Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
File: BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json)
Hash identifier: dFkk4iJ4xcde0zYEP7EUvYHnZSEGvOnmtmA30p66MQU=
Subject key identifier: C8:9C:35:7A:0D:74:41:E6:96:23:8E:3A:9E:39:E3:33:31:3E:B9:14
Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
Certificate issuer: /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Certificate serial: 01A0E7E48374E061BEFEDF50F750408C2556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
Manifest number: 1757
Signing time: Mon 28 Sep 2026 12:01:47 +0000
Manifest this update: Mon 28 Sep 2026 12:01:47 +0000
Manifest next update: Tue 29 Sep 2026 12:01:47 +0000
Files and hashes: 1: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: aYoEEgQqn/gsxRqxTGu0NdyFEwxIsFN9z30fip/fFfE=)
2: ue1Yig8TYgxiOV1FxPhvIsY035g.roa (hash: 3msZkfxcU6jcS509BBjupbbAc7uKaBkwJ1wFsWgzHXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e4:83:74:e0:61:be:fe:df:50:f7:50:40:8c:25:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Validity
Not Before: Sep 28 12:01:47 2026 GMT
Not After : Sep 29 12:01:47 2026 GMT
Subject: CN=c89c357a0d7441e696238e3a9e39e333313eb914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fa:a5:d1:21:9f:3b:f1:c7:46:ee:27:54:00:
32:30:d3:af:a4:73:c5:55:36:a9:2d:eb:e8:5a:d9:
e0:6a:54:96:32:f3:97:39:86:d6:a8:ef:d7:25:19:
78:a8:5f:14:90:4c:01:81:fd:5a:dc:60:cd:2d:69:
eb:44:20:4c:15:1a:de:97:bc:7f:fc:fe:8a:cc:12:
48:94:25:d0:90:8c:27:d4:82:cc:f8:84:39:e3:4d:
76:18:35:2c:d3:1c:24:60:bd:36:9d:61:29:44:b8:
20:10:5e:4b:23:68:b8:7f:e0:1f:1b:c7:95:ba:b4:
6d:d0:12:c1:64:d5:1b:7a:b1:f0:18:c0:16:66:92:
5b:63:4d:8f:a8:e9:22:a3:65:96:e7:5d:32:6f:9e:
4a:2f:bf:e6:1a:56:56:36:ce:1a:88:c4:67:b5:74:
00:cb:45:ad:22:5c:0d:ad:60:ce:17:40:88:34:58:
b8:7a:f0:64:4e:e3:73:84:6b:19:53:06:b6:32:b3:
7c:7e:b3:54:4f:18:b8:33:62:c5:7e:ac:35:67:56:
7e:e4:13:60:39:6a:ee:1b:24:2b:8a:51:83:20:9d:
16:ad:6c:d4:6e:42:2d:e8:09:37:78:61:3a:a0:b8:
d7:c3:54:5d:0f:be:93:6f:d2:e8:f5:16:b7:47:70:
55:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9C:35:7A:0D:74:41:E6:96:23:8E:3A:9E:39:E3:33:31:3E:B9:14
X509v3 Authority Key Identifier:
keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:e2:39:c1:7f:6e:55:39:6c:bf:62:69:59:13:40:4a:82:e9:
e2:d0:5f:50:94:4e:eb:45:b8:5b:72:de:ea:12:bd:c9:e2:52:
6a:2f:f4:3c:09:8b:26:42:93:f4:18:35:44:b1:90:41:52:f3:
ce:eb:72:7c:d3:a7:61:f5:ec:d3:10:43:fb:fa:8e:4c:51:b5:
10:b2:5b:b4:b2:26:f4:b4:a2:b1:b1:4d:15:5a:37:c9:1a:1d:
4b:a9:a9:78:db:1c:02:d1:7b:9c:67:e2:20:c7:70:74:74:68:
7d:f8:4c:03:17:9d:07:f9:ed:e2:cc:6f:74:b7:00:8a:57:bd:
a2:92:67:ee:8f:be:13:02:26:b1:38:5c:45:3f:1c:27:75:2f:
86:22:8d:74:71:dc:9c:83:de:2b:e3:53:28:59:cf:28:19:a7:
10:62:ed:68:f9:18:d3:ec:86:f3:fe:3a:df:23:3e:de:fc:14:
70:62:f8:8f:e5:4b:29:e9:ab:0c:9d:b7:e1:8e:21:24:3d:3c:
ca:23:4f:bb:84:d3:af:f4:96:ec:d5:67:38:7a:56:23:b2:b7:
b3:c0:6d:cc:ad:ee:71:02:0e:4c:69:e4:62:13:83:60:9e:15:
74:e9:2d:16:56:a6:03:2d:d2:ef:74:30:f5:d8:2a:b5:86:e1:
66:40:bb:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDn5IN04GG+/t9Q91BAjCVWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0OTkyNmUxY2M1ZTYxYzVjODBlYjQ2YTlkN2I2ZjVmNjNh
MTY2MWMwHhcNMjYwOTI4MTIwMTQ3WhcNMjYwOTI5MTIwMTQ3WjAzMTEwLwYDVQQD
EyhjODljMzU3YTBkNzQ0MWU2OTYyMzhlM2E5ZTM5ZTMzMzMxM2ViOTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivql0SGfO/HHRu4nVAAyMNOvpHPF
VTapLevoWtngalSWMvOXOYbWqO/XJRl4qF8UkEwBgf1a3GDNLWnrRCBMFRrel7x/
/P6KzBJIlCXQkIwn1ILM+IQ54012GDUs0xwkYL02nWEpRLggEF5LI2i4f+AfG8eV
urRt0BLBZNUberHwGMAWZpJbY02PqOkio2WW510yb55KL7/mGlZWNs4aiMRntXQA
y0WtIlwNrWDOF0CINFi4evBkTuNzhGsZUwa2MrN8frNUTxi4M2LFfqw1Z1Z+5BNg
OWruGyQrilGDIJ0WrWzUbkIt6Ak3eGE6oLjXw1RdD76Tb9Lo9Ra3R3BVVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMicNXoNdEHmliOOOp454zMxPrkUMB8GA1UdIwQY
MBaAFASZJuHMXmHFyA60ap17b19joWYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkprbTRjeGVZY1hJRHJScW5YdHZYMk9oWmh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jMzljYWYtYjc3Ny00OTRkLWI2ODIt
OGU5ZGY5NmRjZTQ1LzEvQkprbTRjeGVZY1hJRHJScW5YdHZYMk9oWmh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jMzljYWYtYjc3Ny00OTRkLWI2ODItOGU5ZGY5NmRjZTQ1
LzEvQkprbTRjeGVZY1hJRHJScW5YdHZYMk9oWmh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyuI5wX9u
VTlsv2JpWRNASoLp4tBfUJRO60W4W3Le6hK9yeJSai/0PAmLJkKT9Bg1RLGQQVLz
zutyfNOnYfXs0xBD+/qOTFG1ELJbtLIm9LSisbFNFVo3yRodS6mpeNscAtF7nGfi
IMdwdHRoffhMAxedB/nt4sxvdLcAile9opJn7o++EwImsThcRT8cJ3UvhiKNdHHc
nIPeK+NTKFnPKBmnEGLtaPkY0+yG8/463yM+3vwUcGL4j+VLKemrDJ234Y4hJD08
yiNPu4TTr/SW7NVnOHpWI7K3s8BtzK3ucQIOTGnkYhODYJ4VdOktFlamAy3S73Qw
9dgqtYbhZkC7rA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:59:52 2026 by rpki-client