Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
File: BjfRzl3D-oAOHR3PvaqEH93UOQU.mft (raw, json)
Hash identifier: z+ZYgy8TenIHkdx+zzZM024vIKkDzUbrSqGiKA2A4xk=
Subject key identifier: 93:DA:27:42:7C:F7:B2:D6:A4:8E:67:C8:17:71:0E:5A:C9:70:C3:36
Authority key identifier: 06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
Certificate issuer: /CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Certificate serial: 019D9BBE527AB4EC9BBF30AECF04F07CD2A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
Manifest number: 170C
Signing time: Fri 17 Apr 2026 14:00:34 +0000
Manifest this update: Fri 17 Apr 2026 14:00:34 +0000
Manifest next update: Sat 18 Apr 2026 14:00:34 +0000
Files and hashes: 1: BjfRzl3D-oAOHR3PvaqEH93UOQU.crl (hash: 7oePLtdt/qsod88Yk+jmI775WvDUw1Mn7yEmlR1ZvLo=)
2: G-BgSgA1DvY02PMsHCU-rGoXRQo.roa (hash: PS8e/lwF9c6L43N47uqYtfOx0c2N/MEHbFT+QBvkfks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:52:7a:b4:ec:9b:bf:30:ae:cf:04:f0:7c:d2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Validity
Not Before: Apr 17 14:00:34 2026 GMT
Not After : Apr 18 14:00:34 2026 GMT
Subject: CN=93da27427cf7b2d6a48e67c817710e5ac970c336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e7:1a:21:41:d5:e5:09:28:75:4e:46:41:6e:
31:3e:2e:c4:ba:f2:5f:66:1b:61:99:fd:ea:9d:bb:
b7:d6:a9:dd:73:d5:79:6f:e0:1b:da:c7:b8:88:95:
f0:6e:32:75:36:60:35:3b:26:45:ef:62:bc:e0:f4:
07:1a:0f:1f:df:31:4c:19:1b:2a:ef:22:e6:0a:22:
d5:0c:2b:43:97:e7:77:e8:93:e0:16:70:7e:2c:8f:
94:e2:aa:81:fc:ad:16:0b:d7:47:4e:43:3e:9a:76:
13:20:c9:aa:f6:82:a1:14:6b:0d:e5:a1:80:b1:9b:
26:69:90:12:68:58:56:ac:0c:95:0d:f0:e4:40:bb:
21:ad:f8:7c:19:01:18:52:64:97:3a:6d:6b:69:be:
ee:e1:36:37:29:23:4f:b6:55:bf:36:5d:07:e0:61:
94:05:2f:c8:23:c9:c6:00:11:95:46:16:66:b2:dc:
01:65:a8:33:ea:db:b9:5a:04:62:3b:fa:b9:60:b5:
55:79:6e:60:ed:20:d3:aa:65:14:5c:24:9c:a3:87:
82:1d:76:1f:cb:7d:45:97:f6:d2:c8:71:8a:1b:ee:
0f:8f:ac:03:e5:4e:93:de:45:60:3b:10:36:95:8f:
ed:b7:5a:8e:6f:82:ba:d3:98:b9:86:7e:15:a2:1d:
78:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DA:27:42:7C:F7:B2:D6:A4:8E:67:C8:17:71:0E:5A:C9:70:C3:36
X509v3 Authority Key Identifier:
keyid:06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:aa:ab:58:90:58:36:8c:5f:9b:c3:71:ef:b3:54:1f:fd:d6:
88:65:bb:d0:d7:07:d3:07:21:55:86:35:7a:71:02:d7:e2:b8:
31:a4:fd:43:7b:35:08:3a:a8:b4:70:2a:07:05:56:19:4a:c8:
27:87:7a:50:18:1a:40:79:47:2a:a2:e5:55:45:04:ae:76:55:
6b:3c:30:03:3d:92:ac:b8:a8:33:86:7f:cb:96:7e:e7:82:7f:
14:99:00:fc:e9:b8:b9:6d:2e:a9:29:ac:b7:09:e2:4f:2f:b6:
3f:c7:1f:c2:ec:7a:b2:74:1d:ba:a8:df:b5:99:06:67:6b:10:
25:2a:d3:41:01:9b:e2:e3:d6:c3:29:16:96:dc:0c:2e:8f:47:
af:83:3e:e9:28:d2:22:0c:02:c2:cd:09:ce:23:1b:31:2a:bf:
e5:13:7e:05:94:ef:c3:57:ee:be:9e:68:ce:a2:9e:e8:42:42:
29:6d:4c:ab:ba:24:09:82:9b:23:ee:8b:94:ed:bb:72:af:a6:
4d:08:6e:01:f0:5c:e0:4d:7d:ff:e1:52:8b:00:c4:22:6f:2d:
5f:9c:d1:9c:2b:91:79:94:8c:ed:b1:73:00:19:d5:75:01:5b:
46:3e:c6:87:6c:3b:3e:2b:2f:85:c3:0b:d4:70:d0:76:f2:01:
e3:44:05:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:24:26 2026 by rpki-client