Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
File: BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json)
Hash identifier: sp1YB8R3eg+YRgwr/kCoMJMKZOaujw43jH4hM0foEoo=
Subject key identifier: 00:97:87:EA:35:EE:BC:01:38:03:45:FE:83:22:02:BA:81:F4:70:04
Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
Certificate issuer: /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Certificate serial: 019F17F9FFEE320B61910BA0CA6C285829C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
Manifest number: 0F4A
Signing time: Tue 30 Jun 2026 10:01:27 +0000
Manifest this update: Tue 30 Jun 2026 10:01:27 +0000
Manifest next update: Wed 01 Jul 2026 10:01:27 +0000
Files and hashes: 1: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: GGY4bfoHdo0pPiDQvowFdLCo+VxWat/AZJmVv1960hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:ff:ee:32:0b:61:91:0b:a0:ca:6c:28:58:29:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Validity
Not Before: Jun 30 10:01:27 2026 GMT
Not After : Jul 1 10:01:27 2026 GMT
Subject: CN=009787ea35eebc01380345fe832202ba81f47004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4b:2c:a7:a9:19:0b:a9:b9:2e:15:40:96:2e:
42:b0:18:4d:26:6f:d9:3d:f4:81:79:3c:8a:c7:a7:
99:a9:7c:e0:ad:d9:be:c9:bf:a2:28:74:54:9e:62:
56:e4:e0:44:d0:54:44:11:ae:51:36:09:49:68:b1:
4e:e2:7b:b3:d9:5f:74:7c:82:c3:d3:d8:4f:72:85:
0e:b4:f3:c7:5d:df:15:e6:9d:70:9c:e5:f4:91:aa:
ff:3e:0a:2c:b3:cf:b7:bc:e6:82:77:29:65:37:4e:
97:15:4c:f0:ee:ac:4c:99:14:d8:13:97:37:6f:f0:
38:0f:a1:b6:32:e0:06:8a:4c:e2:66:b9:a0:76:9d:
dc:26:86:b4:0b:5a:54:d9:52:4f:46:75:77:ad:44:
43:70:c8:d1:dd:f3:7e:dc:96:02:f9:26:0c:4b:93:
3e:cf:e7:90:ac:9a:d6:e5:3e:a0:4a:1c:18:4e:a3:
3b:16:cd:01:6d:22:42:c7:83:8d:eb:d9:c7:82:65:
ef:66:4b:de:85:01:1c:4e:10:d4:08:0e:e4:f3:76:
63:87:b9:7e:fe:6f:f0:88:c8:9a:aa:9b:a1:c8:3b:
75:ea:b5:92:ca:39:a7:aa:16:0a:4b:78:f9:0d:01:
d1:9d:99:eb:47:93:34:2b:e9:98:69:6d:78:60:6c:
88:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:97:87:EA:35:EE:BC:01:38:03:45:FE:83:22:02:BA:81:F4:70:04
X509v3 Authority Key Identifier:
keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d2:79:d7:91:bd:a0:43:dd:03:9e:08:92:88:d6:54:70:4e:
96:66:9c:22:83:be:a4:a7:3f:cb:61:50:f9:20:04:c9:4c:b6:
da:55:59:6d:0b:5c:60:20:6a:20:74:14:c1:5e:a3:9f:3a:ce:
85:17:d6:4b:43:c6:63:d4:ba:a4:89:4f:89:ba:b1:ae:01:0c:
b8:85:18:76:0f:31:f7:c9:25:9f:d9:d8:d5:48:06:7a:26:7b:
ba:94:18:46:6b:17:12:52:61:f9:6c:16:d1:33:df:93:c5:13:
be:a8:00:e4:89:de:39:56:0b:6c:d2:3a:20:fc:7c:c8:b6:e9:
a6:00:2a:74:fe:8c:07:3d:47:9c:5a:c5:fb:41:01:22:cc:44:
40:43:7c:db:b0:fe:4e:dc:d6:2e:ab:e0:fe:82:94:b5:21:bf:
32:16:4f:38:7f:12:c3:c8:23:70:0e:97:7c:94:9a:86:72:99:
ad:40:3c:6d:96:7c:59:06:c0:ed:ff:9f:d6:c9:66:d6:6b:7b:
c9:d2:d3:e7:c1:08:89:2b:ba:40:5a:37:08:09:56:f8:fa:06:
60:7b:bf:3a:8a:b0:c2:d1:e9:82:83:5a:31:c6:df:cb:78:15:
67:dc:c3:85:3f:c7:59:95:48:32:24:f1:99:95:d1:6c:64:88:
ef:a5:47:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:22 2026 by rpki-client