Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: 4pl7QRXmLkIFYI7kSzm9eKnLowSvnln7NUQ5+CvV7Lk=
Subject key identifier: E6:B0:7A:79:77:BE:75:31:3B:F0:4B:57:CA:51:98:C1:69:37:7C:1B
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 01A0D0494B02A8988E3C1C6547E11E12B4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 14A2
Signing time: Wed 23 Sep 2026 22:00:59 +0000
Manifest this update: Wed 23 Sep 2026 22:00:59 +0000
Manifest next update: Thu 24 Sep 2026 22:00:59 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: /I11z63XD1HKlrkscgzorySk2ykY7uCwkX1nbRfeY9Q=)
2: K7kf19E8RqOIuQDE1HXceZnfBS4.roa (hash: qUFiFBy2dkZP8rGX/6QQZpm3Sx7bmtP7VKzuR3jDVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:49:4b:02:a8:98:8e:3c:1c:65:47:e1:1e:12:b4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Sep 23 22:00:59 2026 GMT
Not After : Sep 24 22:00:59 2026 GMT
Subject: CN=e6b07a7977be75313bf04b57ca5198c169377c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:7c:9d:7c:3b:ba:53:8f:e3:4d:cd:69:1d:
6d:0e:9f:30:04:78:fc:34:c3:1f:33:13:2c:9b:79:
17:03:da:b1:25:ce:36:7b:95:11:60:f9:c6:5e:fc:
50:93:27:e6:83:84:24:4c:e0:e9:73:d9:8a:1a:f7:
42:cf:70:ff:34:db:b4:36:72:be:8f:ab:bd:1a:8b:
00:40:0e:b1:99:c4:2e:64:b8:13:f3:66:3f:12:60:
a0:1d:57:0f:af:db:ad:29:48:5c:3e:3b:b4:2d:8a:
34:10:de:20:27:b2:13:37:88:06:97:bc:41:34:b2:
0f:11:d4:b6:5f:d1:e1:d0:53:06:ea:14:5f:26:84:
46:02:19:af:7c:69:15:83:a1:13:a7:e8:6b:10:2b:
74:7f:2d:75:50:9a:0c:ce:3f:3a:60:bc:60:a6:7b:
9e:b9:5b:27:81:29:0a:0b:d3:e1:5d:51:fb:94:8d:
53:f9:5f:99:8b:25:58:41:50:29:93:d3:69:ae:a9:
c0:70:54:96:70:02:d6:69:1c:43:c6:57:65:f8:7f:
22:a6:a3:cc:d8:70:e6:e7:6f:8a:03:53:ab:c4:ad:
b8:ef:66:8b:c6:61:70:38:ee:fd:2e:ef:b4:46:64:
fe:10:17:70:4e:c9:b4:8b:d7:7e:7e:b6:12:eb:3d:
c0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B0:7A:79:77:BE:75:31:3B:F0:4B:57:CA:51:98:C1:69:37:7C:1B
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ed:49:d9:fd:a4:2f:a1:59:80:d9:31:7a:63:9f:bd:98:f8:
ad:84:f8:08:24:d7:c2:0f:a7:67:ff:21:57:b6:67:9d:51:22:
f6:80:42:be:83:cb:91:24:95:de:46:70:0a:c6:d7:6b:b3:45:
16:0f:ab:b2:58:71:fc:68:a0:c5:2d:34:e3:cb:38:39:cd:41:
1c:dd:74:6e:30:59:f9:3b:0c:45:0b:57:fe:35:44:d2:18:c5:
b3:46:bb:f5:18:b0:f5:72:74:d9:e5:58:31:51:a9:43:6a:15:
db:05:27:c9:fe:c9:aa:b3:f4:49:d3:f2:23:82:25:5b:80:72:
4c:b4:45:ce:32:dd:07:08:f3:f9:ab:d8:6c:b9:b5:4a:e0:c5:
40:c3:39:80:8b:5c:1b:06:bd:21:01:30:85:60:4c:a3:da:99:
90:18:1f:9d:f0:e7:99:ca:64:5d:1e:6e:14:97:a5:6c:f7:28:
f8:48:c1:d3:46:d1:e7:66:fc:c5:e9:60:f1:16:65:ea:98:6b:
1c:3c:d4:1c:5d:b1:f4:ae:45:70:b1:db:ec:fc:74:45:8e:a9:
0f:4b:61:40:55:91:8e:22:41:3d:b0:84:bc:ae:51:0e:8e:24:
13:c8:f7:be:b8:59:1b:99:4b:3f:c9:55:3a:af:6d:a4:12:a8:
e2:3e:91:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:33:04 2026 by rpki-client