Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
File: BjcCShgkPkX40Eqtrr66kKVp6IM.mft (raw, json)
Hash identifier: Q4u5FwqbNqcMaXQQ6lveT820PxB2oLS4C14LXSQKjpQ=
Subject key identifier: B4:08:B9:7D:20:A4:EA:66:60:59:28:FF:24:99:E2:80:EB:77:A3:06
Authority key identifier: 06:37:02:4A:18:24:3E:45:F8:D0:4A:AD:AE:BE:BA:90:A5:69:E8:83
Certificate issuer: /CN=0637024a18243e45f8d04aadaebeba90a569e883
Certificate serial: 019D37C0B9C5FF1FE5887BC270213B586E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
Manifest number: 0305
Signing time: Sun 29 Mar 2026 04:01:10 +0000
Manifest this update: Sun 29 Mar 2026 04:01:10 +0000
Manifest next update: Mon 30 Mar 2026 04:01:10 +0000
Files and hashes: 1: BjcCShgkPkX40Eqtrr66kKVp6IM.crl (hash: HtpnBN4hvyg02DX7sIEvfiNgCIfX/5oHZl+ktnjVBhg=)
2: z0siww34BiFOPxp4qjcZFMk0CYM.roa (hash: XIwTqGMVAArrfUFd8jq5Rl4j6adxs4d48gHxnBECSa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b9:c5:ff:1f:e5:88:7b:c2:70:21:3b:58:6e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0637024a18243e45f8d04aadaebeba90a569e883
Validity
Not Before: Mar 29 04:01:10 2026 GMT
Not After : Mar 30 04:01:10 2026 GMT
Subject: CN=b408b97d20a4ea66605928ff2499e280eb77a306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:e4:42:50:f3:66:c4:6f:c6:19:8d:d1:50:
c5:0c:56:e3:05:b9:ab:a8:4e:e9:78:b7:3a:f7:2a:
f2:d1:26:94:2c:61:0c:3b:0d:86:00:a6:f9:99:1b:
50:9a:f3:f8:33:f7:68:f7:bc:b4:33:68:ca:85:18:
1b:29:56:00:41:76:10:f1:ce:89:2d:ac:ac:ca:1c:
f5:07:79:32:f8:81:f7:9a:ea:8b:d5:df:30:5a:91:
bf:4e:bf:0d:63:2a:7a:f2:40:82:4d:8f:af:42:f0:
e8:b9:c5:0f:66:b7:0c:98:e3:6e:06:29:f9:36:b9:
5d:86:c9:58:19:a4:72:bd:20:70:4c:24:31:fc:31:
40:ec:20:0b:ae:9c:d3:14:80:94:9b:c1:7b:a7:b3:
ba:d9:58:50:a6:4b:5c:39:d7:3f:1d:ca:31:55:a2:
35:1c:6b:85:66:37:b5:f2:3f:9f:32:35:c7:b6:6f:
fc:38:53:ed:c2:89:5d:26:b5:7c:e3:77:94:74:db:
d7:e9:3a:a6:e1:b2:e5:d6:e9:ce:90:aa:22:5b:0a:
ad:cd:a1:32:c3:43:bd:75:43:d6:ea:25:26:0e:95:
6d:7d:d6:52:32:4a:66:0a:9e:27:43:ed:1a:3c:53:
10:f2:5d:40:5c:85:f2:76:87:70:1c:73:4e:38:9b:
e1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:08:B9:7D:20:A4:EA:66:60:59:28:FF:24:99:E2:80:EB:77:A3:06
X509v3 Authority Key Identifier:
keyid:06:37:02:4A:18:24:3E:45:F8:D0:4A:AD:AE:BE:BA:90:A5:69:E8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:64:24:05:bc:ac:ad:c5:e7:04:7a:52:1a:fb:10:7b:87:c6:
18:f7:95:02:2f:1d:97:79:8d:20:49:ca:66:e9:3a:a9:7b:1a:
d2:cc:b0:7b:3c:74:dc:c0:e2:59:a4:d6:a3:99:7e:81:f6:72:
c0:54:7a:b9:2c:87:72:99:15:85:be:99:89:b2:4d:c1:70:d6:
f0:a1:3d:18:8c:f5:6d:f2:7d:a2:5d:23:3c:b4:19:d2:3e:79:
0f:56:82:7e:c1:cf:78:0b:6b:97:6f:bf:67:07:56:47:9a:b5:
ce:2a:e1:08:b0:fc:6c:eb:a1:71:04:6d:cc:a3:c5:2e:3e:4c:
14:1a:e0:57:86:c2:35:04:61:ad:ca:37:74:06:b7:b6:41:96:
62:77:49:a0:81:f7:9a:0a:27:93:8c:af:8e:d9:f8:5f:97:7f:
da:70:18:3f:35:0b:10:d6:c9:f5:2a:e9:7d:a3:bf:0c:d1:5c:
f5:ed:ec:e1:c3:e6:45:06:28:26:a5:2f:e8:9d:c0:62:91:3f:
c4:e6:53:cd:fd:27:2a:7c:b6:af:29:ec:10:02:1d:b2:9a:21:
0c:28:b3:c4:be:ed:b6:e8:60:d4:10:41:af:88:cc:f9:b5:b1:
b0:13:ab:eb:f1:77:51:6a:78:da:1f:e5:e2:b4:99:5e:87:8c:
e5:1f:9f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:13 2026 by rpki-client