Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: 1FT2r1c0FfUoJc9uBg4qALnQL8qwHV8ZfppGL9vsllc=
Subject key identifier: DE:E4:BB:E5:D0:13:BE:83:72:56:26:A9:E0:43:68:A7:C5:96:61:0D
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 019D382EBF393EF1FCD6B7F6FCD856DE1564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 17D5
Signing time: Sun 29 Mar 2026 06:01:20 +0000
Manifest this update: Sun 29 Mar 2026 06:01:20 +0000
Manifest next update: Mon 30 Mar 2026 06:01:20 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: N5FMAt8wQE9+pGOoGeTjxaVpIlAHbO1sYyjd/j9pC5M=)
2: MzCZNjdBmMG-S9j61yIRLE51zQU.roa (hash: /f1l2aBevU/UCCB1M8fW5aBOaUCeB8ylNLs+oJQ9huU=)
3: uAumN_d_Q_yun5QzcR-UbXWPBU8.roa (hash: YEbqonGNno7TcnGdoHF66lGtgeHYIPwdSCSN8qlpAMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:bf:39:3e:f1:fc:d6:b7:f6:fc:d8:56:de:15:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Mar 29 06:01:20 2026 GMT
Not After : Mar 30 06:01:20 2026 GMT
Subject: CN=dee4bbe5d013be83725626a9e04368a7c596610d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:41:cc:bb:54:9d:0d:47:3b:38:8d:6c:05:76:
60:49:17:68:4f:54:f6:4a:cd:42:01:5d:20:16:d2:
4e:30:c6:28:57:35:8c:08:cc:3d:55:16:75:9e:d4:
a2:4e:89:1b:fe:b0:63:21:58:de:bb:99:d0:e6:2e:
5c:b5:06:18:75:28:d2:4f:fc:8d:01:9a:81:dc:6b:
49:59:61:49:ea:6d:a5:ec:d2:33:c2:3f:61:ed:9e:
65:12:27:12:50:37:4b:fa:12:0b:50:02:35:db:8d:
63:24:eb:c3:d9:8a:19:6a:1b:ef:df:29:a3:d4:2b:
e5:bf:5b:f5:ed:d3:8f:eb:54:9f:cd:31:10:fc:e2:
6e:47:03:1b:83:35:84:89:f0:ce:b5:8e:1a:7e:5c:
44:11:da:1c:c6:05:8d:30:e5:aa:44:85:db:08:31:
df:0d:4f:b5:82:dc:54:22:72:7a:91:89:10:3c:39:
6a:28:16:50:6e:76:03:b6:b1:0c:c8:44:10:09:d0:
eb:a1:30:38:70:2b:02:2f:2a:e9:5b:df:85:be:a2:
da:98:e2:7d:73:5e:5a:e7:d8:4b:5e:de:6f:5f:24:
2b:e6:dd:fb:43:7a:4a:47:35:9c:e7:ea:90:2f:17:
a4:67:62:ea:18:6f:64:9c:ab:bf:09:94:f1:d7:5f:
f4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E4:BB:E5:D0:13:BE:83:72:56:26:A9:E0:43:68:A7:C5:96:61:0D
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:be:f8:14:27:40:89:70:63:e6:9d:0c:ee:6f:cf:3e:c5:82:
b7:4b:cb:dc:a6:15:79:a3:d9:14:85:85:f6:ca:10:d7:65:c9:
59:72:03:53:7e:ec:ed:d1:81:0a:02:7c:d8:fe:a2:66:97:0b:
a2:41:64:47:fb:12:b7:e4:80:ff:bb:3f:60:42:ea:d3:ab:f0:
23:23:9c:c3:70:7b:3b:bd:e9:23:da:ba:5e:ba:61:f0:47:30:
06:43:76:4c:c7:55:61:dc:55:6c:06:f7:6b:09:9e:ac:a6:6f:
07:f5:9c:73:d1:fa:d0:31:74:c6:b3:06:1e:89:d7:7d:68:eb:
f8:38:09:c0:25:04:9d:dc:ed:a8:68:96:aa:f5:09:01:01:81:
ce:d8:f3:a1:98:f0:c4:ec:b6:73:d3:c2:54:30:3c:ad:c8:8b:
d3:77:1a:8d:f5:e6:a1:16:da:8b:e5:7e:00:d9:36:76:e6:37:
8c:6a:04:68:96:f0:d2:14:24:09:9c:55:18:3a:7b:b2:b1:67:
73:95:86:d4:21:8a:40:1e:96:24:47:f8:3e:e5:a2:e6:35:72:
a6:e1:92:46:41:73:a2:a9:ed:a9:92:81:91:93:01:2b:23:49:
9c:8b:b6:3b:11:da:12:d4:b2:97:c4:57:28:5a:de:cf:50:84:
13:dd:cb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:45 2026 by rpki-client