Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
File: BjfRzl3D-oAOHR3PvaqEH93UOQU.mft (raw, json)
Hash identifier: o7Gw8lQgDb/HU3uBsCsr0MFmQmfBUC7N4YD+11pIERE=
Subject key identifier: EA:AF:B9:FE:96:E9:2E:2F:2C:80:F3:B4:D4:A3:4B:CC:00:9E:3E:2E
Authority key identifier: 06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
Certificate issuer: /CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Certificate serial: 019CAE357B5D4B3E412CA4916D5A41CB76F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
Manifest number: 1691
Signing time: Mon 02 Mar 2026 11:01:06 +0000
Manifest this update: Mon 02 Mar 2026 11:01:06 +0000
Manifest next update: Tue 03 Mar 2026 11:01:06 +0000
Files and hashes: 1: BjfRzl3D-oAOHR3PvaqEH93UOQU.crl (hash: 0Q8m2Nuv+KdfEbn9nbfZ4g6YTacHiynoD0gXPWVpIKw=)
2: G-BgSgA1DvY02PMsHCU-rGoXRQo.roa (hash: PS8e/lwF9c6L43N47uqYtfOx0c2N/MEHbFT+QBvkfks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:7b:5d:4b:3e:41:2c:a4:91:6d:5a:41:cb:76:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Validity
Not Before: Mar 2 11:01:06 2026 GMT
Not After : Mar 3 11:01:06 2026 GMT
Subject: CN=eaafb9fe96e92e2f2c80f3b4d4a34bcc009e3e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9b:95:a7:6e:08:5b:13:37:6b:88:7a:c3:a7:
7d:5b:c7:6b:8a:c0:ad:e7:85:7d:7b:c4:b7:06:bc:
cb:a2:55:8a:ec:13:7f:e3:77:0c:b4:8c:10:84:3a:
de:de:c2:b8:45:83:77:94:9a:80:6b:84:b5:8e:60:
5a:7a:fc:e3:e2:cb:68:18:dd:98:6a:ee:d0:75:83:
b4:ad:f0:14:e8:44:38:d2:dd:55:f9:69:6f:b4:95:
d4:8a:76:65:55:15:1f:a8:9a:63:80:ca:71:5c:c7:
8b:ce:43:8f:51:3e:2e:02:a9:aa:1f:9f:de:32:82:
71:52:00:0b:aa:ba:47:8e:e6:fb:dd:b3:35:e4:a3:
ed:5c:78:c6:28:57:26:d6:75:d0:f4:eb:5e:8b:93:
81:1b:15:5e:86:57:bb:d5:89:38:44:88:51:bd:c2:
c5:36:14:2e:aa:8c:0b:cc:62:7d:27:32:2a:59:af:
74:3f:ed:7b:38:f6:d0:cb:90:6a:17:9d:f8:18:c3:
85:5c:2a:ad:12:1e:3e:b3:8c:d4:dc:8d:9d:1a:34:
b9:a2:e7:75:65:2c:b5:12:94:6c:be:05:82:6c:c7:
21:46:9f:93:7f:ec:bb:3b:40:db:4a:97:83:49:55:
a8:2e:5b:33:56:91:f9:f5:77:0f:33:e3:db:34:08:
10:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AF:B9:FE:96:E9:2E:2F:2C:80:F3:B4:D4:A3:4B:CC:00:9E:3E:2E
X509v3 Authority Key Identifier:
keyid:06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ab:e9:92:62:94:6f:18:1c:5d:48:1a:59:07:5f:ce:7c:b7:
7f:f4:26:fd:7e:54:f8:75:f8:45:6c:1f:02:0d:44:89:89:74:
e1:9d:fb:9b:e8:2b:6d:95:7d:0a:5f:97:63:96:9d:c6:8b:3c:
47:78:06:2c:af:26:9b:49:e2:b6:f3:b5:82:ac:11:5f:91:6d:
44:57:3a:21:18:fe:5a:18:82:4c:4e:84:b7:ae:7f:f3:59:77:
51:02:b4:20:13:fc:6b:0c:42:03:76:06:6e:28:b8:8c:37:d7:
60:98:64:79:a1:38:64:4d:1d:c1:f2:bf:f1:ab:ff:80:e1:42:
1e:52:0d:35:77:a1:65:6d:8d:13:b0:f0:a8:76:75:15:3e:6c:
9e:ce:15:d1:30:15:bc:85:6c:5b:0c:69:da:9c:d0:2f:dc:c5:
a8:51:8d:2b:ae:54:e9:19:b6:e4:64:32:9c:46:4a:10:85:25:
87:1f:61:9a:eb:05:b0:47:f8:c6:06:fd:d3:a5:5d:1e:94:e2:
7c:4e:08:74:cc:a2:22:db:52:30:61:b9:55:52:ef:e6:4b:f8:
e9:9f:55:29:cf:5d:01:93:17:90:6f:bf:89:cd:7a:41:88:19:
d9:da:f7:f3:1d:95:d1:6a:9c:4c:ef:6b:5d:10:36:b3:fd:51:
aa:7f:5e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:21 2026 by rpki-client