Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
File: BjtmD1abVGtTDsbeabMIs2k-f3Q.mft (raw, json)
Hash identifier: GgCNSxZjT0/XmcveCJ8JS74QoRu8uZyXxGlmfc+n4vw=
Subject key identifier: 77:8A:9F:30:9F:66:A7:8B:7A:41:3A:74:BF:AB:9D:31:AD:90:76:3D
Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
Certificate issuer: /CN=063b660f569b546b530ec6de69b308b3693e7f74
Certificate serial: 01A13D4A235D86D5F79D1DE2B420A5951007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
Manifest number: 1A3A
Signing time: Thu 15 Oct 2026 02:00:31 +0000
Manifest this update: Thu 15 Oct 2026 02:00:31 +0000
Manifest next update: Fri 16 Oct 2026 02:00:31 +0000
Files and hashes: 1: BjtmD1abVGtTDsbeabMIs2k-f3Q.crl (hash: FcW8CBDPbjb0xYezJnYtPDYI11tqXrkbJeA0BdnWnH0=)
2: xhF6836ZAZ1v6FMBtDsruSd1XhM.roa (hash: CMajZTVB+UvtUZM05scLZACQyLK6q2OoOtMJquT+J6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:23:5d:86:d5:f7:9d:1d:e2:b4:20:a5:95:10:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74
Validity
Not Before: Oct 15 02:00:31 2026 GMT
Not After : Oct 16 02:00:31 2026 GMT
Subject: CN=778a9f309f66a78b7a413a74bfab9d31ad90763d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:6f:e4:ac:ac:59:a4:c9:55:8c:70:60:46:
00:d3:c8:1a:f3:48:67:00:d2:1d:a1:96:5c:da:a0:
47:5a:29:f6:ed:43:66:b1:0a:71:fe:24:9b:8b:77:
eb:bf:b4:78:c1:60:a8:6f:8f:a5:7a:f8:49:c4:66:
56:66:6e:6e:08:19:7b:b5:4c:94:93:cd:5b:10:c1:
40:bc:d5:67:86:6f:12:33:5e:ad:cb:3c:2b:9e:83:
d5:a0:a7:5c:9c:75:a3:20:cd:8b:15:98:89:55:f4:
f6:d4:fa:99:fc:18:bc:ef:33:d7:6d:cf:a3:a9:ed:
88:f4:5c:34:d9:04:01:b4:db:ed:e8:c9:9f:39:72:
f2:c0:05:7d:e9:7c:7d:4f:1b:86:07:b4:4a:be:7b:
70:24:63:ae:48:b4:42:c0:5b:42:91:38:ab:70:8f:
2c:14:7a:7c:c5:b9:1a:c2:e6:a5:cf:66:46:fd:ad:
fc:79:00:60:14:2d:a4:d5:a3:b4:f5:dc:78:43:66:
a6:67:bb:33:64:5a:3f:84:2d:be:61:9a:78:72:53:
1d:39:46:13:c4:23:0d:67:67:fb:fb:14:36:94:49:
fb:44:80:6e:68:58:ee:83:f4:70:fa:a9:cd:f4:34:
f7:a3:84:fe:ea:51:4c:5b:c1:4c:15:8d:9b:a0:ae:
cd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8A:9F:30:9F:66:A7:8B:7A:41:3A:74:BF:AB:9D:31:AD:90:76:3D
X509v3 Authority Key Identifier:
keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b4:fd:ae:5e:1b:79:a2:43:c2:63:bf:c8:15:37:f8:75:22:
50:fa:0d:4a:ba:3e:7a:da:68:92:a5:66:54:e3:fa:63:89:87:
5d:7d:e7:2e:71:79:14:f2:26:35:aa:86:03:fe:fe:b7:61:55:
f2:0b:f6:6d:92:22:ba:52:5e:8e:97:d8:a6:4f:e7:03:5d:60:
46:8b:54:50:96:48:97:c2:2a:f8:be:cc:0d:d2:bd:52:8f:e9:
00:50:14:9e:bb:77:81:a5:d6:ef:e1:f5:ac:df:e3:d6:e1:3b:
28:d9:03:6b:ec:95:2c:58:9e:36:83:33:df:d3:4e:f2:a9:36:
0f:d7:da:a8:4b:10:7e:b7:3c:d4:bd:7b:c8:4a:e4:3d:3e:30:
9e:16:ad:14:25:d2:17:f7:56:7f:e7:a8:66:fc:2a:45:f4:cb:
37:9e:18:1a:b3:55:3c:8a:22:c3:9d:16:19:6e:1d:25:85:d4:
9e:b9:6b:51:3a:a4:1c:d4:49:69:0f:11:63:e7:2b:e4:30:42:
8f:8b:9e:12:c3:88:6f:31:4b:1c:5e:0b:bf:ce:6d:18:55:ba:
4b:b0:61:ab:4d:7c:44:f5:89:2f:ed:c6:6e:d8:1f:82:51:b3:
d3:92:2d:bf:c4:42:2d:43:17:62:e7:7b:81:5e:ab:ff:5b:93:
12:1b:6e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:58 2026 by rpki-client