Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
File: BJ5OW_-brMwUl8sgid2GYbzRPvM.mft (raw, json)
Hash identifier: 5a/OruIAb3yrSHxbGvc8U5c+cir8QIGhwoTzs3PkUZM=
Subject key identifier: 7E:50:5D:37:D1:72:F2:EA:62:9A:85:E3:9C:FC:BC:FF:1F:07:35:54
Authority key identifier: 04:9E:4E:5B:FF:9B:AC:CC:14:97:CB:20:89:DD:86:61:BC:D1:3E:F3
Certificate issuer: /CN=049e4e5bff9baccc1497cb2089dd8661bcd13ef3
Certificate serial: 01A0BE79AEA398356F9BF7C958582D55B769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ5OW_-brMwUl8sgid2GYbzRPvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
Manifest number: E8
Signing time: Sun 20 Sep 2026 11:00:40 +0000
Manifest this update: Sun 20 Sep 2026 11:00:40 +0000
Manifest next update: Mon 21 Sep 2026 11:00:40 +0000
Files and hashes: 1: 1evrKFhO7_Y0fEoCaCBlAe11Mq0.asa (hash: BUcK0Ghpp1YkOCKLxdjr7iZfGC9WXW9IwF5EdrSTPXQ=)
2: BJ5OW_-brMwUl8sgid2GYbzRPvM.crl (hash: eRwMY7dahHzbqB+5GOIV0L9p53f1NfkQubb3vwI9tLQ=)
3: xS6vxP921IVWaCyGTtAEbNaX5bQ.roa (hash: IXNgSsDBlcEeLICLKjhHZidP1Oorwbq5IO+mS83mDWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ5OW_-brMwUl8sgid2GYbzRPvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:79:ae:a3:98:35:6f:9b:f7:c9:58:58:2d:55:b7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049e4e5bff9baccc1497cb2089dd8661bcd13ef3
Validity
Not Before: Sep 20 11:00:40 2026 GMT
Not After : Sep 21 11:00:40 2026 GMT
Subject: CN=7e505d37d172f2ea629a85e39cfcbcff1f073554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:61:2e:70:0b:b2:88:10:ba:49:ec:1f:ae:
b1:75:ee:15:b7:6a:0e:32:8d:b8:f5:60:a3:e5:65:
2c:d5:6a:f4:b9:ac:96:c7:4d:6e:92:e5:32:fb:d9:
15:cc:f8:71:c1:f5:10:67:79:60:0a:25:fc:5c:bd:
9b:76:0b:ff:c3:28:68:d6:d0:1d:5f:f4:69:06:75:
09:a4:57:cd:42:5d:4a:ae:77:9d:b8:6f:2d:eb:b8:
59:9e:f4:4d:09:c9:a3:5b:29:ef:dc:07:4d:e1:31:
fa:46:e2:7b:fb:85:b3:86:d2:e9:1e:f9:34:ff:71:
0e:cf:5a:38:cd:e7:46:8b:73:8e:af:9c:1d:5c:21:
b5:41:16:32:85:6d:e7:5a:3e:b9:eb:dc:b8:02:cb:
ef:a6:dd:8f:de:87:c7:ca:f0:c3:b5:06:55:ba:dd:
b5:e5:7e:a6:e3:cb:c7:47:66:1e:67:e4:16:44:28:
0e:e4:ac:78:71:2b:58:3c:a6:32:ee:7a:ab:83:19:
c7:36:1f:4f:8b:11:14:28:0d:d1:7f:53:25:8b:61:
58:07:84:ed:3b:aa:6a:4e:3d:54:0b:d2:8d:fa:1e:
b5:5c:59:77:a8:95:14:77:d9:0d:c7:84:8b:f1:32:
68:cb:00:14:f5:a5:4f:18:70:67:19:1c:de:52:99:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:50:5D:37:D1:72:F2:EA:62:9A:85:E3:9C:FC:BC:FF:1F:07:35:54
X509v3 Authority Key Identifier:
keyid:04:9E:4E:5B:FF:9B:AC:CC:14:97:CB:20:89:DD:86:61:BC:D1:3E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ5OW_-brMwUl8sgid2GYbzRPvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d2:04:4a:ee:e7:9b:c9:77:c6:a7:ce:8a:cb:b5:7c:87:3b:
52:b9:a8:6a:15:55:dc:b0:79:51:c8:f0:38:e4:74:48:e1:9a:
66:a0:28:48:ba:64:79:74:d4:97:41:8f:c7:9e:4f:58:e5:1d:
8b:60:bc:2e:24:8c:d0:aa:6d:c5:3f:9f:bc:e0:7b:99:06:97:
0a:3b:3c:35:9e:d9:1f:8d:6d:e4:1e:d0:c2:60:2e:49:76:f5:
6d:44:55:eb:1e:a2:0f:35:e0:ad:5c:15:2a:b6:5e:48:ec:66:
96:a3:d7:ea:46:a6:79:fe:eb:43:aa:19:8d:87:a7:ad:68:3b:
71:b5:a0:73:42:de:e5:2d:33:18:10:45:43:e2:2f:5e:e2:3c:
31:47:e1:b4:26:9c:23:3c:2f:93:87:5e:85:ed:8e:7c:90:fa:
89:86:5a:1e:3a:d2:4c:66:dc:0e:8a:89:a8:e9:a1:83:59:b3:
69:dd:d8:45:6e:02:e5:5e:49:ea:a4:20:59:e6:5f:55:c7:7d:
20:13:4c:7c:4a:d7:ed:6e:19:b7:25:59:bf:8b:9a:cd:c1:e9:
82:cd:a7:d7:5a:bc:02:51:ad:5e:af:67:05:22:bd:53:0a:ec:
90:80:d8:0c:da:3b:e8:fc:0e:94:d5:33:e0:dd:5f:99:df:ba:
f4:d5:7b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:16:26 2026 by rpki-client