Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
File: BjyTAb89LhVgz69-3EGnw-yKFqY.mft (raw, json)
Hash identifier: NmXc1PVY1VKrf65RC5WuzbLbhz7y3FaTtJjuHVg10K0=
Subject key identifier: 6F:CF:31:BE:0C:0F:5B:0D:6A:6A:0D:D3:D2:29:84:49:7C:BC:90:87
Authority key identifier: 06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
Certificate issuer: /CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Certificate serial: 01A1393709A46D3EF41C84BA59E4AA10461F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
Manifest number: 1A9F
Signing time: Wed 14 Oct 2026 07:01:10 +0000
Manifest this update: Wed 14 Oct 2026 07:01:10 +0000
Manifest next update: Thu 15 Oct 2026 07:01:10 +0000
Files and hashes: 1: BjyTAb89LhVgz69-3EGnw-yKFqY.crl (hash: /jIAPWrFeLVJ0Y0ppylYwlka2gJmlRYVVFVXOYtdImo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:37:09:a4:6d:3e:f4:1c:84:ba:59:e4:aa:10:46:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Validity
Not Before: Oct 14 07:01:10 2026 GMT
Not After : Oct 15 07:01:10 2026 GMT
Subject: CN=6fcf31be0c0f5b0d6a6a0dd3d22984497cbc9087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:e9:70:27:67:4e:af:8d:c7:89:29:9b:30:
b5:1a:8a:2d:e1:e7:5b:c7:9a:5e:14:18:be:10:48:
db:b0:3e:b4:a8:18:22:fb:87:5f:b0:f8:69:da:66:
65:48:6f:6e:ae:73:9f:b7:08:9b:93:73:a2:ef:8f:
af:e2:ec:06:8f:27:f4:e9:52:b1:9a:10:99:1a:6e:
f9:72:78:47:dd:e7:79:da:39:ff:5b:f8:7e:32:33:
b5:27:72:00:8c:ee:98:44:15:6f:1b:c1:fd:87:fe:
b5:d7:18:fc:86:bd:f4:df:93:48:e0:00:22:f4:f9:
ea:89:92:ab:16:ee:ad:fe:e6:4a:ae:92:ef:44:e0:
92:85:f3:10:3c:73:7b:77:d3:0c:c1:59:05:91:97:
27:48:09:21:4d:2f:c7:70:87:2f:00:9f:8d:34:0c:
62:78:2f:bb:6d:29:2c:63:e0:c0:72:20:bb:17:46:
5c:d8:7e:c9:93:6b:fa:ab:01:99:8b:5e:91:03:92:
34:47:cf:e1:63:b5:21:58:eb:b7:61:90:0b:26:2e:
4e:4b:0c:d5:1b:f2:ea:c2:d9:44:f5:e4:d0:b4:fe:
c3:ba:18:4a:8f:46:2d:1b:ef:c7:00:67:a1:7c:99:
64:4f:d1:77:26:2f:32:6d:9b:37:c9:fa:35:e4:37:
5a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CF:31:BE:0C:0F:5B:0D:6A:6A:0D:D3:D2:29:84:49:7C:BC:90:87
X509v3 Authority Key Identifier:
keyid:06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:09:3a:8d:09:db:1e:0c:d0:80:c0:e0:20:02:cf:af:71:a7:
5d:fc:71:30:e2:55:a9:08:68:b9:f7:2e:ea:c6:b6:48:00:6f:
f0:28:c4:8b:04:d8:42:ca:d9:06:cc:14:5e:45:85:e9:a7:21:
d2:90:02:d4:2a:01:1e:03:ce:14:07:83:0c:16:1b:12:0d:8c:
35:a7:26:ab:f4:a4:cb:4c:f8:16:03:23:60:3a:d5:ff:e7:df:
1f:3a:4c:fb:6c:fe:13:33:6a:1a:1d:9c:d8:cc:f0:fa:d6:c6:
c0:a4:7f:13:1e:c0:79:c9:14:83:58:d0:72:08:4b:55:f8:13:
43:bb:56:02:24:9d:22:5a:96:9e:78:bd:8c:de:e6:ba:ee:bb:
09:a7:a1:b2:6c:03:04:e9:fc:37:6a:55:92:b9:26:b1:59:ec:
61:7f:d6:d6:af:0c:5a:cc:13:5c:98:2f:ea:34:aa:e8:f7:18:
ee:bf:c3:d0:87:98:a3:76:53:83:c4:66:91:b4:be:0d:87:43:
87:a3:22:81:35:a8:bb:af:57:88:f1:2d:c7:11:5e:e2:e0:8b:
4c:f8:5c:52:54:30:09:13:14:31:7b:1c:bb:32:d9:d1:9a:a3:
10:fb:3c:98:14:7b:aa:63:88:27:01:4e:fb:1e:35:03:39:e6:
6b:2c:c4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:26:02 2026 by rpki-client