Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: ApiG8yTd55aGxk9CTVCiWPpGbPHC/DGJmNAUD/9dzQ4=
Subject key identifier: 96:5E:E5:F8:2D:69:D5:94:26:55:2E:9A:11:B1:35:B9:3C:76:68:27
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 019FA8D0139F56B1EB86BC80FAC12068F708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 1409
Signing time: Tue 28 Jul 2026 13:00:36 +0000
Manifest this update: Tue 28 Jul 2026 13:00:36 +0000
Manifest next update: Wed 29 Jul 2026 13:00:36 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: M6fb37lEIEhO0uuuNPpjpuyOYv67SdUABfD8qkMbHqI=)
2: K7kf19E8RqOIuQDE1HXceZnfBS4.roa (hash: qUFiFBy2dkZP8rGX/6QQZpm3Sx7bmtP7VKzuR3jDVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:13:9f:56:b1:eb:86:bc:80:fa:c1:20:68:f7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Jul 28 13:00:36 2026 GMT
Not After : Jul 29 13:00:36 2026 GMT
Subject: CN=965ee5f82d69d59426552e9a11b135b93c766827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:9c:ab:0f:d4:ca:52:c3:fd:80:77:a1:61:
90:e0:2f:8a:b1:3e:ac:be:96:bc:3c:77:09:a3:43:
17:8e:da:70:66:f0:25:9c:f7:67:9c:0b:d3:f8:52:
01:d2:8a:22:88:8c:d2:c1:cb:a5:0f:e8:e6:57:b1:
d4:cc:40:58:73:59:52:0b:1e:90:fd:54:a9:d1:56:
77:73:af:26:4e:80:8e:d8:71:86:90:b1:9a:d5:4a:
4a:02:b0:9f:60:97:8f:87:db:80:37:69:6b:80:41:
6d:b0:6d:02:1a:43:e4:b6:6a:36:38:cf:b9:75:05:
ba:69:9d:35:24:a6:8d:32:27:52:14:29:e5:7f:76:
b8:7d:03:27:b7:b9:a3:35:8d:07:45:23:4b:16:b8:
6b:3b:a7:2d:f2:66:1b:8a:3d:9d:63:be:3b:56:5a:
79:5f:04:e8:b1:66:4f:ad:92:45:1a:a9:d9:47:f3:
ac:d5:42:bc:9c:8a:b6:df:bd:29:7b:3d:6d:be:40:
c4:56:dd:ae:dd:37:35:26:a1:23:93:08:21:e6:02:
22:eb:5e:56:ae:d0:5a:4b:c4:be:96:c4:80:66:24:
62:5a:90:04:a4:18:e0:e9:fb:9c:48:02:4d:19:ed:
52:17:c5:6c:33:14:30:a1:2c:07:32:41:f5:12:fd:
55:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5E:E5:F8:2D:69:D5:94:26:55:2E:9A:11:B1:35:B9:3C:76:68:27
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e6:da:29:cb:ff:d5:8a:3b:84:ad:5f:86:71:02:d9:2c:a7:
10:27:4e:e5:90:3b:0d:69:41:59:9e:d4:00:5b:ef:6e:30:ba:
83:e0:3c:fe:fb:10:cd:72:23:6a:02:ba:d2:7c:8f:80:37:b9:
ad:97:ca:73:e9:e3:5e:09:38:f0:80:57:85:bd:05:d0:05:86:
b6:4f:35:a4:0e:ff:88:b2:e0:c1:00:ad:36:46:20:73:0f:c1:
43:ca:93:1e:d5:79:ec:f2:c0:2d:65:a2:49:d8:73:27:c1:85:
c1:df:ef:e9:c7:a5:89:61:cf:65:c4:a8:95:d8:86:0e:6f:24:
8b:f2:cb:68:62:cb:90:a0:a8:e0:5b:62:e7:ba:31:1d:5a:e9:
91:b0:4c:c3:1b:2b:1a:ba:00:c0:4f:19:19:20:1a:fa:e3:13:
99:b4:d2:9b:73:01:91:4b:70:bd:91:5e:03:d1:34:3a:ad:00:
db:b6:e0:fc:87:6e:b9:9c:39:eb:e7:e6:31:e4:f7:6c:af:3b:
2d:be:16:43:57:d1:cf:24:18:ec:42:68:af:7e:5a:fd:ca:cd:
11:4a:dd:35:b8:81:d7:bd:5e:2b:34:f0:fb:39:ee:2b:0c:23:
ae:c4:03:b7:b7:85:ae:93:f7:f1:e7:f7:de:c0:e8:63:34:5e:
25:19:c9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:04:43 2026 by rpki-client