Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: pnY+IHgQoJS++ZND4CC7Pze6KOUIBfFQJVk4Zy0OWA8=
Subject key identifier: BD:AD:E5:C6:9E:DD:04:89:72:BF:7D:55:B3:60:8F:FD:01:8A:81:AC
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 01A051E673B08EB5CEF4EE8B296CC0801582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 1970
Signing time: Sun 30 Aug 2026 09:00:52 +0000
Manifest this update: Sun 30 Aug 2026 09:00:52 +0000
Manifest next update: Mon 31 Aug 2026 09:00:52 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: Fgg0YXiT+kPUEFQPyscib+iK1JRyhVqgGAK4B5LzzSs=)
2: MzCZNjdBmMG-S9j61yIRLE51zQU.roa (hash: /f1l2aBevU/UCCB1M8fW5aBOaUCeB8ylNLs+oJQ9huU=)
3: uAumN_d_Q_yun5QzcR-UbXWPBU8.roa (hash: YEbqonGNno7TcnGdoHF66lGtgeHYIPwdSCSN8qlpAMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 31 Aug 2026 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:51:e6:73:b0:8e:b5:ce:f4:ee:8b:29:6c:c0:80:15:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Aug 30 09:00:52 2026 GMT
Not After : Aug 31 09:00:52 2026 GMT
Subject: CN=bdade5c69edd048972bf7d55b3608ffd018a81ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:85:2d:a9:80:ed:e4:51:2d:2b:bf:55:ee:
90:78:03:14:f0:9e:4b:88:e0:80:08:d7:df:0a:bf:
e6:3d:34:eb:8c:0d:8c:65:59:41:80:50:49:82:67:
7c:29:e2:f3:ea:87:2e:61:28:6c:9f:d0:f1:4f:5b:
3c:1f:ea:4c:15:f4:44:0f:83:e6:04:f7:3f:79:98:
fa:7c:6f:55:c6:6a:69:42:24:88:ea:62:1a:98:42:
32:3b:8c:e9:3b:42:a0:14:a2:3f:85:88:2f:58:c5:
60:6c:a3:ac:3d:a4:68:20:cf:07:5f:0a:23:82:f3:
f4:cb:d6:31:1d:56:c6:70:19:73:35:6a:e9:ce:8a:
e7:01:88:e3:b6:15:26:16:80:dd:26:27:d7:3d:f1:
fd:3d:35:98:bc:33:83:d0:ae:c8:31:47:f8:29:ab:
14:96:d4:65:f8:96:38:31:db:13:e8:9e:4a:53:0c:
6b:23:f7:96:81:6a:48:1c:b4:f0:28:d9:e8:6b:f6:
aa:d4:fa:dc:82:f1:e1:d7:a0:07:39:5a:dd:20:94:
48:3e:58:27:33:96:bb:ce:4e:b6:60:04:91:89:50:
b0:8b:c6:03:30:a3:f1:6d:b6:52:fa:66:ed:f9:f5:
f3:3e:2b:19:55:7f:15:3e:e2:a0:8e:b4:46:28:63:
a5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AD:E5:C6:9E:DD:04:89:72:BF:7D:55:B3:60:8F:FD:01:8A:81:AC
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:12:58:fb:09:62:7d:a1:5d:60:4e:45:14:df:11:07:7d:e0:
11:2d:4d:ee:70:f9:2a:f3:3b:5e:a8:c3:f0:84:a1:d5:67:99:
25:77:73:a9:a9:ce:d7:5f:4b:2b:09:29:04:ff:8a:89:bf:2b:
7e:a6:38:01:28:6a:e5:39:9a:d1:7d:af:ef:5b:68:9b:05:23:
f1:4d:b8:fb:aa:47:0c:c0:45:59:f4:cb:84:0a:2b:c7:0a:06:
a2:fc:a0:2e:c9:74:8a:a8:b7:f1:d7:e0:59:2c:8d:40:84:e2:
e2:73:ad:43:80:6b:56:ed:09:81:89:c8:79:00:0b:5d:79:0a:
c9:b6:56:4f:8f:15:d7:86:cd:37:73:27:2f:9a:e2:e3:c1:ee:
0c:c5:37:0a:f5:76:1d:0a:38:23:de:7a:4b:2d:24:80:5f:3d:
16:4a:d8:22:f6:58:71:4d:a8:58:a2:c1:bc:4c:bf:cc:d8:7c:
03:df:e9:87:04:78:bb:55:0e:eb:76:6d:fe:23:bb:4b:c4:ac:
14:39:ab:f9:32:dd:c8:4c:47:c8:4e:fd:7f:fb:73:a9:66:6a:
8a:40:ee:0a:65:b9:d8:61:5c:44:45:be:75:1c:17:83:1a:67:
2a:7a:5d:f5:64:5e:ee:9d:2e:aa:fd:be:d0:f4:5a:33:86:6b:
1f:6a:72:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBR5nOwjrXO9O6LKWzAgBWCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0OWQ0ZjY2NTk4NjY4MDc5MzUzNzIxYzIxOTM1YTAwMzE5
ZjY3NTkwHhcNMjYwODMwMDkwMDUyWhcNMjYwODMxMDkwMDUyWjAzMTEwLwYDVQQD
EyhiZGFkZTVjNjllZGQwNDg5NzJiZjdkNTViMzYwOGZmZDAxOGE4MWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWyFLamA7eRRLSu/Ve6QeAMU8J5L
iOCACNffCr/mPTTrjA2MZVlBgFBJgmd8KeLz6ocuYShsn9DxT1s8H+pMFfRED4Pm
BPc/eZj6fG9VxmppQiSI6mIamEIyO4zpO0KgFKI/hYgvWMVgbKOsPaRoIM8HXwoj
gvP0y9YxHVbGcBlzNWrpzornAYjjthUmFoDdJifXPfH9PTWYvDOD0K7IMUf4KasU
ltRl+JY4MdsT6J5KUwxrI/eWgWpIHLTwKNnoa/aq1PrcgvHh16AHOVrdIJRIPlgn
M5a7zk62YASRiVCwi8YDMKPxbbZS+mbt+fXzPisZVX8VPuKgjrRGKGOlbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2t5cae3QSJcr99VbNgj/0BioGsMB8GA1UdIwQY
MBaAFASdT2ZZhmgHk1NyHCGTWgAxn2dZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkoxUFpsbUdhQWVUVTNJY0laTmFBREdmWjFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mMjNmYjYtMzIyOS00ZThiLTkzNmEt
OTI3OTU0N2VjYTU1LzEvQkoxUFpsbUdhQWVUVTNJY0laTmFBREdmWjFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9mMjNmYjYtMzIyOS00ZThiLTkzNmEtOTI3OTU0N2VjYTU1
LzEvQkoxUFpsbUdhQWVUVTNJY0laTmFBREdmWjFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBJY+wli
faFdYE5FFN8RB33gES1N7nD5KvM7XqjD8ISh1WeZJXdzqanO119LKwkpBP+Kib8r
fqY4AShq5Tma0X2v71tomwUj8U24+6pHDMBFWfTLhAorxwoGovygLsl0iqi38dfg
WSyNQITi4nOtQ4BrVu0JgYnIeQALXXkKybZWT48V14bNN3MnL5ri48HuDMU3CvV2
HQo4I956Sy0kgF89FkrYIvZYcU2oWKLBvEy/zNh8A9/phwR4u1UO63Zt/iO7S8Ss
FDmr+TLdyExHyE79f/tzqWZqikDuCmW52GFcREW+dRwXgxpnKnpd9WRe7p0uqv2+
0PRaM4ZrH2pyyA==
-----END CERTIFICATE-----
Generated at Sun Aug 30 11:01:33 2026 by rpki-client