Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: Esz/ToKMHO4hpPmrNVAm0zKlOJDrb4x8g066p9SH7fM=
Subject key identifier: 6B:EF:73:A0:B5:15:F8:4E:2D:77:C6:17:FA:5B:2F:92:93:50:BC:21
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 019DA34152B7FA968AEA8DE4A99555AA3023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 12FD
Signing time: Sun 19 Apr 2026 01:01:00 +0000
Manifest this update: Sun 19 Apr 2026 01:01:00 +0000
Manifest next update: Mon 20 Apr 2026 01:01:00 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: dAf1qpBv7CxEESFBkh8c/kK/LmvIf44YQPB680Yvqdw=)
2: K7kf19E8RqOIuQDE1HXceZnfBS4.roa (hash: qUFiFBy2dkZP8rGX/6QQZpm3Sx7bmtP7VKzuR3jDVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:52:b7:fa:96:8a:ea:8d:e4:a9:95:55:aa:30:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Apr 19 01:01:00 2026 GMT
Not After : Apr 20 01:01:00 2026 GMT
Subject: CN=6bef73a0b515f84e2d77c617fa5b2f929350bc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:cc:03:0a:20:43:af:3e:93:0d:f4:b5:cc:
50:78:4d:0f:c6:dd:c7:42:57:29:88:f9:ea:8f:e2:
0d:45:41:d5:c6:73:fa:9c:93:65:9d:3b:d7:1d:04:
7e:e5:a3:4e:6c:ad:c5:14:40:ad:a1:47:22:c3:c2:
51:64:59:9a:0d:3e:26:ce:14:a1:56:b8:f2:9f:c4:
a7:d7:65:c0:e4:46:84:0f:20:bf:0a:d2:53:ab:1d:
a7:fd:7d:6e:9d:dd:09:cc:22:9a:40:0e:b5:66:08:
9b:2c:e5:3b:83:5c:85:83:fb:70:0f:45:5a:36:bd:
78:42:f6:76:27:ff:d4:73:47:0a:1e:57:a5:08:71:
e8:07:7c:f9:e3:df:db:44:e2:62:2c:88:6f:3d:b4:
d3:a3:16:c5:94:a9:73:50:35:8d:11:a6:cf:79:20:
a8:35:89:2e:5e:d8:88:8f:37:49:45:85:6a:de:f4:
41:41:38:ef:d4:08:47:4f:2c:3e:79:82:5d:33:3c:
dd:00:11:ec:0f:ae:89:e6:f4:2c:ab:ae:d8:4b:97:
ab:0e:2d:3c:d8:8a:79:6d:4e:16:1b:00:63:2d:e2:
fa:15:43:00:8e:8e:05:e7:80:2f:12:9d:a8:5f:b1:
80:f4:69:f1:0f:a8:78:6d:77:7e:be:51:a2:dd:1f:
42:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EF:73:A0:B5:15:F8:4E:2D:77:C6:17:FA:5B:2F:92:93:50:BC:21
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ce:64:46:0c:61:84:9c:0d:bb:5f:be:71:a1:21:4f:49:16:
31:50:69:40:a8:19:ea:79:5d:2d:0f:92:76:07:f7:12:9f:5c:
c9:ff:85:00:fe:45:75:ce:55:21:12:f4:3f:04:95:26:9a:d2:
f9:ca:7e:2c:70:eb:3c:ac:ed:bf:29:e5:b9:61:59:03:3c:1b:
fd:ac:15:6e:93:cd:f8:3f:3d:4c:4b:21:97:14:fb:04:8c:38:
40:7e:08:78:1c:41:37:3d:64:ef:93:56:6d:67:b8:44:7b:af:
74:4f:fb:2c:7b:02:c9:90:5e:51:e7:9a:ba:14:a5:7d:56:16:
cd:e5:6f:77:3b:e4:40:54:66:a4:bd:cc:d2:a7:dc:f6:77:3b:
b0:38:d9:46:f0:69:61:7c:10:07:79:50:aa:87:40:7b:c9:f6:
07:76:c6:30:b6:2a:0f:14:78:48:ba:de:82:48:d4:7a:d3:3b:
70:66:ab:ca:98:3a:48:c7:cd:6d:65:f5:15:7f:a3:d1:c9:00:
88:90:11:5f:d7:a4:ae:92:05:7a:a0:b9:82:d6:45:0c:11:e2:
b4:5a:41:79:1f:c4:b9:47:31:73:ca:97:ef:b6:ce:b2:ac:93:
56:ee:2b:39:36:67:f1:62:62:77:7e:28:4c:3f:00:77:14:61:
34:c7:74:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:28 2026 by rpki-client