Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
File: BjyTAb89LhVgz69-3EGnw-yKFqY.mft (raw, json)
Hash identifier: IrPYcdHxVE2r526l0RrptG7SGi5WlZaqsvxgTg5ud2s=
Subject key identifier: 5E:2C:C7:00:50:96:90:98:AD:27:D7:A1:23:14:79:F2:D4:D1:51:B0
Authority key identifier: 06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
Certificate issuer: /CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Certificate serial: 019EC1B708E60A427FF99D8D0F241404798D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 16:00:58 +0000
Manifest this update: Sat 13 Jun 2026 16:00:58 +0000
Manifest next update: Sun 14 Jun 2026 16:00:58 +0000
Files and hashes: 1: BjyTAb89LhVgz69-3EGnw-yKFqY.crl (hash: Xe55h7uiOxIJd8NZlLU+fsb9Zw8Ww1/coqXeaLgk19c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:08:e6:0a:42:7f:f9:9d:8d:0f:24:14:04:79:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Validity
Not Before: Jun 13 16:00:58 2026 GMT
Not After : Jun 14 16:00:58 2026 GMT
Subject: CN=5e2cc70050969098ad27d7a1231479f2d4d151b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6f:e5:48:44:ad:3f:ed:b6:1a:cb:2b:85:04:
cd:00:cc:18:63:76:22:00:45:4c:7b:45:67:04:14:
24:b0:b5:f1:28:67:95:4b:e9:d8:f8:55:1d:56:11:
98:f1:e9:4a:33:53:6c:ca:ef:6d:3c:40:1b:09:bc:
b7:d8:47:89:1e:ee:d8:e2:e5:b0:da:f4:f2:17:f5:
e1:b3:d4:0f:35:c2:54:f8:08:f3:43:74:11:d0:df:
3b:ba:cb:a8:52:a0:43:ee:09:89:06:e0:23:97:b9:
73:63:cf:51:20:1a:97:f0:a7:c0:29:3d:23:61:85:
cd:51:17:29:9a:24:bb:ed:e4:ff:df:30:d9:e0:72:
78:5d:b5:93:d5:f9:07:57:ac:99:54:53:e0:8f:57:
9c:77:cb:2b:a4:73:73:3f:3f:10:c9:17:96:92:38:
8c:27:96:7c:77:9b:6c:97:7b:06:f5:8c:59:c2:fa:
a0:fd:a1:48:54:3c:06:8e:b8:77:0b:27:37:9b:a6:
50:93:62:5d:45:81:81:a0:ea:00:1e:06:ec:5f:d2:
47:29:ec:64:e3:03:8d:c9:57:bc:f6:f7:06:17:b0:
4b:de:3d:78:19:d3:74:6a:b4:d6:dc:e0:4f:9d:de:
b5:45:da:7e:ed:51:85:75:fe:3d:2b:3f:c1:cc:c0:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2C:C7:00:50:96:90:98:AD:27:D7:A1:23:14:79:F2:D4:D1:51:B0
X509v3 Authority Key Identifier:
keyid:06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c7:a9:5b:1c:2e:b2:63:38:0c:29:0f:dc:ec:75:ee:13:f1:
97:e7:68:a4:5c:2c:0c:9e:4a:a5:0a:b0:6d:9d:09:62:ae:30:
2b:c0:84:81:cb:6f:83:f9:85:a1:f0:82:cc:c5:20:2d:64:1f:
49:f4:69:1c:58:56:d8:72:f5:ed:d1:00:fb:e7:1b:e2:42:19:
6d:c4:8a:15:23:91:05:b6:02:14:77:84:7c:50:36:c2:e8:7d:
83:86:d1:f2:10:e7:29:f5:7b:17:f2:61:9c:b1:39:bf:0f:f3:
79:2d:98:2d:ea:43:cd:38:52:de:ab:d3:96:d2:fe:86:5b:3e:
38:83:9c:ee:5e:c9:cd:13:2b:aa:22:f9:df:bc:41:32:28:38:
e2:46:0e:ce:46:c7:7b:c0:29:19:c5:1b:7b:37:04:2d:d2:64:
63:a5:27:f5:23:93:c2:99:df:65:d2:ba:4a:6d:5c:3d:d4:78:
d7:c1:6d:e7:a7:cf:eb:aa:10:7e:4a:69:6d:fa:d3:73:6d:6f:
21:21:db:13:2b:df:36:20:b1:70:5f:9f:d8:19:ff:d4:eb:97:
fb:85:03:07:3c:dc:ff:31:59:72:6f:de:43:c9:33:65:4c:ff:
18:19:f7:1a:6a:d0:c8:ae:b8:e3:37:7b:ab:59:de:8e:bb:5f:
27:96:87:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:09:35 2026 by rpki-client