Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: rqV9kEMXu+nhnSHMsPgE5i0sGWjPs3iUyhOkt1W9IWg=
Subject key identifier: 41:3E:4A:A2:6D:CA:45:E4:AF:03:42:B2:26:E3:D3:2C:EA:CF:04:38
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 019E314E2B8BE70B74603A4D9DE827056C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 1856
Signing time: Sat 16 May 2026 15:01:06 +0000
Manifest this update: Sat 16 May 2026 15:01:06 +0000
Manifest next update: Sun 17 May 2026 15:01:06 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: b0Ki62uXcDgcCe8mc3PyO52eFRNr4gHMBrNHTWvOtA8=)
2: MzCZNjdBmMG-S9j61yIRLE51zQU.roa (hash: /f1l2aBevU/UCCB1M8fW5aBOaUCeB8ylNLs+oJQ9huU=)
3: uAumN_d_Q_yun5QzcR-UbXWPBU8.roa (hash: YEbqonGNno7TcnGdoHF66lGtgeHYIPwdSCSN8qlpAMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:2b:8b:e7:0b:74:60:3a:4d:9d:e8:27:05:6c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: May 16 15:01:06 2026 GMT
Not After : May 17 15:01:06 2026 GMT
Subject: CN=413e4aa26dca45e4af0342b226e3d32ceacf0438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:82:1c:73:59:d1:a9:4f:32:42:f1:35:4d:19:
6c:15:d4:bc:ac:23:b6:e5:e6:ac:01:e4:71:e4:48:
9a:4e:af:84:53:49:8d:24:4c:ff:1c:59:5a:75:dc:
bc:b1:1a:73:92:4b:40:1c:da:a3:a9:26:62:98:cd:
d7:4d:75:86:6b:09:94:5a:d4:ff:32:91:56:7c:c4:
29:ad:3a:82:a2:64:0a:ab:30:c4:f5:b3:65:53:c9:
88:02:e2:8f:c5:f4:bd:7c:58:ae:4b:56:69:61:f3:
91:8f:e8:69:93:95:f1:10:29:77:7a:ed:85:59:7e:
2f:0a:1e:bf:57:6b:3e:46:b2:91:2b:f1:6c:d1:83:
e8:ff:cb:3d:06:6a:96:40:d8:94:d2:7a:84:b3:26:
78:1d:80:34:c6:44:09:d5:2a:0f:a6:9d:56:10:a6:
4a:1d:e9:9a:69:7b:e2:2e:92:e8:e2:8c:e2:a5:b5:
c7:68:e1:dc:00:fa:63:7e:78:15:77:f3:d2:35:84:
7a:91:37:9e:fc:5d:2c:84:cf:16:a9:0c:78:15:1f:
6a:75:a9:5f:99:ec:cd:1c:32:d0:ac:5a:ff:46:51:
84:bf:cc:47:19:6f:6a:55:8b:ea:6a:dd:c9:bd:93:
f1:37:e2:43:7b:e6:2b:61:cc:ba:cb:a2:c7:cc:2b:
fd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3E:4A:A2:6D:CA:45:E4:AF:03:42:B2:26:E3:D3:2C:EA:CF:04:38
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:77:f1:24:73:88:69:e4:1f:66:8e:c1:8d:71:b0:6f:3f:59:
e0:54:59:47:5a:f8:ab:83:4b:2e:92:e8:44:de:e9:98:54:a3:
47:b7:b4:3c:39:c0:7c:ff:a5:a6:c6:1d:f1:e2:a4:f4:08:9c:
c9:a5:0b:5c:98:7b:3b:65:7d:da:ab:4c:33:c1:c0:89:da:81:
79:b7:f0:c6:b7:0c:ab:9b:ad:cf:fa:5c:b3:78:78:09:b0:35:
95:1d:32:6c:89:aa:65:3a:2c:17:35:df:c7:8f:b4:95:22:92:
12:ac:2f:92:1c:cf:c2:8b:f9:71:9a:f5:c2:cc:ad:d3:9d:35:
73:7e:be:5d:5a:93:84:fc:8f:c1:83:99:91:d6:65:11:72:24:
51:e9:b9:1c:dd:a1:3a:ac:02:7a:9f:18:77:91:89:db:54:0a:
47:4f:d8:09:72:c4:ac:14:a9:d0:75:5b:4d:11:d7:57:f0:0e:
6d:2a:bf:88:bd:99:71:a7:93:4f:83:a3:4c:13:50:ba:64:f1:
01:25:8c:02:fa:3e:7e:92:cd:8c:c5:5a:71:f2:a1:7c:9b:1c:
d4:fc:50:65:bc:3c:ad:7f:80:0d:23:63:40:10:11:c7:94:c0:
e5:81:dd:1d:c5:b5:6e:19:30:9b:ce:49:cc:eb:be:5a:9f:41:
7b:1e:f9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:45 2026 by rpki-client