Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
File: BjDTqdwDknrlWoHYbKkb3J7nTHM.mft (raw, json)
Hash identifier: Zfa9Q1J/UNSBR2UCuFzyor+1HoBHB8HBA5Xo8fBKz8U=
Subject key identifier: E6:82:25:B9:59:5D:27:42:58:2A:EC:0C:8C:FB:04:17:1B:65:13:9B
Authority key identifier: 06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
Certificate issuer: /CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Certificate serial: 019D9A3E290304B9E99916CD5F598EB4A402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
Manifest number: 159C
Signing time: Fri 17 Apr 2026 07:00:57 +0000
Manifest this update: Fri 17 Apr 2026 07:00:57 +0000
Manifest next update: Sat 18 Apr 2026 07:00:57 +0000
Files and hashes: 1: BjDTqdwDknrlWoHYbKkb3J7nTHM.crl (hash: s6oyA0uNaX+xxjwWQRRkPGTbW5J593cgHYQeKJskS5A=)
2: WG28MJ6GfBcScCKqRDEvob91T1k.roa (hash: 6xxB8aNVMWtEKkp4uvdHGR25LDD6UpDdJnexnLea70w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:29:03:04:b9:e9:99:16:cd:5f:59:8e:b4:a4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73
Validity
Not Before: Apr 17 07:00:57 2026 GMT
Not After : Apr 18 07:00:57 2026 GMT
Subject: CN=e68225b9595d2742582aec0c8cfb04171b65139b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:98:dc:51:e1:9b:05:a7:db:61:74:e1:83:
50:b0:32:fa:be:e6:bc:87:9e:da:cd:65:f9:0d:3c:
f7:c8:44:2e:6e:03:7b:c0:63:d5:89:94:b3:19:4d:
94:e8:e4:b9:dc:e3:08:93:49:4e:49:49:ef:32:18:
11:89:6a:77:86:57:35:6a:89:fb:11:11:39:0e:bc:
37:1d:d5:0e:7b:f2:66:99:b7:78:f2:9c:04:18:c0:
40:b6:3a:32:73:27:91:06:86:60:42:7c:ef:5d:6b:
58:58:d4:48:3e:6a:e5:0f:99:bd:3b:4f:38:da:6f:
d1:e5:e2:e0:4c:ed:0e:fb:76:5c:2d:bd:99:53:b0:
ef:68:36:e2:5d:91:de:2c:8a:44:08:aa:75:9f:0c:
de:0f:3c:1e:85:a0:89:22:18:d6:ee:95:e3:31:3b:
64:ad:1d:00:e1:ee:de:0d:6c:cb:96:dc:bf:cf:ef:
56:68:72:00:81:ba:09:2a:4d:92:c8:78:8d:e6:04:
ab:39:85:8a:84:2d:79:b9:db:15:36:0e:b3:c4:70:
7c:74:91:6c:fe:1e:e0:d7:dd:a2:52:6b:1a:09:9c:
e6:f0:0e:f5:cc:1f:8c:72:33:cc:c5:2a:8e:77:b2:
06:cc:0a:45:40:3b:31:7e:0f:f0:8d:8c:a2:14:4d:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:82:25:B9:59:5D:27:42:58:2A:EC:0C:8C:FB:04:17:1B:65:13:9B
X509v3 Authority Key Identifier:
keyid:06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4a:9e:c7:5b:21:07:d2:23:e4:ef:71:fb:ff:83:ba:fa:4f:
a0:4d:0a:d8:d0:0b:99:e6:ab:3f:b7:39:f2:0b:dd:3b:a8:51:
06:9a:3c:00:6a:b9:8d:5b:64:20:8b:f8:9e:e2:bc:e0:d8:28:
ae:6b:e6:dc:e1:55:c4:3c:cc:30:d9:42:82:b2:0f:9f:81:93:
03:f4:37:ea:fd:5f:a7:97:4d:ed:89:61:95:ff:81:de:26:f3:
d5:e5:ee:ec:f8:bd:28:1e:ed:fc:6a:68:65:f9:15:d3:33:4c:
22:b5:9d:a2:bd:2c:19:1c:ed:dd:a3:d5:de:bb:6d:3a:82:f3:
f1:9e:01:db:0a:be:9c:8a:60:6e:b9:52:74:aa:bc:9b:bc:6a:
39:6d:25:cb:88:ea:ce:23:c3:d3:e6:21:ca:98:36:53:8b:5f:
cb:b4:81:1b:07:f6:39:27:80:59:98:a0:9e:e1:fd:7f:0e:c2:
10:d5:7b:7d:33:7a:9d:75:8b:96:ec:20:c3:b9:cb:1d:b7:ea:
ee:72:7b:e6:39:ab:95:d7:b4:6d:27:70:e5:11:d1:6b:b8:a5:
8e:e4:92:2c:94:46:1a:23:46:ff:fe:16:2d:d7:97:c3:bb:94:
b5:7f:84:16:cf:ce:9c:cb:20:10:6d:b8:0e:28:4f:e4:8b:cc:
d1:d0:47:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPikDBLnpmRbNX1mOtKQCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MzBkM2E5ZGMwMzkyN2FlNTVhODFkODZjYTkxYmRjOWVl
NzRjNzMwHhcNMjYwNDE3MDcwMDU3WhcNMjYwNDE4MDcwMDU3WjAzMTEwLwYDVQQD
EyhlNjgyMjViOTU5NWQyNzQyNTgyYWVjMGM4Y2ZiMDQxNzFiNjUxMzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFqY3FHhmwWn22F04YNQsDL6vua8
h57azWX5DTz3yEQubgN7wGPViZSzGU2U6OS53OMIk0lOSUnvMhgRiWp3hlc1aon7
ERE5Drw3HdUOe/Jmmbd48pwEGMBAtjoycyeRBoZgQnzvXWtYWNRIPmrlD5m9O084
2m/R5eLgTO0O+3ZcLb2ZU7DvaDbiXZHeLIpECKp1nwzeDzwehaCJIhjW7pXjMTtk
rR0A4e7eDWzLlty/z+9WaHIAgboJKk2SyHiN5gSrOYWKhC15udsVNg6zxHB8dJFs
/h7g192iUmsaCZzm8A71zB+McjPMxSqOd7IGzApFQDsxfg/wjYyiFE2D9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOaCJblZXSdCWCrsDIz7BBcbZRObMB8GA1UdIwQY
MBaAFAYw06ncA5J65VqB2GypG9ye50xzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmpEVHFkd0RrbnJsV29IWWJLa2IzSjduVEhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wZThkNzMtNTlkYS00MzRlLTk5ZmIt
YzNmNGQxMTI3NGQ0LzEvQmpEVHFkd0RrbnJsV29IWWJLa2IzSjduVEhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8wZThkNzMtNTlkYS00MzRlLTk5ZmItYzNmNGQxMTI3NGQ0
LzEvQmpEVHFkd0RrbnJsV29IWWJLa2IzSjduVEhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUqex1sh
B9Ij5O9x+/+DuvpPoE0K2NALmearP7c58gvdO6hRBpo8AGq5jVtkIIv4nuK84Ngo
rmvm3OFVxDzMMNlCgrIPn4GTA/Q36v1fp5dN7Ylhlf+B3ibz1eXu7Pi9KB7t/Gpo
ZfkV0zNMIrWdor0sGRzt3aPV3rttOoLz8Z4B2wq+nIpgbrlSdKq8m7xqOW0ly4jq
ziPD0+Yhypg2U4tfy7SBGwf2OSeAWZignuH9fw7CENV7fTN6nXWLluwgw7nLHbfq
7nJ75jmrlde0bSdw5RHRa7iljuSSLJRGGiNG//4WLdeXw7uUtX+EFs/OnMsgEG24
DihP5IvM0dBHuQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:11 2026 by rpki-client