Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
File: BjDTqdwDknrlWoHYbKkb3J7nTHM.mft (raw, json)
Hash identifier: Iu5+qLTWl7uB/Ww9SXs+hez2oC44qkJbT8U129c+jv4=
Subject key identifier: 17:47:A3:1D:6F:EC:73:86:49:A0:55:66:81:62:33:9D:71:A8:37:05
Authority key identifier: 06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
Certificate issuer: /CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Certificate serial: 019CACB4BE5D3D65AED3133589CE54274EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
Manifest number: 1521
Signing time: Mon 02 Mar 2026 04:00:52 +0000
Manifest this update: Mon 02 Mar 2026 04:00:52 +0000
Manifest next update: Tue 03 Mar 2026 04:00:52 +0000
Files and hashes: 1: BjDTqdwDknrlWoHYbKkb3J7nTHM.crl (hash: JQtm3GYkQqPU0zYV6lWBjW5xWOrNc8SuIUnHyTcDjF8=)
2: WG28MJ6GfBcScCKqRDEvob91T1k.roa (hash: 6xxB8aNVMWtEKkp4uvdHGR25LDD6UpDdJnexnLea70w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:be:5d:3d:65:ae:d3:13:35:89:ce:54:27:4e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Validity
Not Before: Mar 2 04:00:52 2026 GMT
Not After : Mar 3 04:00:52 2026 GMT
Subject: CN=1747a31d6fec738649a055668162339d71a83705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:bd:29:20:8b:a7:47:9a:0d:07:85:d5:19:
04:4f:46:36:39:c5:fa:4e:06:45:64:af:75:32:24:
8d:28:a7:b6:9e:d8:71:d9:38:50:cf:b8:f8:cb:bc:
d3:a8:34:9b:19:79:61:60:3c:24:3c:c5:ed:89:05:
01:c8:9b:73:a8:dd:dc:89:33:51:cd:2d:41:a4:ea:
f3:cb:d6:77:1b:cb:1f:47:65:8d:50:10:2f:15:82:
57:de:c6:ac:15:62:cf:8f:72:42:d6:27:8d:34:c2:
8d:cc:ef:04:2e:a6:49:e0:b2:4a:bd:69:5e:1e:b8:
59:cc:bd:03:ae:0c:58:b5:1d:70:a9:d9:30:67:69:
c7:79:2f:39:91:4a:39:88:d3:41:2f:f8:53:49:a1:
06:f4:35:c9:13:d3:f7:08:34:f4:59:8b:2b:2b:5d:
20:9b:a0:11:c6:5a:e2:78:53:f1:f5:41:fe:d6:60:
3f:24:7a:25:f4:68:e6:aa:de:05:e3:4f:26:a7:38:
7e:be:3e:25:45:c1:a2:b0:0a:e8:12:99:d5:0d:04:
6c:32:9f:c4:52:56:47:d9:42:03:7a:18:d7:72:66:
fd:a3:2a:44:f8:9a:91:57:64:51:8d:5a:8e:8e:da:
d9:91:27:44:22:68:01:be:31:0c:b3:b8:27:78:b8:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:47:A3:1D:6F:EC:73:86:49:A0:55:66:81:62:33:9D:71:A8:37:05
X509v3 Authority Key Identifier:
keyid:06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:52:76:56:9c:85:dc:3c:a1:9c:a7:1b:20:a1:7f:5c:05:2f:
d6:55:16:46:62:20:b8:ed:32:de:71:ef:81:7c:94:12:81:7d:
4a:ae:6f:48:7b:26:99:be:8a:de:23:27:6d:71:fc:aa:08:4b:
59:ef:ad:84:fa:09:63:75:68:65:15:26:14:37:a9:c0:54:d7:
53:4a:ac:3e:0f:57:3b:a6:f2:58:aa:2c:c7:65:34:ab:20:09:
fc:47:51:61:5b:7a:85:dc:bb:9d:e5:b1:a6:f6:cb:72:66:a6:
a4:68:9e:96:22:8c:07:17:67:92:66:75:89:0d:29:79:0b:ce:
76:c5:32:a5:a6:d4:0f:7c:23:40:85:c8:b1:b2:f4:94:df:25:
ec:0d:21:4c:0a:e3:27:e5:15:d0:fc:31:77:d6:d2:cc:ae:20:
7e:62:94:37:28:1d:26:3c:87:58:1a:f9:55:69:10:0e:33:87:
87:7f:64:fe:f8:71:b9:e3:01:89:9e:64:d6:8a:18:36:b3:77:
ed:2f:45:24:d6:b2:bd:8a:08:9f:51:c6:cf:75:92:df:2b:15:
71:f1:1f:ce:7d:b3:3e:87:a1:cd:32:f4:ea:ff:df:7f:e7:f6:
01:56:49:2f:eb:da:a3:2f:68:02:3f:83:8c:35:27:81:60:90:
5b:08:72:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:46 2026 by rpki-client