Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
File: BjDTqdwDknrlWoHYbKkb3J7nTHM.mft (raw, json)
Hash identifier: qWzGivKuIX9JIrZHK2NGXL9RchzQkYQa4qmxEJIjitE=
Subject key identifier: 2D:F8:E1:87:57:EC:9A:43:35:BD:FA:C2:90:DF:79:3C:3E:61:A9:70
Authority key identifier: 06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
Certificate issuer: /CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Certificate serial: 019D37C091CF6FE8437E0BDC71CFF1348BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
Manifest number: 1569
Signing time: Sun 29 Mar 2026 04:01:00 +0000
Manifest this update: Sun 29 Mar 2026 04:01:00 +0000
Manifest next update: Mon 30 Mar 2026 04:01:00 +0000
Files and hashes: 1: BjDTqdwDknrlWoHYbKkb3J7nTHM.crl (hash: 2XJ5w6M7cHdqIJtKLm79kNRfxEfZlTSDVX0dwcqzMnw=)
2: WG28MJ6GfBcScCKqRDEvob91T1k.roa (hash: 6xxB8aNVMWtEKkp4uvdHGR25LDD6UpDdJnexnLea70w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:91:cf:6f:e8:43:7e:0b:dc:71:cf:f1:34:8b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Validity
Not Before: Mar 29 04:01:00 2026 GMT
Not After : Mar 30 04:01:00 2026 GMT
Subject: CN=2df8e18757ec9a4335bdfac290df793c3e61a970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5c:d3:af:91:75:e4:28:7f:3d:0c:42:48:08:
f5:3c:97:8f:84:38:00:36:76:38:ed:ba:4a:75:97:
02:ad:08:e8:85:da:7a:d2:5e:d0:7b:e9:94:6a:3e:
a0:7f:ee:21:a1:c5:e1:01:3e:57:06:e5:ac:43:ef:
98:18:b9:aa:f7:ce:64:f2:c2:83:8b:61:9c:58:25:
80:aa:c7:60:61:29:15:03:3b:b1:3d:2e:2a:1c:31:
59:84:c9:19:f5:59:a2:3b:37:13:a9:30:5a:18:9a:
3f:ee:a7:a4:ec:ad:35:74:dd:1e:69:c6:0f:55:30:
ad:25:a1:e0:c7:56:3f:a1:ba:9c:a8:34:d2:fd:7e:
2e:c6:16:da:ed:3c:7d:c7:b2:21:61:04:f5:1b:3b:
b8:52:2e:14:2a:b0:0c:00:ef:f3:a7:0d:b8:ed:fc:
1b:c1:d5:48:35:23:4a:5e:74:66:78:75:13:63:d2:
08:be:55:a3:4b:97:2f:07:33:5d:f4:5a:4c:ed:9e:
04:6e:b4:4b:ff:83:08:de:e9:22:4c:98:2b:38:af:
36:5c:09:ce:62:2a:34:95:50:e4:68:22:48:5b:2a:
b7:81:5e:31:bf:a0:dd:77:c0:c5:0d:b3:35:47:76:
fd:15:71:8e:70:6c:93:a8:21:44:79:62:4d:81:06:
2e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F8:E1:87:57:EC:9A:43:35:BD:FA:C2:90:DF:79:3C:3E:61:A9:70
X509v3 Authority Key Identifier:
keyid:06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5b:b7:fc:44:f9:6f:1f:58:02:60:27:01:f6:8b:7c:b8:a6:
46:92:fd:84:7f:ce:d9:62:86:0b:c6:3f:db:14:15:83:f2:f5:
d8:92:ff:d0:b9:89:de:98:ab:48:ed:85:c7:73:a6:d2:03:22:
7d:53:4e:81:57:6d:a5:4c:4c:54:fa:12:ca:64:eb:97:d2:1f:
db:42:4b:06:39:61:d9:b1:ed:55:48:00:42:9b:00:03:e0:d2:
6c:a9:49:47:4a:05:14:89:e9:5c:7e:63:6d:20:bc:bf:82:94:
e5:c7:2d:a0:dc:62:48:74:83:07:b7:80:d9:c0:6a:f3:6e:f1:
a2:0a:13:79:17:8f:17:5c:05:ee:d8:4b:58:ec:b9:88:b6:4c:
80:a0:32:26:6e:06:b1:8d:b4:8d:2d:64:75:eb:10:8c:f6:5a:
a6:f5:bb:5e:cf:d5:e4:68:ad:7c:63:3b:d1:7e:7b:bd:86:8a:
47:15:60:c2:fa:3f:9d:89:f8:40:c3:d6:ee:16:32:86:d3:47:
42:0e:96:d9:90:6e:a4:80:dd:3d:5f:86:f1:ee:37:4b:33:85:
09:ee:55:e2:d8:b2:2e:42:3f:1d:63:03:4a:ef:6c:b7:ff:3f:
1b:f1:00:35:bb:58:14:22:79:77:dc:e8:d5:b1:87:99:f9:1f:
7d:4c:6e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:28 2026 by rpki-client