Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: j85WY+/SJsy/bnwZiNYP3XLYGhRvaAJ15kTfzN8AT7Y=
Subject key identifier: E3:1F:B5:E6:0E:76:9B:41:D3:46:9F:E4:46:92:6E:DF:1B:48:07:C2
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 019F664BDEB0C4B8C0A773E8AE48131DDF19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 18F6
Signing time: Wed 15 Jul 2026 15:01:15 +0000
Manifest this update: Wed 15 Jul 2026 15:01:15 +0000
Manifest next update: Thu 16 Jul 2026 15:01:15 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: /2GUq+ymWmRb1YVqol4Tl5UlzMEA+x6vcpozHsJ1MwA=)
2: MzCZNjdBmMG-S9j61yIRLE51zQU.roa (hash: /f1l2aBevU/UCCB1M8fW5aBOaUCeB8ylNLs+oJQ9huU=)
3: uAumN_d_Q_yun5QzcR-UbXWPBU8.roa (hash: YEbqonGNno7TcnGdoHF66lGtgeHYIPwdSCSN8qlpAMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 14:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:4b:de:b0:c4:b8:c0:a7:73:e8:ae:48:13:1d:df:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Jul 15 15:01:15 2026 GMT
Not After : Jul 16 15:01:15 2026 GMT
Subject: CN=e31fb5e60e769b41d3469fe446926edf1b4807c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ad:29:87:c1:ee:43:67:2b:22:04:41:2f:4d:
52:76:12:f1:d1:19:ce:d0:ee:83:29:a7:f9:0f:ad:
fd:50:97:41:17:df:c5:43:63:d9:70:6c:31:95:60:
85:48:b4:65:5c:23:80:fc:45:bb:dc:54:d3:91:a1:
aa:b7:5e:51:a8:55:c5:e6:16:5a:e6:71:ce:1e:d3:
18:29:74:d2:ea:fb:64:f1:6a:be:f3:51:f6:4b:18:
19:da:84:e0:63:36:f0:73:95:f9:a3:66:53:20:d4:
9b:cc:56:b0:99:df:be:f7:c2:1f:d8:fb:33:fb:10:
ed:27:52:9b:83:29:c1:8e:22:57:86:95:5f:35:06:
53:49:50:7d:c7:d3:26:b3:7d:fa:a4:62:f2:a5:34:
86:98:09:d6:be:55:27:79:27:66:0f:c8:e0:f7:d8:
4d:fc:ed:21:d1:2d:fc:af:a2:a2:1c:94:3b:e5:dc:
97:a7:a0:11:e7:01:66:04:e6:ed:e8:88:99:98:65:
d5:15:6b:7b:aa:1f:67:64:81:25:d1:65:fc:2d:0f:
8f:69:ee:8e:7d:ae:99:32:99:78:96:6d:be:96:52:
c8:58:57:47:db:1a:a6:26:e7:ad:ad:9e:68:b3:2f:
cd:d5:9f:1e:7b:9a:0b:54:2d:d1:9a:dd:65:71:6f:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1F:B5:E6:0E:76:9B:41:D3:46:9F:E4:46:92:6E:DF:1B:48:07:C2
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:dd:4c:7b:57:92:c2:66:63:d4:1b:47:a0:d9:ad:34:7e:5b:
45:37:c0:05:d1:d6:0b:ea:c0:e8:e7:60:78:48:9c:a5:35:65:
82:a9:27:6d:11:f8:55:ad:e9:e8:84:c8:b5:8a:60:da:94:52:
a6:17:1e:1e:b0:17:66:89:82:12:38:4f:8f:89:88:e3:be:0d:
6d:c5:68:42:48:52:14:33:83:b1:40:2d:cf:4e:aa:b2:ab:3d:
86:96:35:e6:5f:09:6b:87:0d:2a:b5:23:70:c4:75:be:11:40:
43:d7:3c:8a:d4:cc:5b:a6:94:c2:6b:50:34:91:7d:7a:f5:5d:
c8:48:d8:23:da:1d:19:9f:a8:0f:8d:5d:16:6f:df:4e:cb:d1:
f7:9b:8d:e5:a0:52:03:0c:8d:f2:e7:ed:58:14:11:04:57:a3:
4f:7d:85:da:3c:a5:fb:9a:7e:40:ce:0d:95:f9:0e:05:2e:b1:
cb:23:7b:c8:ac:6e:81:53:b0:d3:b0:5d:bb:3c:ee:94:db:5d:
5b:28:54:c3:9e:a3:17:71:41:37:0c:c3:5b:46:09:86:1f:c8:
d4:a1:9e:b4:1d:76:31:71:15:35:e6:ed:1f:3a:47:ea:57:1c:
e8:a1:94:97:97:97:ba:ca:2c:0e:b0:2c:46:4d:71:08:3c:d1:
af:25:4d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 23:57:41 2026 by rpki-client