Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
File: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft (raw, json)
Hash identifier: 5rLNHGlsLCCPyUOVnfK3QKf0dwQfXRMB2UXeqjJosE8=
Subject key identifier: 68:80:FB:58:3C:E7:7B:C8:FC:82:93:F1:40:87:2E:E1:F5:36:7A:AA
Authority key identifier: 04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
Certificate issuer: /CN=04904347a2361aced7c370f7446de708277ee6d1
Certificate serial: 019EBE11312C304C94AFD1B7E00610ABED86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
Manifest number: 0858
Signing time: Fri 12 Jun 2026 23:00:58 +0000
Manifest this update: Fri 12 Jun 2026 23:00:58 +0000
Manifest next update: Sat 13 Jun 2026 23:00:58 +0000
Files and hashes: 1: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl (hash: lzvmJDKTjBAp/RoUjK1hP7duZrfyOvhUfngSTPLLutA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:11:31:2c:30:4c:94:af:d1:b7:e0:06:10:ab:ed:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04904347a2361aced7c370f7446de708277ee6d1
Validity
Not Before: Jun 12 23:00:58 2026 GMT
Not After : Jun 13 23:00:58 2026 GMT
Subject: CN=6880fb583ce77bc8fc8293f140872ee1f5367aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:ff:e8:e8:0b:6b:f1:95:f6:da:96:12:54:
50:6f:09:10:af:28:15:e2:dd:19:39:91:ff:b4:af:
93:b2:ca:b3:e9:41:3f:ef:1b:52:95:bf:7c:ae:38:
db:aa:bc:dd:7e:f0:63:0b:fa:d5:ae:a1:34:29:00:
09:24:b0:3f:e6:0d:e8:22:c7:5f:7d:92:39:3f:33:
a0:21:17:a1:8b:03:10:4d:08:e5:88:43:82:d0:d2:
da:f9:43:b9:d6:1c:d5:70:b0:52:c3:67:c6:f5:a7:
d2:e2:99:05:05:9a:be:19:62:9c:ad:85:f5:d1:03:
d2:81:89:26:9f:a3:62:9e:54:c6:b4:c1:ba:a1:da:
e4:23:76:38:92:cc:7b:95:94:b7:64:e6:df:38:36:
ba:50:7c:1d:c3:1f:c8:8b:36:c9:42:b9:4e:ec:9c:
81:58:74:71:0a:5a:df:c7:ac:55:7a:90:37:2f:5a:
de:f5:1f:dd:ad:b2:b9:51:56:ae:9e:18:24:3d:bd:
cb:21:1a:10:fc:62:29:15:f8:c5:f6:cc:bb:f5:67:
45:1d:c7:80:db:e3:85:ea:49:42:9d:17:96:d9:c0:
c8:8e:25:f1:75:d7:a4:80:af:11:9a:30:5c:ba:91:
91:cd:6f:a2:f7:a3:45:40:27:a1:79:3c:bd:37:3b:
a2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:80:FB:58:3C:E7:7B:C8:FC:82:93:F1:40:87:2E:E1:F5:36:7A:AA
X509v3 Authority Key Identifier:
keyid:04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4e:0d:94:45:4d:90:66:e3:f4:7b:2a:25:13:53:58:50:58:
c1:70:03:b5:18:2a:54:4d:52:41:fc:44:30:b6:29:8c:a1:18:
e1:ea:8c:a5:db:e3:9f:0f:c5:79:55:91:f3:e3:fe:41:4d:ad:
bb:ea:79:fd:65:fe:2d:11:4e:81:05:9a:40:0e:e2:d5:33:c3:
a2:d2:ee:a2:0a:cc:8b:6e:f6:49:7c:e6:7b:f1:5d:8c:1c:86:
d2:11:bf:a5:c1:1a:89:d0:5d:2c:d1:0c:1b:0e:bf:45:01:9d:
86:75:f6:7b:4b:fa:cc:bd:1a:b6:c6:bb:66:f1:cf:1c:18:bb:
ba:da:45:00:46:57:fe:bc:3d:35:7e:f4:71:d7:f3:f7:8a:54:
6e:c0:6b:1d:fb:4b:8b:6f:b9:4e:1f:38:79:ff:3e:c6:51:95:
4e:2d:43:3a:5c:80:ee:83:fb:4b:75:19:da:0e:dd:fd:cf:2d:
25:f3:57:83:f6:84:9c:5d:33:d2:a5:26:ad:b4:62:8f:b9:bf:
e0:d5:be:c0:e7:9d:9a:5f:f1:dd:6c:6c:fa:ae:a3:da:3c:53:
c3:d6:f7:bd:cd:bf:3e:11:5e:5b:64:11:7e:45:a5:f5:37:08:
ed:b2:e2:ac:27:4e:8b:0c:d9:18:a9:02:80:6d:b7:30:1a:4b:
ca:5b:6e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:06:55 2026 by rpki-client