Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
File: BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json)
Hash identifier: hMprNTNpEAxW3cRG8iQ+Atjl5GfExtbVKFaZ65Q2v1g=
Subject key identifier: F1:73:D1:EC:FB:A5:E9:A9:07:B0:1F:98:9F:14:3F:42:30:7D:F7:55
Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
Certificate issuer: /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Certificate serial: 019D9A06B056000C793A4FA3B30BF64DF764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
Manifest number: 15A1
Signing time: Fri 17 Apr 2026 06:00:22 +0000
Manifest this update: Fri 17 Apr 2026 06:00:22 +0000
Manifest next update: Sat 18 Apr 2026 06:00:22 +0000
Files and hashes: 1: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: cZGXuF6Gzq0s3XT2RtVSEK/99iWXtEgklATVb9H+08E=)
2: ue1Yig8TYgxiOV1FxPhvIsY035g.roa (hash: 3msZkfxcU6jcS509BBjupbbAc7uKaBkwJ1wFsWgzHXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:b0:56:00:0c:79:3a:4f:a3:b3:0b:f6:4d:f7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Validity
Not Before: Apr 17 06:00:22 2026 GMT
Not After : Apr 18 06:00:22 2026 GMT
Subject: CN=f173d1ecfba5e9a907b01f989f143f42307df755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:c3:f3:cb:02:e0:1f:06:46:c2:8a:5c:e4:
f0:78:ef:39:5a:46:0b:67:a1:62:39:77:fe:7e:f4:
86:b7:2f:34:50:ac:1d:49:9c:b5:c1:83:fa:4f:ad:
25:f4:02:32:30:67:b8:29:96:19:00:ed:d5:20:26:
f7:e0:55:f5:c9:f6:f1:62:8d:86:e2:d5:ba:85:bb:
f2:4b:e2:e4:cd:de:1e:ed:4c:48:25:a7:b3:48:19:
87:1c:49:a5:22:69:b5:d7:90:04:5b:4a:69:9f:c8:
13:53:ee:a0:fa:03:86:c8:cb:58:2c:5d:f0:70:f1:
6e:c3:75:b3:55:24:7f:73:35:f2:e9:e1:37:2c:78:
be:93:3b:92:72:00:03:c7:88:24:2a:16:4b:c6:a3:
6e:d7:61:34:ea:06:b5:42:8d:b1:20:f1:a3:5b:2e:
e7:36:a3:cc:e8:34:d4:78:83:6b:d7:be:c2:a7:6a:
08:2e:8d:d2:48:fb:4c:e2:c0:b8:6f:59:f1:d3:7a:
ca:e9:9c:ba:35:ee:e8:b1:06:70:d3:d6:9a:d4:2a:
9a:4f:63:35:1a:83:ad:23:bb:20:00:61:72:3f:6f:
bf:72:38:1d:4a:12:f4:b9:7e:50:be:6a:e7:e8:07:
7b:bd:e3:a6:4b:01:a7:99:77:3d:3c:74:85:22:35:
13:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:73:D1:EC:FB:A5:E9:A9:07:B0:1F:98:9F:14:3F:42:30:7D:F7:55
X509v3 Authority Key Identifier:
keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2f:bf:3f:bd:c7:9d:bb:11:7f:58:7f:8e:21:5d:7a:d2:e1:
1a:f6:72:15:97:4e:0a:c3:7c:0c:2e:be:17:70:46:d2:ab:e1:
cc:a4:e0:51:75:5e:c3:52:6e:ce:8a:35:0e:e9:6e:63:69:e1:
fa:af:26:0c:16:5f:9a:3b:5b:25:f1:10:de:b2:d6:28:a0:ab:
15:dd:2b:84:05:b8:da:43:66:16:db:37:56:d4:f8:28:23:0f:
98:17:63:47:f1:a5:25:0b:4b:0f:58:48:9a:e8:4d:c3:c9:9a:
1a:1e:a8:fb:97:e7:8f:d1:50:f2:77:12:46:81:61:51:1f:c2:
b9:e2:53:46:f0:ca:53:47:bb:70:4f:5f:1a:99:59:ef:f1:91:
4a:a1:2d:6f:76:7c:db:f9:b9:54:98:56:e0:8c:ba:69:d6:6a:
98:c9:c3:dd:7a:07:00:52:ae:cd:f9:fd:82:d1:a2:f2:d9:31:
5e:8a:1e:70:72:86:d1:02:ad:9d:e1:73:86:bc:12:98:07:ac:
91:1d:16:bd:e0:fb:4a:ad:1c:a6:3f:42:fc:58:b0:13:ae:04:
99:fd:98:36:5e:63:74:af:cf:56:50:09:2b:4a:af:22:cb:95:
d6:d7:f5:3b:f6:8d:6a:93:ca:46:53:cd:31:c6:f5:fb:6d:50:
aa:5e:5b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:21:25 2026 by rpki-client