Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
File: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft (raw, json)
Hash identifier: 0PLXQ1yn7yoaIHyjI3U911POxQbs+cPX93EAvSTSfV4=
Subject key identifier: F1:78:EA:85:69:71:B3:30:14:D4:C6:1E:57:CA:20:D8:72:89:E2:B4
Authority key identifier: 04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
Certificate issuer: /CN=04904347a2361aced7c370f7446de708277ee6d1
Certificate serial: 019FA9AC33F91EE21DF85BA8CBAA5ABEFADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
Manifest number: 08D2
Signing time: Tue 28 Jul 2026 17:01:02 +0000
Manifest this update: Tue 28 Jul 2026 17:01:02 +0000
Manifest next update: Wed 29 Jul 2026 17:01:02 +0000
Files and hashes: 1: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl (hash: 6+aRxTuY51jSvcRANTpyj+qVA2fHpaoaTgnUDzs0Jbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:33:f9:1e:e2:1d:f8:5b:a8:cb:aa:5a:be:fa:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04904347a2361aced7c370f7446de708277ee6d1
Validity
Not Before: Jul 28 17:01:02 2026 GMT
Not After : Jul 29 17:01:02 2026 GMT
Subject: CN=f178ea856971b33014d4c61e57ca20d87289e2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:dd:4e:bd:e9:71:5b:6b:fa:e6:e3:e3:ae:83:
de:b8:07:7c:8c:74:cc:0d:a2:a6:51:cd:c8:c9:cb:
0e:13:ba:0e:bc:84:13:5d:a6:0f:9a:6b:4d:9d:5e:
43:1c:e1:92:4c:e1:9f:6f:49:c3:79:6c:2a:c0:85:
45:10:f3:f0:b1:53:95:ff:5f:d3:c5:e2:8f:4e:c1:
28:29:49:2c:00:53:a2:8a:d5:9a:f3:47:22:7d:44:
41:76:c0:80:17:b0:22:2c:4d:56:21:a4:36:a0:d6:
27:ee:15:78:d4:da:46:26:69:23:ed:94:88:47:59:
3f:c4:c0:aa:00:1e:c9:56:fb:e9:35:8d:aa:39:21:
7d:3a:c8:87:70:49:4d:58:98:91:23:58:ad:46:65:
6a:26:3c:d8:25:64:d3:e7:45:19:a0:d6:63:a8:d0:
54:6b:0c:b8:60:69:f5:d9:20:5d:14:3b:8b:ff:b5:
a0:49:2f:11:fd:09:c3:ce:68:f0:34:44:75:88:25:
58:c9:22:1a:23:69:3a:8c:62:4d:53:dc:15:25:e2:
91:e1:05:d1:38:5c:5b:64:50:bc:27:a3:00:66:24:
6f:f4:64:ac:f1:cb:7e:83:a1:30:ae:53:5d:b3:81:
b2:f0:c3:3f:3f:52:bd:9a:c0:e5:fd:71:09:59:bd:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:78:EA:85:69:71:B3:30:14:D4:C6:1E:57:CA:20:D8:72:89:E2:B4
X509v3 Authority Key Identifier:
keyid:04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6b:a7:d0:a1:0a:18:20:ac:b4:5c:bb:7d:d4:01:45:3c:ba:
1d:73:13:96:f7:69:ec:99:33:fd:bc:d1:60:eb:e0:2f:7d:c1:
4a:1b:8d:25:ba:79:2d:e3:a0:15:65:03:80:72:09:59:7d:81:
cd:a9:e8:5f:9b:1a:06:58:63:b0:42:b5:b1:40:78:a2:c4:a0:
d5:0d:47:ec:e5:ee:aa:c4:db:3d:39:49:8f:69:2b:15:57:94:
4c:9e:fc:e6:91:e8:5b:db:1e:1c:4f:68:91:a2:07:64:e9:ff:
5b:93:d9:4f:7e:81:26:ee:fd:53:76:61:cd:e0:62:7b:eb:70:
c9:0f:70:ba:35:71:85:ab:c7:67:35:6f:b5:48:81:01:68:9d:
15:ac:68:55:3d:40:fa:1d:11:1f:34:4a:ee:65:87:92:8e:7b:
aa:b5:43:79:0b:a9:7d:15:9a:1b:37:bb:8a:f4:4a:1a:8d:3e:
df:7e:8e:96:a0:5d:9a:c2:66:10:37:fe:06:b6:1a:a8:59:5d:
65:70:25:2a:be:57:36:ae:c4:9e:0d:16:84:a0:2a:60:a4:fd:
f7:d1:66:d4:f3:9c:e2:cf:ef:79:8b:bb:44:d2:70:2c:50:b6:
f7:1a:c1:5f:bd:a4:ab:14:7e:c6:a7:27:9d:21:28:ad:8d:67:
3b:46:35:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:26 2026 by rpki-client