
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
File: Bjc-uCHJZromeoONlS_EpBjLoQc.mft (raw, json)
Hash identifier: jbu74bgJE06pri4w+DPHYrP+R+YfIxO+gm1AkGbhii8=
Subject key identifier: 2B:73:C1:68:93:A7:1D:A9:71:DE:81:3F:AD:F0:58:6D:22:01:B4:18
Authority key identifier: 06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
Certificate issuer: /CN=06373eb821c966ba267a838d952fc4a418cba107
Certificate serial: 019FA907BF4BB714F7833F3DBAAE22267250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 14:01:24 +0000
Manifest this update: Tue 28 Jul 2026 14:01:24 +0000
Manifest next update: Wed 29 Jul 2026 14:01:24 +0000
Files and hashes: 1: Bjc-uCHJZromeoONlS_EpBjLoQc.crl (hash: yf+We8NXtSvsSX2lhOCy8+V14c72yk9SNsmzmNisVJk=)
2: nE1ecoHCr0ohx7PmOrxsros4YrQ.roa (hash: lj8cnvzdQ0C14+FMuBCsMEdb4FCPBx82iuKKh+tVyos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:bf:4b:b7:14:f7:83:3f:3d:ba:ae:22:26:72:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06373eb821c966ba267a838d952fc4a418cba107
Validity
Not Before: Jul 28 14:01:24 2026 GMT
Not After : Jul 29 14:01:24 2026 GMT
Subject: CN=2b73c16893a71da971de813fadf0586d2201b418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:12:db:ef:db:09:3c:b4:03:bb:f4:e0:2f:
30:bd:21:45:67:98:58:59:56:33:49:1d:63:d7:4e:
d3:6c:d3:a0:15:e5:9a:47:a2:77:c0:a7:1b:02:76:
9b:9e:44:8a:b1:b1:3b:37:60:29:9c:81:f1:4a:fa:
fe:8a:c0:d9:58:39:71:50:65:c8:94:11:81:c1:f5:
d9:66:d0:4a:0a:ef:d5:a7:8e:6a:90:82:74:7b:64:
4d:33:5e:b1:39:9b:56:f8:ca:0a:84:bc:6e:03:ad:
8e:3a:77:a7:64:fa:31:4e:8e:12:45:41:09:b5:35:
7c:21:b3:64:cc:74:80:d5:e6:56:52:0d:12:d3:b5:
bb:3a:3e:d4:29:21:02:52:c6:a9:34:8c:73:55:cf:
6c:ba:d6:5a:55:52:3b:94:b7:d0:6f:22:3a:35:f1:
67:93:51:f8:8c:58:29:c6:ad:7f:37:83:a7:ef:0f:
dd:15:78:98:07:d6:8b:0d:24:ca:d0:16:ad:dc:97:
6d:60:e6:a5:3f:03:b4:43:a0:9f:eb:f8:74:3c:bd:
a6:e7:02:f3:ec:e9:81:06:1a:c2:47:41:21:65:c9:
c4:f5:03:8f:e7:bc:f9:89:ba:f0:7c:78:3e:4a:68:
b4:f0:9c:a2:6c:d6:db:bc:c3:a9:b8:25:1e:dd:41:
f3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:73:C1:68:93:A7:1D:A9:71:DE:81:3F:AD:F0:58:6D:22:01:B4:18
X509v3 Authority Key Identifier:
keyid:06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:67:f5:70:f3:7d:50:85:04:ef:7a:cb:22:49:21:dd:02:33:
8c:42:cc:df:03:0c:d3:00:be:a9:fb:9f:31:a4:9e:46:5a:fa:
13:fd:09:bb:a8:98:47:10:9c:17:db:7c:7e:b6:52:66:1e:bf:
3f:d0:e0:3c:80:01:fc:39:10:a1:da:49:56:64:f6:98:29:d0:
43:75:ab:94:2d:e9:4a:cd:13:89:ac:1f:1c:a0:77:e4:f9:5c:
48:ea:4f:87:ed:f6:fb:8d:c4:8c:9e:b9:8c:f3:20:63:71:6a:
27:7b:de:64:5b:23:11:79:2a:61:01:11:68:3e:27:24:f9:40:
5a:c3:97:34:8f:35:6e:4d:fb:02:aa:2d:bc:ad:76:bf:24:03:
94:f5:5f:ac:cf:3b:04:26:2e:5e:e1:09:b9:a9:a3:ef:66:6c:
44:01:cf:7b:36:c1:3c:40:4c:af:28:12:ff:e8:86:f6:8e:fb:
08:71:25:f8:7a:8a:39:c8:8d:68:ff:c2:ec:2b:45:29:e4:9f:
ba:c8:97:d2:ec:c4:bf:54:15:58:54:1c:18:b1:80:c3:17:18:
d3:b4:db:88:19:20:6a:9d:e2:5d:f4:d9:fb:15:9c:ee:01:be:
96:90:9d:b2:2f:aa:c0:b2:c3:16:e9:e7:c4:4c:47:e7:07:f3:
56:09:4c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:07:17 2026 by rpki-client