Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
File: BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json)
Hash identifier: SZtjuk4n/IKTmXUjyRiWfgU3+/fE6Cdbc2r5jlGW1Hs=
Subject key identifier: 36:F2:41:3B:1A:CA:3D:80:AB:8F:D6:AE:01:61:A4:3E:CE:9F:CD:E4
Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
Certificate issuer: /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Certificate serial: 019D3909D56D8F4967343DF227222253D882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
Manifest number: 0E52
Signing time: Sun 29 Mar 2026 10:00:38 +0000
Manifest this update: Sun 29 Mar 2026 10:00:38 +0000
Manifest next update: Mon 30 Mar 2026 10:00:38 +0000
Files and hashes: 1: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: +kCsWFB9aglugYFQflaRHF7hFgek+rnAGWeP5nBM4bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d5:6d:8f:49:67:34:3d:f2:27:22:22:53:d8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Validity
Not Before: Mar 29 10:00:38 2026 GMT
Not After : Mar 30 10:00:38 2026 GMT
Subject: CN=36f2413b1aca3d80ab8fd6ae0161a43ece9fcde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:f6:cf:fd:d4:57:87:cb:26:c1:1a:c7:94:
3e:85:ae:ab:10:a2:cd:f3:55:37:6d:4d:13:46:a8:
80:14:16:93:63:d3:f6:97:5a:47:60:59:3a:38:81:
66:ce:97:f0:ac:e6:90:0f:1a:9a:75:41:37:85:26:
ea:f5:04:b4:81:94:97:ec:0f:37:63:92:17:7b:54:
78:c6:20:c1:11:52:29:d0:c2:6e:8d:c8:e1:d9:99:
7c:4a:da:90:d5:c6:86:1b:09:2a:09:87:4a:a1:49:
46:9b:c4:aa:21:45:cc:74:9f:6e:d8:65:b2:37:d6:
52:51:df:17:ae:86:4b:e0:51:15:a7:a5:4a:39:5e:
21:a0:e3:9f:a5:68:64:62:a9:99:52:73:42:b0:80:
91:25:5b:94:0e:00:88:41:29:9e:30:d2:b0:7e:fa:
25:42:14:56:b7:29:ac:ed:47:98:96:6f:c2:72:d6:
b8:f9:78:7a:a3:79:3b:89:d7:e7:95:6c:7b:e1:e1:
4d:fb:6a:c6:a4:fd:a9:ac:0f:36:d5:01:6a:99:d1:
04:39:c8:69:d2:0c:e7:8a:13:5f:0c:66:68:e3:40:
6e:d1:8e:49:fa:e7:88:a6:a1:ba:f5:e3:3f:bf:06:
2d:fd:64:37:23:30:32:df:69:21:94:40:0b:15:cd:
9b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F2:41:3B:1A:CA:3D:80:AB:8F:D6:AE:01:61:A4:3E:CE:9F:CD:E4
X509v3 Authority Key Identifier:
keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f6:1c:e9:70:9e:7e:b2:dc:7b:f5:f2:7f:93:42:27:23:81:
0a:2a:f9:54:bd:bc:2d:ea:46:d1:5b:01:e5:e3:df:41:dd:d5:
a4:7c:ed:82:11:36:ae:c5:fb:f5:bd:f2:3c:3e:84:2e:8e:dc:
cb:1c:86:b4:74:24:e6:41:f5:6e:a6:d3:5e:ca:3c:cd:c2:4a:
2b:9f:b0:60:12:39:d1:be:d9:07:0f:a6:ef:43:7b:40:e0:0c:
cb:4d:51:98:cd:df:f3:39:06:04:e1:b9:f6:17:84:ee:b9:d9:
3c:6f:f4:d2:d7:c1:5b:8b:8f:ad:b2:ed:66:85:1c:8f:e8:41:
26:f4:30:00:af:9b:c8:25:2b:71:99:91:97:29:f2:d9:d1:7a:
aa:2b:e2:ce:72:11:79:68:a4:63:df:bc:98:29:46:5e:9a:0b:
10:a3:fe:f0:68:a4:ba:96:8b:9d:db:51:f4:07:39:6e:10:d9:
27:9e:0e:b4:cb:65:25:8e:07:c1:f7:ea:81:91:a4:ec:4a:1e:
2f:0f:5a:de:a0:ec:5e:f2:d4:83:8c:30:26:83:f4:48:04:a0:
25:0d:53:d5:20:87:77:0b:1a:30:07:b4:7c:06:ef:cf:6d:5e:
7d:f8:67:3e:a4:70:6b:18:ad:2a:cd:ec:50:a8:64:ac:67:6d:
ff:9b:a7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:57:54 2026 by rpki-client