Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
File: BjcCShgkPkX40Eqtrr66kKVp6IM.mft (raw, json)
Hash identifier: 1JyCbuFWm4iS87TijgDuQdeoNQYafVnecW86KBkAMpg=
Subject key identifier: 06:B2:33:BE:45:4C:99:3D:B2:24:B3:13:01:FD:76:4A:03:B1:1F:04
Authority key identifier: 06:37:02:4A:18:24:3E:45:F8:D0:4A:AD:AE:BE:BA:90:A5:69:E8:83
Certificate issuer: /CN=0637024a18243e45f8d04aadaebeba90a569e883
Certificate serial: 01A040178F0B1443B8774CCA6E794EAEC939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
Manifest number: 0497
Signing time: Wed 26 Aug 2026 22:01:20 +0000
Manifest this update: Wed 26 Aug 2026 22:01:20 +0000
Manifest next update: Thu 27 Aug 2026 22:01:20 +0000
Files and hashes: 1: BjcCShgkPkX40Eqtrr66kKVp6IM.crl (hash: nl9GLB5EKWHrtFVU8Y+QgcLWvOw7ZCLsr2/woT0tfeY=)
2: z0siww34BiFOPxp4qjcZFMk0CYM.roa (hash: XIwTqGMVAArrfUFd8jq5Rl4j6adxs4d48gHxnBECSa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:8f:0b:14:43:b8:77:4c:ca:6e:79:4e:ae:c9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0637024a18243e45f8d04aadaebeba90a569e883
Validity
Not Before: Aug 26 22:01:20 2026 GMT
Not After : Aug 27 22:01:20 2026 GMT
Subject: CN=06b233be454c993db224b31301fd764a03b11f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:29:fe:b9:0a:45:60:0a:c6:07:ed:09:ad:
6a:fb:4a:83:f7:95:90:9e:d0:09:0a:e8:f2:20:5e:
e5:4f:98:8f:eb:f1:c2:be:31:bd:f6:3b:fb:1f:74:
79:85:02:a4:39:be:a1:c7:5b:8f:4f:92:3a:22:c8:
6e:c5:75:ad:32:b4:fe:11:78:6d:cb:90:27:8e:27:
61:98:4f:bd:5f:98:29:52:df:d2:9e:ed:ca:9d:43:
e1:fd:ce:d5:14:25:d9:d0:07:f1:d6:f4:f0:f7:d2:
7a:40:d9:76:63:6f:15:0c:c6:76:fa:04:3b:2e:27:
dc:84:5c:4b:3b:dc:03:09:53:f0:c2:bf:66:f5:fa:
44:42:75:13:d3:b5:ba:18:9f:88:fa:de:5f:b5:78:
ef:d9:ee:e1:23:ee:52:89:a6:36:ed:7c:af:68:2b:
f3:bc:40:ed:35:12:25:ca:34:d0:7b:df:0e:e1:66:
03:c9:55:a1:4e:5d:35:3e:fb:36:1d:ec:ef:aa:1f:
dd:09:3d:a3:1e:4c:72:d5:48:24:b9:77:6b:b0:d5:
b6:19:18:b4:a2:a8:6d:8b:99:f2:a1:55:ad:f6:10:
ec:19:2b:47:6b:59:37:88:68:07:dd:c7:3e:0f:05:
22:0a:d3:34:b3:f0:d1:56:da:7f:ba:ce:e8:70:57:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B2:33:BE:45:4C:99:3D:B2:24:B3:13:01:FD:76:4A:03:B1:1F:04
X509v3 Authority Key Identifier:
keyid:06:37:02:4A:18:24:3E:45:F8:D0:4A:AD:AE:BE:BA:90:A5:69:E8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1d:20:16:01:71:c0:18:2c:a8:84:60:bd:db:21:25:3d:4f:
fe:6d:9b:93:aa:ce:5d:ea:be:f5:f0:36:ca:3c:37:4d:d2:ff:
a7:3c:6d:05:3b:87:79:a2:6b:07:1e:ef:1b:1e:19:cd:dc:26:
31:82:36:21:da:d3:1e:75:d9:e8:0f:e0:5e:db:9a:a7:85:ea:
25:d7:73:79:3c:81:eb:8b:fa:f7:49:43:bc:eb:c8:63:23:66:
9b:c8:59:f0:a1:4e:61:27:96:82:f1:4d:2e:4e:17:eb:fa:ca:
d4:24:7d:9f:84:02:42:c1:bf:58:97:3c:d2:f2:8b:a0:e8:9c:
ac:a0:0f:78:0a:2b:a4:ff:1f:01:09:7a:de:27:f6:a8:a0:e2:
00:eb:aa:be:60:88:e5:a5:2b:3f:fa:07:13:09:c3:7c:e0:63:
8e:d1:7f:a0:69:4e:8b:76:40:2b:90:4b:18:d0:49:81:92:68:
43:2f:85:36:a4:50:19:0f:f5:42:8b:4f:9b:07:4d:0a:75:a7:
2e:0f:42:c7:7a:46:08:9b:ae:58:84:91:96:a6:39:66:78:78:
ac:c2:f1:7a:23:c8:f1:b3:5c:8a:13:8f:0c:cd:69:01:f0:a5:
44:e5:6d:ca:83:33:a6:6d:d7:70:3e:47:ce:4f:1b:48:50:11:
a1:93:30:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAF48LFEO4d0zKbnlOrsk5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MzcwMjRhMTgyNDNlNDVmOGQwNGFhZGFlYmViYTkwYTU2
OWU4ODMwHhcNMjYwODI2MjIwMTIwWhcNMjYwODI3MjIwMTIwWjAzMTEwLwYDVQQD
EygwNmIyMzNiZTQ1NGM5OTNkYjIyNGIzMTMwMWZkNzY0YTAzYjExZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytQp/rkKRWAKxgftCa1q+0qD95WQ
ntAJCujyIF7lT5iP6/HCvjG99jv7H3R5hQKkOb6hx1uPT5I6IshuxXWtMrT+EXht
y5AnjidhmE+9X5gpUt/Snu3KnUPh/c7VFCXZ0Afx1vTw99J6QNl2Y28VDMZ2+gQ7
LifchFxLO9wDCVPwwr9m9fpEQnUT07W6GJ+I+t5ftXjv2e7hI+5SiaY27XyvaCvz
vEDtNRIlyjTQe98O4WYDyVWhTl01Pvs2Hezvqh/dCT2jHkxy1UgkuXdrsNW2GRi0
oqhti5nyoVWt9hDsGStHa1k3iGgH3cc+DwUiCtM0s/DRVtp/us7ocFeilQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAayM75FTJk9siSzEwH9dkoDsR8EMB8GA1UdIwQY
MBaAFAY3AkoYJD5F+NBKra6+upClaeiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmpjQ1NoZ2tQa1g0MEVxdHJyNjZrS1ZwNklNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85NzMwZDQtNGY3ZC00OTQzLWI5ZmIt
N2Q5NGE5NGUzMzEyLzEvQmpjQ1NoZ2tQa1g0MEVxdHJyNjZrS1ZwNklNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy85NzMwZDQtNGY3ZC00OTQzLWI5ZmItN2Q5NGE5NGUzMzEy
LzEvQmpjQ1NoZ2tQa1g0MEVxdHJyNjZrS1ZwNklNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAx0gFgFx
wBgsqIRgvdshJT1P/m2bk6rOXeq+9fA2yjw3TdL/pzxtBTuHeaJrBx7vGx4Zzdwm
MYI2IdrTHnXZ6A/gXtuap4XqJddzeTyB64v690lDvOvIYyNmm8hZ8KFOYSeWgvFN
Lk4X6/rK1CR9n4QCQsG/WJc80vKLoOicrKAPeAorpP8fAQl63if2qKDiAOuqvmCI
5aUrP/oHEwnDfOBjjtF/oGlOi3ZAK5BLGNBJgZJoQy+FNqRQGQ/1QotPmwdNCnWn
Lg9Cx3pGCJuuWISRlqY5Znh4rMLxeiPI8bNcihOPDM1pAfClROVtyoMzpm3XcD5H
zk8bSFARoZMwhg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:54:08 2026 by rpki-client