40:33:78:D1:94:C3
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d0:70:94:d9:6d:ee:34:a0:f8:fc:c0:9c:9c:1f:64:00:8a:
48:c5:a5:30:5e:0c:2d:da:6b:67:ba:58:f7:ba:59:f6:e5:30:
02:68:36:6e:d3:e1:58:d2:1b:6d:88:43:26:4f:f9:fa:18:14:
ae:d9:f4:01:26:ed:03:76:85:ff:96:da:8f:8f:eb:8d:9c:a6:
80:57:9d:c8:33:16:f4:51:eb:27:b9:9e:bb:3b:bf:b7:53:d3:
99:d3:9f:85:53:49:84:03:64:8b:a5:2f:12:1b:95:46:49:40:
d2:7a:e5:94:e9:47:64:a5:57:b7:b2:fd:7d:ef:5d:5c:bb:52:
03:b8:6d:84:df:a5:ee:33:58:74:b3:1d:88:c4:d7:74:be:41:
1a:9d:69:ff:68:60:3b:c8:d3:7d:67:4e:b4:39:f7:8c:52:cf:
f2:f1:6c:82:aa:e5:3d:6c:0e:94:b6:b6:2a:ce:30:f4:d4:03:
1c:03:f4:13:c9:db:66:b3:5b:46:cd:33:e5:36:ee:f8:6b:08:
c1:f3:3f:37:9b:cf:dd:2b:65:7e:5a:15:09:e7:c4:4a:e0:50:
f0:e0:5f:76:a1:f3:82:4f:0d:47:1b:98:38:07:db:4c:1e:c7:
96:63:33:6c:40:98:a5:cd:ef:00:f9:e4:36:d3:50:19:58:7d:
5e:70:2c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:40 2026 by rpki-client