Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
File: BjyTAb89LhVgz69-3EGnw-yKFqY.mft (raw, json)
Hash identifier: YEUJ+oDKBEcxeoUr5kasqMxL1RoEgQ+h1kDkjXE/8pw=
Subject key identifier: DF:F7:40:D2:2F:61:06:22:97:E2:D9:5E:AE:AC:DE:09:FB:12:F7:E3
Authority key identifier: 06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
Certificate issuer: /CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Certificate serial: 019D9C2CFF74FAA3485ADCC7BD59142BF0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 16:01:27 +0000
Manifest this update: Fri 17 Apr 2026 16:01:27 +0000
Manifest next update: Sat 18 Apr 2026 16:01:27 +0000
Files and hashes: 1: BjyTAb89LhVgz69-3EGnw-yKFqY.crl (hash: WyBBPkrfayw9GMbEgmM9AdO0EiqBEOfo2De2UPtu6Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:ff:74:fa:a3:48:5a:dc:c7:bd:59:14:2b:f0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Validity
Not Before: Apr 17 16:01:27 2026 GMT
Not After : Apr 18 16:01:27 2026 GMT
Subject: CN=dff740d22f61062297e2d95eaeacde09fb12f7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dc:01:67:fb:5b:12:94:82:df:d6:82:56:45:
67:3e:92:1d:dc:45:ab:09:c2:21:83:d3:4a:dd:8a:
b6:c7:81:c9:80:e5:9f:99:46:0f:34:25:39:1c:65:
04:23:e8:44:95:b4:b9:e7:f2:af:67:bc:59:61:a8:
82:a3:13:1f:0d:dd:64:bc:f4:b1:a4:61:f1:27:4f:
9a:d3:64:b0:92:cb:58:43:43:3b:e4:95:15:fb:18:
1e:f2:70:34:ec:62:ed:21:60:2b:64:bf:b2:e7:aa:
37:58:ee:f0:72:2f:25:3b:01:ee:21:a6:d6:5a:a1:
9e:77:2f:d7:23:49:cb:f1:37:45:a3:2e:26:2f:40:
60:65:b1:0e:9a:5e:a6:b5:8e:d5:fa:59:23:20:21:
d6:61:f3:12:02:e4:79:9d:85:a8:24:3e:32:f0:e1:
7c:97:03:9d:52:4e:de:18:79:5f:34:e0:9c:6f:b6:
c9:c5:20:fd:ab:0e:f0:8c:05:9c:aa:63:a5:1a:a3:
24:dd:27:14:98:0a:0f:f5:70:68:96:18:0d:17:7e:
6a:86:25:19:ca:f7:a7:20:96:a5:a1:b2:0f:9a:eb:
e8:64:1f:45:87:4a:ce:bf:60:f2:ec:82:92:d2:d3:
f6:29:62:16:d8:04:b2:56:19:81:50:cd:9f:1c:b6:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F7:40:D2:2F:61:06:22:97:E2:D9:5E:AE:AC:DE:09:FB:12:F7:E3
X509v3 Authority Key Identifier:
keyid:06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:81:af:1e:eb:d5:58:7b:1c:5b:45:66:19:ff:0d:15:01:a4:
30:96:6c:5f:66:c5:92:2d:16:a3:fd:f0:56:b4:6a:48:07:21:
b7:00:98:56:cf:d2:38:ab:46:ac:17:df:92:c2:1c:65:64:e9:
93:46:1c:24:70:10:9d:47:44:7f:32:42:21:ad:60:92:6b:2b:
e7:1d:70:3e:e9:ed:2d:66:04:40:0a:3c:e1:3d:1f:0a:8a:a6:
57:49:2f:b9:81:3c:88:96:40:65:c6:46:5b:53:c8:37:a4:b2:
c1:b4:27:07:5a:75:79:2f:37:5c:f4:37:9a:dd:01:0d:a0:fb:
79:9d:db:35:c7:61:d9:ee:bf:32:ff:30:8e:49:ef:ce:a2:76:
22:3a:56:53:b8:cf:2c:08:fb:43:d3:8d:30:30:dd:05:07:5e:
0f:cf:72:eb:80:11:d0:58:b6:67:ba:2d:33:6b:16:ab:40:f8:
55:28:40:70:ca:92:69:91:12:86:a2:cf:9d:a2:54:78:07:74:
ec:6e:48:2a:7f:6f:c0:53:87:3b:7b:7b:f6:dd:4f:6b:db:55:
eb:70:fe:f2:3f:cb:3c:ae:fa:5d:e0:fd:4c:d2:c7:54:48:3b:
26:2b:e5:45:cb:f2:0d:35:c0:d9:8d:f5:2f:71:96:74:59:b0:
14:2f:e3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:34:22 2026 by rpki-client