Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: Vu768BgSGldmMgLB+sBiGLTJnzS+4apNU05xB1Qfxeg=
Subject key identifier: 03:9B:89:B7:6E:48:6B:87:59:4B:9F:A8:37:17:C9:8C:F7:C2:77:D3
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 019EBF23362A58B0D92624AB83DD3C1BA5F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 1390
Signing time: Sat 13 Jun 2026 04:00:16 +0000
Manifest this update: Sat 13 Jun 2026 04:00:16 +0000
Manifest next update: Sun 14 Jun 2026 04:00:16 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: OeXmuYz15Yv0ChEesRqWXPtbWgEHZ++wnpnkI4jKbU4=)
2: K7kf19E8RqOIuQDE1HXceZnfBS4.roa (hash: qUFiFBy2dkZP8rGX/6QQZpm3Sx7bmtP7VKzuR3jDVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:36:2a:58:b0:d9:26:24:ab:83:dd:3c:1b:a5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Jun 13 04:00:16 2026 GMT
Not After : Jun 14 04:00:16 2026 GMT
Subject: CN=039b89b76e486b87594b9fa83717c98cf7c277d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bb:fe:4d:a6:fb:31:1e:92:de:4b:68:ae:da:
30:b2:01:94:10:00:a7:60:28:80:03:19:20:fb:86:
41:fc:ea:a9:9b:0e:9e:d0:ea:ed:51:62:4f:32:66:
f6:57:8b:de:7d:0e:73:e2:11:59:15:67:a1:92:eb:
33:bd:20:90:2f:97:cd:24:de:f8:e0:35:6a:c8:82:
83:2c:a7:1d:e2:49:45:48:83:d1:c6:fe:17:63:ce:
f0:55:cd:e8:4a:7d:05:80:9e:f5:07:e0:6f:a3:c7:
4d:08:fc:99:ac:53:80:48:05:1f:4e:2a:6f:0b:c4:
3d:14:e3:90:8a:47:bb:c2:40:ce:f0:f9:9d:22:8c:
76:36:a9:20:4e:d9:55:9b:a6:7d:ec:c9:2d:1a:3e:
21:2c:be:da:dd:c7:bb:b8:b8:4f:67:2a:40:54:78:
cf:76:00:03:51:8e:1b:25:55:a7:fc:2e:c2:cc:d8:
ae:5b:0f:6b:69:5b:40:b1:af:80:f5:06:3c:c6:a6:
34:19:42:41:03:80:d5:94:cc:b2:04:8f:7f:65:f4:
9a:f2:ab:ab:ff:cc:e6:ea:e9:90:da:2a:0c:3e:03:
46:f0:d0:6a:09:ca:a1:f0:74:b4:2c:9f:40:b5:3a:
b3:40:4a:79:d3:74:1d:42:fd:d0:7c:01:b0:11:b9:
2f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9B:89:B7:6E:48:6B:87:59:4B:9F:A8:37:17:C9:8C:F7:C2:77:D3
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:65:d6:93:aa:77:58:8c:71:1b:48:ca:fb:9d:46:34:a0:0d:
4c:63:f5:ae:ca:f7:be:0f:fa:79:f7:c7:0f:9d:45:eb:a8:63:
2d:35:9d:59:a7:55:cc:26:7c:71:02:cb:5b:31:af:ca:fb:46:
44:4a:79:d1:ba:d0:bb:ce:ae:1a:e7:f2:74:c0:50:7d:9d:79:
96:b0:38:86:88:01:c5:2d:1a:87:74:a0:00:30:2d:7f:03:db:
f6:54:b5:d8:92:dd:f1:63:af:9b:2c:fb:db:5e:0a:1e:ce:35:
03:33:92:b9:7f:84:ac:6a:63:d3:25:ef:d8:f5:a7:87:1b:a0:
54:ec:08:1e:32:43:b1:13:8a:cb:6c:c6:17:5f:bf:c8:60:94:
4a:b4:0f:28:66:bb:a4:2e:87:10:61:13:72:41:d5:21:2d:98:
50:a5:02:fa:3b:58:78:fe:4d:08:a3:a9:c5:c3:1e:1f:01:14:
eb:18:b0:de:cb:f3:cd:71:17:61:fd:f0:5b:d8:66:47:50:f5:
b6:38:eb:eb:25:83:50:32:2d:70:2e:3f:28:5d:a7:31:65:90:
1d:ae:87:76:98:2b:8b:80:1d:2f:d4:c0:ba:0d:b5:84:9e:3d:
6c:86:38:94:af:9a:60:61:7c:bf:78:dd:aa:de:ae:4b:a5:9a:
b7:e3:e9:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/IzYqWLDZJiSrg908G6XzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MzI1NDIyMjFjYWVmNjQ0OGNjNTQ1MjE0ZTAwMDA3MWJk
NTZiODYwHhcNMjYwNjEzMDQwMDE2WhcNMjYwNjE0MDQwMDE2WjAzMTEwLwYDVQQD
EygwMzliODliNzZlNDg2Yjg3NTk0YjlmYTgzNzE3Yzk4Y2Y3YzI3N2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrv+Tab7MR6S3ktortowsgGUEACn
YCiAAxkg+4ZB/Oqpmw6e0OrtUWJPMmb2V4vefQ5z4hFZFWehkuszvSCQL5fNJN74
4DVqyIKDLKcd4klFSIPRxv4XY87wVc3oSn0FgJ71B+Bvo8dNCPyZrFOASAUfTipv
C8Q9FOOQike7wkDO8PmdIox2NqkgTtlVm6Z97MktGj4hLL7a3ce7uLhPZypAVHjP
dgADUY4bJVWn/C7CzNiuWw9raVtAsa+A9QY8xqY0GUJBA4DVlMyyBI9/ZfSa8qur
/8zm6umQ2ioMPgNG8NBqCcqh8HS0LJ9AtTqzQEp503QdQv3QfAGwEbkvSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAObibduSGuHWUufqDcXyYz3wnfTMB8GA1UdIwQY
MBaAFAYyVCIhyu9kSMxUUhTgAAcb1WuGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmpKVUlpSEs3MlJJekZSU0ZPQUFCeHZWYTRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy82YzVhYTEtNTg4MC00NjUxLTg1YTQt
YWZkM2JmNmJjNThjLzEvQmpKVUlpSEs3MlJJekZSU0ZPQUFCeHZWYTRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy82YzVhYTEtNTg4MC00NjUxLTg1YTQtYWZkM2JmNmJjNThj
LzEvQmpKVUlpSEs3MlJJekZSU0ZPQUFCeHZWYTRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2XWk6p3
WIxxG0jK+51GNKANTGP1rsr3vg/6effHD51F66hjLTWdWadVzCZ8cQLLWzGvyvtG
REp50brQu86uGufydMBQfZ15lrA4hogBxS0ah3SgADAtfwPb9lS12JLd8WOvmyz7
214KHs41AzOSuX+ErGpj0yXv2PWnhxugVOwIHjJDsROKy2zGF1+/yGCUSrQPKGa7
pC6HEGETckHVIS2YUKUC+jtYeP5NCKOpxcMeHwEU6xiw3svzzXEXYf3wW9hmR1D1
tjjr6yWDUDItcC4/KF2nMWWQHa6Hdpgri4AdL9TAug21hJ49bIY4lK+aYGF8v3jd
qt6uS6Wat+PpYQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:37:19 2026 by rpki-client