Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
File: BjfRzl3D-oAOHR3PvaqEH93UOQU.mft (raw, json)
Hash identifier: jj8QaCK4LDrg7jZUpGJvUt/WF2DlwfF1Pt4ugjnUjYs=
Subject key identifier: DC:26:9D:F8:4C:2C:D2:A2:BF:5F:EE:C9:45:64:91:C4:17:E6:EA:ED
Authority key identifier: 06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
Certificate issuer: /CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Certificate serial: 019EC148ECF708B0B7400D66D55C34076C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
Manifest number: 17A4
Signing time: Sat 13 Jun 2026 14:00:42 +0000
Manifest this update: Sat 13 Jun 2026 14:00:42 +0000
Manifest next update: Sun 14 Jun 2026 14:00:42 +0000
Files and hashes: 1: BjfRzl3D-oAOHR3PvaqEH93UOQU.crl (hash: oGRTn+oId5qKC19YS+TimiRbCCBVjqe24W08yusb7wc=)
2: G-BgSgA1DvY02PMsHCU-rGoXRQo.roa (hash: PS8e/lwF9c6L43N47uqYtfOx0c2N/MEHbFT+QBvkfks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:ec:f7:08:b0:b7:40:0d:66:d5:5c:34:07:6c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Validity
Not Before: Jun 13 14:00:42 2026 GMT
Not After : Jun 14 14:00:42 2026 GMT
Subject: CN=dc269df84c2cd2a2bf5feec9456491c417e6eaed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:10:1e:eb:42:dc:a4:c5:23:34:13:62:2c:
3d:1c:e9:a9:4d:67:d0:f1:1a:9d:56:2b:7d:f5:9c:
77:1a:e6:95:84:06:c3:a6:00:c8:21:3c:c5:44:9e:
33:87:f7:ab:af:77:66:0c:5b:c9:d1:1b:a6:c3:19:
8b:1e:18:75:92:aa:a7:df:3a:0e:82:3b:c7:9d:33:
83:74:97:ce:02:34:ce:83:a2:e7:a3:c5:2b:9e:82:
56:32:bb:ef:d7:5f:b6:30:7f:f6:72:91:37:0d:a9:
57:ba:3b:e4:05:d6:f9:f6:bf:21:00:c3:ea:24:22:
21:fd:61:dd:d7:2f:eb:ad:6d:02:08:6e:41:1e:21:
ff:4e:1e:fe:66:33:5a:bb:64:ca:fe:72:2b:86:b3:
f4:7c:59:d2:d5:41:cb:bc:45:be:f9:67:33:31:c2:
e4:93:3a:42:c5:d9:a7:4f:0d:d7:3c:6d:e9:85:0b:
3a:f0:82:f7:0e:bb:c4:dd:ff:94:fa:ea:9c:3c:43:
7a:47:d9:9f:83:29:5f:3a:aa:8b:fa:ad:8d:63:60:
e1:bd:d9:9e:b4:0d:ab:76:a7:24:49:07:cb:e0:85:
c2:a4:3f:46:89:bd:43:3f:c3:45:f3:f6:62:5c:1d:
f3:67:fa:c1:d7:25:14:d4:66:87:d9:27:a1:44:32:
4b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:26:9D:F8:4C:2C:D2:A2:BF:5F:EE:C9:45:64:91:C4:17:E6:EA:ED
X509v3 Authority Key Identifier:
keyid:06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:28:83:01:4a:e4:fb:9b:17:74:5d:e9:88:9d:90:f6:2b:7b:
85:dd:e3:7c:29:55:b2:09:f8:0e:3e:84:ca:fb:4b:b7:a2:43:
75:15:95:d6:17:54:c0:54:04:34:2a:8f:9c:7c:fd:b2:38:51:
08:a5:1c:bb:c0:b9:be:b3:ac:c8:63:59:97:ce:5b:38:66:38:
fe:cb:95:6e:80:5d:8a:e3:70:0f:76:81:5e:e4:ba:55:93:60:
9c:d6:86:5e:32:ea:0d:c8:24:e3:11:43:37:77:e6:66:d9:7f:
1b:d4:fd:3f:59:3f:04:86:24:4d:09:cc:ff:af:22:08:91:4e:
11:6e:43:c2:37:00:37:4b:b4:9c:d0:d4:f3:e6:30:9b:dd:22:
ca:81:c0:c8:ba:41:75:ed:c6:f1:7c:cd:49:19:ad:88:f7:a6:
ca:10:1a:79:c9:cb:14:73:9e:bf:5e:26:7a:a4:c4:73:ac:8f:
b4:c1:6a:1d:eb:dc:d8:db:ae:40:04:65:e8:4b:db:7a:47:24:
3b:77:a9:70:f0:fb:ea:47:69:09:18:d6:71:fd:d6:76:58:25:
12:db:0e:37:e7:55:7f:e4:33:28:b1:83:a1:06:d7:ab:51:70:
a0:43:01:00:f6:aa:96:d7:3a:43:6a:86:e1:af:c8:f2:78:e0:
69:d1:7f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:27:28 2026 by rpki-client