Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
File: Bjc-uCHJZromeoONlS_EpBjLoQc.mft (raw, json)
Hash identifier: 64AfXH5ZskOok8JIf4cwhx3Fvgi/wNuviOZC0DiJCHY=
Subject key identifier: 0C:B2:A0:2A:F3:E3:83:07:3D:7D:4B:71:1E:EE:F0:FA:14:9C:64:F5
Authority key identifier: 06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
Certificate issuer: /CN=06373eb821c966ba267a838d952fc4a418cba107
Certificate serial: 01A0C4E9DB170C93FAA4E69A380EE55EC3E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 17:00:55 +0000
Manifest this update: Mon 21 Sep 2026 17:00:55 +0000
Manifest next update: Tue 22 Sep 2026 17:00:55 +0000
Files and hashes: 1: Bjc-uCHJZromeoONlS_EpBjLoQc.crl (hash: Af8+Jw/yZS+qzEMsYiD810iY9lyTj51Au6hmniDXLw8=)
2: nE1ecoHCr0ohx7PmOrxsros4YrQ.roa (hash: lj8cnvzdQ0C14+FMuBCsMEdb4FCPBx82iuKKh+tVyos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:db:17:0c:93:fa:a4:e6:9a:38:0e:e5:5e:c3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06373eb821c966ba267a838d952fc4a418cba107
Validity
Not Before: Sep 21 17:00:55 2026 GMT
Not After : Sep 22 17:00:55 2026 GMT
Subject: CN=0cb2a02af3e383073d7d4b711eeef0fa149c64f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:88:b2:96:35:8a:6b:81:8f:19:9c:37:f4:83:
98:7a:4a:36:53:c1:76:76:59:7b:de:eb:8c:84:71:
54:6a:28:56:3a:9f:ef:33:35:7a:16:bf:2f:d2:78:
38:55:62:0a:26:6c:3a:ef:e0:3f:f3:6e:44:72:80:
3e:e4:f5:29:72:a4:36:77:6a:58:85:73:9f:56:08:
8b:7f:9e:70:45:83:47:32:e3:bd:91:4b:50:11:14:
30:60:a7:b8:7b:62:a5:8d:40:c1:bf:33:73:fa:10:
69:ce:5e:48:cb:f6:fd:ef:6c:7c:1b:f9:d9:32:a2:
75:84:ce:3e:65:cd:6f:d4:4e:4e:f7:de:b5:3a:1a:
6e:cd:35:00:6b:d5:c2:b6:ba:ba:9e:8b:69:b7:d5:
f9:51:cc:29:92:13:13:99:d5:b0:f4:76:95:3c:ae:
00:07:e0:2a:6e:d1:b6:d7:67:c7:15:8c:7c:07:f5:
01:9c:01:67:5d:e8:09:7a:6a:0c:62:cc:6c:6c:5b:
46:dd:20:d9:9b:d1:87:05:66:16:0e:22:05:e3:33:
df:39:c5:ad:4a:2c:7f:c1:fb:15:79:3d:7d:1a:ec:
40:c2:e9:cd:10:93:87:6c:70:f7:19:c7:8e:4b:a9:
47:10:67:5e:09:10:09:ad:3c:ca:63:77:42:4d:d0:
1f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B2:A0:2A:F3:E3:83:07:3D:7D:4B:71:1E:EE:F0:FA:14:9C:64:F5
X509v3 Authority Key Identifier:
keyid:06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ca:81:08:cb:99:5b:ad:03:90:a5:c0:f0:92:5f:63:35:38:
a6:51:1b:c7:bc:51:7f:26:13:45:8d:5f:07:71:1c:b5:93:93:
c9:2d:c9:eb:c8:f6:aa:83:2a:29:ee:0d:cd:25:50:0c:2d:08:
1b:76:19:da:83:b8:f5:25:0a:8a:0f:fc:85:c4:98:4a:25:88:
e1:38:05:07:09:30:c1:af:48:f3:70:71:dc:26:ae:78:00:ef:
6f:5b:5a:20:ff:12:02:63:09:1c:fd:c9:3b:4a:5b:54:1d:c7:
d1:9c:4c:a3:bd:a7:68:fc:47:9a:5c:2d:88:b2:0b:ee:c8:a9:
02:9c:02:5c:da:79:e9:aa:58:c4:87:72:c5:a8:9d:9e:15:3a:
81:68:f4:fb:6a:93:af:c2:90:8d:d1:df:bd:01:59:49:e0:29:
b7:78:c3:9b:e5:3e:2e:dd:8e:a9:7d:86:55:97:1e:45:83:0f:
4e:be:f0:48:25:5a:b5:fd:ad:db:f5:b9:1d:6a:d9:61:5c:9f:
ee:85:d7:e7:08:c1:1d:7e:2b:78:64:76:bd:31:50:f1:e0:78:
0b:8d:32:10:08:5f:8a:d9:ca:1e:b9:cd:51:38:50:67:e3:34:
0d:23:46:7c:7c:0a:75:c4:8d:e3:b9:c1:1a:14:ca:7d:8f:35:
cb:b9:f9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:57:11 2026 by rpki-client