Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: 29iCVgvzZZPxSiznG03/R8KRGKz3mP8yp9pfWgykrHs=
Subject key identifier: 7D:28:01:71:21:CB:5F:70:BF:31:FB:37:87:96:DE:AA:AF:61:63:98
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 01A13F709DA055D7AE8FED3475FD847221B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 19EB
Signing time: Thu 15 Oct 2026 12:01:47 +0000
Manifest this update: Thu 15 Oct 2026 12:01:47 +0000
Manifest next update: Fri 16 Oct 2026 12:01:47 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: c5Pblq5Mp+uiYXMTwpIrQWIfZaSxpctWS5vuxgLzXKU=)
2: MzCZNjdBmMG-S9j61yIRLE51zQU.roa (hash: /f1l2aBevU/UCCB1M8fW5aBOaUCeB8ylNLs+oJQ9huU=)
3: uAumN_d_Q_yun5QzcR-UbXWPBU8.roa (hash: YEbqonGNno7TcnGdoHF66lGtgeHYIPwdSCSN8qlpAMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:9d:a0:55:d7:ae:8f:ed:34:75:fd:84:72:21:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Oct 15 12:01:47 2026 GMT
Not After : Oct 16 12:01:47 2026 GMT
Subject: CN=7d28017121cb5f70bf31fb378796deaaaf616398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:17:64:1a:63:7f:a8:db:a4:4b:ca:d1:37:40:
62:df:36:9a:0c:01:60:05:15:37:08:67:26:1c:09:
0f:db:e5:b5:0f:5d:e0:4e:e8:08:b6:d5:94:6f:10:
b1:e1:e6:2c:5f:1d:7e:37:37:13:43:37:54:e9:f3:
b4:b8:99:59:fc:ba:04:7a:7e:a2:50:98:ee:fc:ef:
dc:38:88:4c:3d:02:a3:47:09:ed:96:06:a6:56:0a:
80:a4:2c:3c:45:50:ff:5e:ac:71:85:46:dc:c2:b2:
2a:c8:be:0f:82:6d:9d:e5:8e:1d:65:2c:94:e7:41:
ab:e7:9d:0d:05:e2:46:d0:61:07:90:3c:0e:31:69:
f3:a3:9c:a0:83:61:e6:86:45:e0:0f:f4:3d:c7:2e:
21:36:96:76:28:1f:bf:d4:bb:fb:88:d4:e9:4b:fa:
f7:ad:f1:50:7c:db:82:4a:e8:75:5e:7f:a1:5e:d3:
87:1d:25:48:fe:ac:08:6c:d6:47:69:13:50:78:67:
c4:b9:cb:a1:5a:4a:bd:00:e4:54:e2:7b:ee:b1:33:
31:d7:ea:04:cc:6e:a7:a8:88:6e:3d:07:63:bd:75:
7a:bd:fb:17:73:0d:d1:74:5c:21:19:45:ca:82:13:
f3:49:c1:d2:7b:af:3a:14:2a:20:80:bf:3a:66:d9:
c2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:28:01:71:21:CB:5F:70:BF:31:FB:37:87:96:DE:AA:AF:61:63:98
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4b:03:39:bf:7a:e0:67:f4:92:6b:ce:e3:f1:ff:74:bb:6e:
50:2f:8a:9f:5b:e3:e4:54:7f:c7:5e:9b:50:ec:d9:bb:8c:27:
ac:7c:63:2d:cf:41:29:c5:1b:45:ad:0b:4f:38:04:21:b7:b1:
32:48:e2:e4:9d:7e:4e:e6:3b:da:47:f2:f4:71:86:27:46:61:
83:1f:8d:81:dc:d3:9c:a2:e1:d3:f2:3d:c2:60:56:45:07:97:
8b:3a:eb:e9:6d:dd:b0:90:55:6b:1c:ed:3e:a3:77:05:a7:2d:
c5:b0:bd:58:3c:58:58:33:89:9f:30:24:fa:dc:56:52:4d:ae:
99:6e:6e:c7:bc:c7:93:6d:d7:b9:1b:24:a9:ba:fd:16:9e:ff:
c3:37:da:64:8a:bf:e1:4a:da:4a:d8:64:55:a5:95:56:31:95:
6c:d2:f8:7e:93:1d:0a:f2:24:27:4d:9c:26:a0:0a:2f:4b:04:
4d:7f:46:ee:ba:e9:92:41:5f:74:29:c2:94:27:93:7c:c6:7c:
ab:48:3b:3b:51:14:47:e8:9a:bb:ce:13:95:ba:de:5f:06:91:
a9:52:ca:6f:d3:83:fd:f1:81:b9:3e:02:fa:35:bc:d1:66:34:
28:3b:e7:63:88:ae:2c:1a:18:2d:16:c2:4d:18:dc:d8:98:fb:
3b:2a:c9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:17:21 2026 by rpki-client