Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: XPgL4kDRQyNANWyd5diRDF0Z+3lnA41F8zp1GQ+c23g=
Subject key identifier: 66:2C:CB:B6:04:18:19:18:40:FB:69:93:D7:6D:FE:7F:E0:68:28:26
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 019CAA21BB158172026F84544FE919D4FC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 127C
Signing time: Sun 01 Mar 2026 16:01:03 +0000
Manifest this update: Sun 01 Mar 2026 16:01:03 +0000
Manifest next update: Mon 02 Mar 2026 16:01:03 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: +2jwly7D+U92f79Kui5bHsW+S/4XGh7k+sFG+UbR9UI=)
2: K7kf19E8RqOIuQDE1HXceZnfBS4.roa (hash: qUFiFBy2dkZP8rGX/6QQZpm3Sx7bmtP7VKzuR3jDVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:bb:15:81:72:02:6f:84:54:4f:e9:19:d4:fc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Mar 1 16:01:03 2026 GMT
Not After : Mar 2 16:01:03 2026 GMT
Subject: CN=662ccbb60418191840fb6993d76dfe7fe0682826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:81:a8:ab:19:06:4a:08:fe:dd:13:d5:c7:
f7:7f:a3:af:3f:5a:d2:d9:c6:99:52:4a:ce:f1:a9:
ab:5f:9d:51:13:9a:46:c3:82:3d:b4:1f:b8:31:3e:
bb:eb:e2:a1:03:98:97:3b:b2:74:a8:46:3c:57:78:
a8:1a:69:d7:33:34:53:1c:40:2f:ee:ba:1a:ea:99:
23:72:46:a2:96:05:b5:cd:dc:5b:b2:20:9d:e8:36:
ad:ea:63:97:b3:a0:39:f4:1d:ab:4f:2d:9e:f5:b9:
ef:b7:3a:d0:e8:2c:00:f0:98:ce:7c:c4:0d:aa:92:
ee:c4:47:5f:c9:91:57:4e:6a:6d:2e:9c:b9:e0:45:
e3:24:34:6b:63:31:bf:af:73:e3:7a:e8:38:e6:7f:
94:89:76:ae:63:62:ec:f9:15:37:60:68:fe:75:3a:
9e:7e:63:6c:1c:90:03:dd:21:95:06:08:19:d2:22:
a7:88:c6:b4:1a:17:cc:d9:84:16:6f:50:7b:3c:e2:
2c:36:73:d1:ba:38:6c:e3:ee:5a:32:11:b7:0b:50:
d8:5e:01:c0:63:6b:c6:c7:35:b2:29:89:6a:a9:bf:
4a:60:f0:2a:72:35:90:4d:43:7e:45:b6:a5:7d:17:
07:ea:19:ca:47:e2:5f:2b:f5:a1:22:be:d6:4b:08:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2C:CB:B6:04:18:19:18:40:FB:69:93:D7:6D:FE:7F:E0:68:28:26
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:60:d3:85:e2:3f:a6:54:47:ad:8b:c9:7a:4e:5a:a8:bc:a1:
9d:e0:fd:34:ab:e1:0f:f0:fe:39:e3:09:6e:79:61:fb:e0:be:
bf:7a:52:3a:b9:34:fc:da:c3:97:f8:d3:0b:c6:f2:99:db:73:
97:28:4a:7e:4f:b2:0a:2c:57:4e:22:ae:a3:a1:c0:23:71:dd:
8e:0c:d0:0a:bb:cc:b0:39:bb:55:b0:a1:65:f5:86:08:c3:46:
9a:e6:d4:2f:0b:a2:2d:17:93:e6:e9:e4:5c:0a:8a:5b:26:d5:
79:6a:b2:29:4a:0c:69:9c:7e:45:95:96:fc:b9:6e:03:68:c7:
1a:a2:8e:83:e1:3b:f9:1f:d9:9f:f3:20:05:0d:df:a0:69:83:
d3:e5:85:b4:94:26:6c:ac:a5:3a:f1:5f:69:e2:84:69:77:b2:
2e:4d:63:0a:cb:40:2f:a8:ff:79:40:8b:18:fb:91:63:f4:04:
92:fc:e7:37:5a:0a:b1:07:1a:9d:7b:91:bb:fb:ff:44:2c:00:
9f:42:c0:0e:d9:f8:a5:c3:84:d3:1e:2f:c3:0b:43:74:87:d0:
41:5b:ed:b2:41:c1:21:44:6a:18:c6:48:df:e5:d7:4f:7a:76:
ae:48:21:c2:03:0d:c9:b5:da:cb:8e:52:d3:02:cb:c5:3e:5e:
fe:08:6d:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIbsVgXICb4RUT+kZ1PwaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MzI1NDIyMjFjYWVmNjQ0OGNjNTQ1MjE0ZTAwMDA3MWJk
NTZiODYwHhcNMjYwMzAxMTYwMTAzWhcNMjYwMzAyMTYwMTAzWjAzMTEwLwYDVQQD
Eyg2NjJjY2JiNjA0MTgxOTE4NDBmYjY5OTNkNzZkZmU3ZmUwNjgyODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSaBqKsZBkoI/t0T1cf3f6OvP1rS
2caZUkrO8amrX51RE5pGw4I9tB+4MT676+KhA5iXO7J0qEY8V3ioGmnXMzRTHEAv
7roa6pkjckailgW1zdxbsiCd6Dat6mOXs6A59B2rTy2e9bnvtzrQ6CwA8JjOfMQN
qpLuxEdfyZFXTmptLpy54EXjJDRrYzG/r3Pjeug45n+UiXauY2Ls+RU3YGj+dTqe
fmNsHJAD3SGVBggZ0iKniMa0GhfM2YQWb1B7POIsNnPRujhs4+5aMhG3C1DYXgHA
Y2vGxzWyKYlqqb9KYPAqcjWQTUN+RbalfRcH6hnKR+JfK/WhIr7WSwgwZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYsy7YEGBkYQPtpk9dt/n/gaCgmMB8GA1UdIwQY
MBaAFAYyVCIhyu9kSMxUUhTgAAcb1WuGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmpKVUlpSEs3MlJJekZSU0ZPQUFCeHZWYTRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy82YzVhYTEtNTg4MC00NjUxLTg1YTQt
YWZkM2JmNmJjNThjLzEvQmpKVUlpSEs3MlJJekZSU0ZPQUFCeHZWYTRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy82YzVhYTEtNTg4MC00NjUxLTg1YTQtYWZkM2JmNmJjNThj
LzEvQmpKVUlpSEs3MlJJekZSU0ZPQUFCeHZWYTRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmDTheI/
plRHrYvJek5aqLyhneD9NKvhD/D+OeMJbnlh++C+v3pSOrk0/NrDl/jTC8bymdtz
lyhKfk+yCixXTiKuo6HAI3HdjgzQCrvMsDm7VbChZfWGCMNGmubULwuiLReT5unk
XAqKWybVeWqyKUoMaZx+RZWW/LluA2jHGqKOg+E7+R/Zn/MgBQ3foGmD0+WFtJQm
bKylOvFfaeKEaXeyLk1jCstAL6j/eUCLGPuRY/QEkvznN1oKsQcanXuRu/v/RCwA
n0LADtn4pcOE0x4vwwtDdIfQQVvtskHBIURqGMZI3+XXT3p2rkghwgMNybXay45S
0wLLxT5e/ghtHw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:55 2026 by rpki-client