Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: CyljiUEcLBQSw+rLL+Rst8bUrkjvrHefUAmk9xcIeQ0=
Subject key identifier: 10:3B:B0:73:A2:38:75:F1:0E:22:A9:9D:74:07:7D:67:E4:2D:9A:FD
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 019D390A6466497EDC7FDECE75FAC842053A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 12C6
Signing time: Sun 29 Mar 2026 10:01:15 +0000
Manifest this update: Sun 29 Mar 2026 10:01:15 +0000
Manifest next update: Mon 30 Mar 2026 10:01:15 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: HCmPn9oichlN1tn4FktEzb/4nz6bhx73b20W0PpwJ1U=)
2: K7kf19E8RqOIuQDE1HXceZnfBS4.roa (hash: qUFiFBy2dkZP8rGX/6QQZpm3Sx7bmtP7VKzuR3jDVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:64:66:49:7e:dc:7f:de:ce:75:fa:c8:42:05:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Mar 29 10:01:15 2026 GMT
Not After : Mar 30 10:01:15 2026 GMT
Subject: CN=103bb073a23875f10e22a99d74077d67e42d9afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:4c:60:32:19:d4:a4:23:51:a8:95:3e:c2:
94:65:97:66:3b:a4:b2:b6:25:1f:83:a2:24:eb:30:
c8:e5:bb:fd:b7:0e:1f:9f:88:75:06:d2:a7:cb:c5:
a9:3c:f8:5e:00:6a:57:2c:a9:79:1f:40:c6:7d:a5:
63:a9:1a:26:b3:36:d8:9f:6b:60:c6:27:ce:18:de:
7b:30:a4:0f:88:39:c7:f0:4f:8c:ce:76:7f:95:e5:
4a:26:b2:5d:5d:7a:d6:5a:52:9b:40:34:5e:01:14:
ca:b8:6e:a8:b6:1c:d7:fe:7d:b3:87:80:95:2c:88:
4b:d0:01:bd:f0:e4:cf:4c:62:62:67:10:87:80:49:
33:e0:6d:b8:fd:1d:7a:ad:0a:4c:3d:de:ef:f9:75:
5d:39:36:93:aa:75:e4:d9:12:9d:f0:98:d7:db:db:
1f:79:3b:40:d3:0a:1d:f0:ce:49:22:22:50:90:30:
62:18:69:1e:4f:25:18:52:dc:08:b3:c2:ff:37:68:
d5:cf:46:40:39:ce:f0:45:7c:6f:a1:52:96:88:cb:
2a:c5:de:86:c6:00:0f:43:cd:42:51:58:95:e7:d2:
fb:ce:c7:5f:c0:cb:43:0a:b2:0d:a6:af:94:d4:5b:
7e:2f:86:18:f4:01:aa:e0:22:1b:b1:f8:ae:5f:80:
42:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3B:B0:73:A2:38:75:F1:0E:22:A9:9D:74:07:7D:67:E4:2D:9A:FD
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:66:d9:73:78:d4:57:d5:2a:a3:a6:5f:db:db:8f:55:2a:71:
80:62:a9:28:5d:74:52:6e:cf:27:a7:0b:62:f8:13:95:fc:8a:
49:d4:c1:2f:bc:85:a5:f4:e5:8c:75:29:95:45:36:2e:82:64:
18:35:2a:ab:d9:13:a2:c2:d3:fd:8d:96:0f:2d:1f:27:73:64:
89:00:05:ff:90:6a:47:d7:53:1f:be:be:c5:13:27:b2:44:f2:
e1:2f:bf:3f:1b:40:66:75:88:3a:0d:de:f7:64:f7:e5:95:62:
27:5e:3b:33:68:eb:63:4d:58:16:70:39:7f:e9:29:7b:5b:1e:
f0:72:39:72:34:dd:b8:40:4b:c0:f9:ec:e8:71:22:75:a7:b3:
f0:64:8d:49:ae:bb:0f:e8:fd:d3:e8:0f:5e:19:e2:c8:1d:68:
b9:64:bb:48:a0:6b:f5:f1:f1:38:fc:a1:71:5e:37:d7:f2:99:
45:98:ae:79:81:22:8c:1d:9f:79:75:29:28:10:3a:2d:d7:71:
54:99:92:b3:ba:d3:d6:61:db:ea:a0:92:10:d6:c7:82:6a:0a:
c4:e1:c5:92:ac:6a:fb:d1:ed:eb:4a:1d:6d:1e:70:17:8a:3d:
ec:ef:2f:6b:b7:46:d2:c0:39:66:87:10:06:85:50:be:e6:eb:
40:d8:6b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:50 2026 by rpki-client