Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.mft
File: BJiZEEpGYR3dHTmg13fAsPKVI5E.mft (raw, json)
Hash identifier: 22hV+0JWcTz6FvfVmm2OMGphpBgKx7EzTNvGP5JKJTE=
Subject key identifier: CB:4A:5A:7B:10:C4:BE:89:A8:D4:86:88:C8:A3:1F:1D:D9:1D:51:62
Authority key identifier: 04:98:99:10:4A:46:61:1D:DD:1D:39:A0:D7:77:C0:B0:F2:95:23:91
Certificate issuer: /CN=049899104a46611ddd1d39a0d777c0b0f2952391
Certificate serial: 019D3909B0BE7F41BB8797B94BE05BA41F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJiZEEpGYR3dHTmg13fAsPKVI5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.mft
Manifest number: 65
Signing time: Sun 29 Mar 2026 10:00:29 +0000
Manifest this update: Sun 29 Mar 2026 10:00:29 +0000
Manifest next update: Mon 30 Mar 2026 10:00:29 +0000
Files and hashes: 1: 2zN7sfIWv-oSO5uGa8ar6NZHBVA.roa (hash: MFUYWCWRk/ai31Pux7AKFgKjp1b/iCtRQ7q1/0WV8mE=)
2: BJiZEEpGYR3dHTmg13fAsPKVI5E.crl (hash: pNzeq+mFYi1F6nVLGR+wnbnZA2anKglViWhctCLGZP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJiZEEpGYR3dHTmg13fAsPKVI5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b0:be:7f:41:bb:87:97:b9:4b:e0:5b:a4:1f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049899104a46611ddd1d39a0d777c0b0f2952391
Validity
Not Before: Mar 29 10:00:29 2026 GMT
Not After : Mar 30 10:00:29 2026 GMT
Subject: CN=cb4a5a7b10c4be89a8d48688c8a31f1dd91d5162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:e3:5c:63:4b:cf:49:43:d3:a2:8b:0b:9f:
f3:9a:00:83:fb:2d:12:02:75:a9:7d:fa:ba:35:80:
31:2d:1f:2a:23:33:10:82:2a:b2:21:4d:ce:45:50:
27:5a:fa:10:8d:d0:a0:02:d7:53:b2:81:4a:ee:6d:
43:ad:9e:91:ee:07:3e:3c:4e:ce:51:a1:64:62:de:
e9:12:00:e9:8c:62:aa:d5:b2:60:ae:c1:68:f0:23:
ac:97:07:88:bf:8c:33:85:29:bb:0b:c9:6a:cc:80:
3c:62:4d:77:6a:86:25:31:4a:c1:ea:5b:9c:d8:7c:
d4:39:0c:d0:b0:04:ef:9e:d9:a5:0a:fd:b0:e9:ec:
9e:d5:52:66:46:65:c6:3e:96:8b:f9:df:00:cc:05:
6d:a8:15:50:d2:02:49:7b:39:7e:6f:32:97:d7:62:
6c:9f:6c:53:b7:d0:fe:c9:06:e8:42:15:ce:7f:5b:
51:c7:cb:25:0a:3a:8d:51:c0:a5:a5:2d:fd:78:2e:
80:41:a9:73:f9:a6:dd:a1:66:16:07:ac:81:7c:e8:
71:7e:d3:54:d8:17:67:92:5f:9b:d1:da:b8:dd:25:
6f:33:e1:b1:f3:ca:3b:59:33:e6:89:65:94:45:4f:
a3:33:ee:75:c8:c9:4e:ea:42:d2:a2:69:2f:6a:4b:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4A:5A:7B:10:C4:BE:89:A8:D4:86:88:C8:A3:1F:1D:D9:1D:51:62
X509v3 Authority Key Identifier:
keyid:04:98:99:10:4A:46:61:1D:DD:1D:39:A0:D7:77:C0:B0:F2:95:23:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJiZEEpGYR3dHTmg13fAsPKVI5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:da:27:be:5f:59:73:e0:0a:ae:51:69:d7:a1:5e:8f:3d:ab:
e5:32:70:85:18:71:12:55:1a:8c:98:33:7c:a7:24:6b:54:92:
1b:97:2a:f3:03:1d:46:fb:ce:d8:db:f3:67:59:fa:70:c0:84:
13:29:e7:a6:29:9d:3d:d2:c1:b4:c7:6f:43:1f:64:3c:98:18:
2b:cc:00:a7:f6:31:4c:de:f7:92:3a:8e:be:06:e3:5f:d4:e4:
89:f8:cb:63:bc:8e:e5:6a:1d:f5:2c:c3:d3:db:b9:89:30:dc:
28:4c:fe:89:00:0e:fd:0a:59:52:41:e0:2e:27:b3:9f:9d:71:
f3:40:22:04:ab:39:f9:83:af:28:a1:8f:13:18:7c:94:9a:41:
f5:62:c5:e9:b9:7d:6d:ec:a4:f3:a5:65:7b:58:70:53:00:51:
b8:ac:9a:35:fd:74:71:b9:98:eb:67:e6:97:eb:08:ee:53:b6:
d4:6a:d6:58:83:be:ce:39:94:d1:52:9c:e2:82:eb:68:2f:19:
31:11:f4:c6:6d:2e:e8:95:8d:f8:06:e0:10:f7:93:e4:01:06:
27:d2:d2:dc:25:2d:d4:9d:5f:ab:3d:ed:c9:93:af:e3:f6:05:
87:6e:6a:d0:26:33:52:e6:11:7e:1d:30:39:5f:97:8a:22:97:
26:a6:4b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:40 2026 by rpki-client