Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
File: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft (raw, json)
Hash identifier: t5DS66xyTzXxiJcimAd8A4ZfOVSGsnWvx3qkOOlImIM=
Subject key identifier: C5:68:69:11:D0:B2:46:76:62:71:B9:5F:AC:49:F2:A6:D6:E9:E5:8A
Authority key identifier: 04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
Certificate issuer: /CN=04904347a2361aced7c370f7446de708277ee6d1
Certificate serial: 01A1C28B4B5349FD7516585D9CF833A529C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
Manifest number: 09E8
Signing time: Mon 09 Nov 2026 23:01:11 +0000
Manifest this update: Mon 09 Nov 2026 23:01:11 +0000
Manifest next update: Tue 10 Nov 2026 23:01:11 +0000
Files and hashes: 1: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl (hash: FAWDJVSlVaQKdHPQf7fjFG1PLt2qddQxCDzEvYpmfHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:8b:4b:53:49:fd:75:16:58:5d:9c:f8:33:a5:29:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04904347a2361aced7c370f7446de708277ee6d1
Validity
Not Before: Nov 9 23:01:11 2026 GMT
Not After : Nov 10 23:01:11 2026 GMT
Subject: CN=c5686911d0b246766271b95fac49f2a6d6e9e58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fc:44:41:13:d2:00:95:7c:00:7c:d4:e1:0b:
af:01:ad:a0:f6:e8:8f:c1:68:28:64:84:5a:0a:3b:
68:a9:3b:96:2b:81:af:7c:7a:9d:e6:9f:47:b1:38:
7e:c4:b0:bb:21:a0:dc:55:da:37:6d:d2:22:2a:44:
4f:c1:68:37:f7:8d:53:28:17:65:f7:80:20:14:95:
9d:f3:3e:5b:9d:0a:12:92:c5:ca:63:0d:99:ba:d0:
f5:59:5a:ec:57:14:aa:4d:74:79:f4:15:e9:0c:08:
17:86:1f:6e:58:f1:b5:de:b8:e8:ab:54:f3:bd:ca:
30:be:81:fd:c9:46:c6:c6:ee:1e:9e:b7:ca:ac:89:
4a:dd:56:44:90:28:45:46:7b:96:e1:51:4b:65:8b:
a6:22:37:a7:55:2f:66:1c:75:91:67:a6:c8:8e:50:
cb:76:5d:3e:b9:5a:45:77:9f:74:45:c0:61:7e:80:
12:68:b7:b1:a7:31:e6:68:59:f1:2d:51:77:99:76:
dc:47:e1:18:9f:5f:5f:eb:20:b1:e0:4c:ca:9a:22:
7f:75:8d:da:30:a0:7e:32:eb:34:6c:9b:22:17:dc:
8d:4f:24:a1:8d:99:54:29:50:77:45:98:43:c7:d2:
88:b1:3e:97:24:96:e5:93:df:b4:6d:90:fb:ed:ed:
96:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:68:69:11:D0:B2:46:76:62:71:B9:5F:AC:49:F2:A6:D6:E9:E5:8A
X509v3 Authority Key Identifier:
keyid:04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d4:8b:a7:db:0c:aa:5a:22:85:e6:f1:8e:95:ea:50:4b:cd:
06:ae:4c:92:6a:00:29:3e:5c:4d:9f:2f:ab:2d:15:b0:80:64:
7e:ab:03:0a:34:03:1f:7d:1b:33:ca:96:cb:64:cc:00:8a:a4:
47:54:59:a3:27:de:53:53:02:60:59:9c:e9:f8:79:4a:23:59:
34:50:68:5b:10:23:9b:ab:2b:b6:9f:2c:44:88:c7:cd:28:af:
f1:d6:14:7d:b8:f6:f8:77:e6:98:43:48:ec:83:14:e9:f0:b6:
d0:42:ed:4a:80:a2:b8:17:38:91:ac:31:64:05:78:6d:7a:52:
56:f4:61:2d:98:73:e9:8a:d3:ee:cc:11:51:13:fa:b3:2d:67:
69:92:e2:71:75:9b:18:01:df:d1:fb:da:02:b1:b2:8c:8e:77:
25:df:c8:7f:a2:61:14:c2:2b:e1:83:96:4b:55:15:0f:ca:f7:
b2:94:d2:90:7d:b0:6c:1b:99:6e:a5:89:c8:68:5a:d8:d0:e4:
56:ed:f3:b4:15:20:57:7a:17:37:e9:5c:36:b5:f2:43:c6:88:
be:52:8b:ab:b2:33:a9:7d:7b:80:12:58:1c:01:29:6d:80:21:
df:35:85:24:10:2c:48:9d:ac:04:a4:aa:9f:d5:15:5e:dd:61:
2c:e7:c9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 10:24:04 2026 by rpki-client