Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: CeRyG7CAB0Bdyx9BMznV4hJ8f7Bp49bcf1PC8Ofs64o=
Subject key identifier: F7:36:24:2D:E8:51:26:AA:F6:BB:03:3C:C2:CA:97:E6:DE:6C:42:F5
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 019EBE47F2314D1A4C1CEE044B759D6E7C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 189F
Signing time: Sat 13 Jun 2026 00:00:46 +0000
Manifest this update: Sat 13 Jun 2026 00:00:46 +0000
Manifest next update: Sun 14 Jun 2026 00:00:46 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: WTiWpvgP5zf1/V5b4QG8gqZRHGkJNtSkGtEVN/hZJGQ=)
2: MzCZNjdBmMG-S9j61yIRLE51zQU.roa (hash: /f1l2aBevU/UCCB1M8fW5aBOaUCeB8ylNLs+oJQ9huU=)
3: uAumN_d_Q_yun5QzcR-UbXWPBU8.roa (hash: YEbqonGNno7TcnGdoHF66lGtgeHYIPwdSCSN8qlpAMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:f2:31:4d:1a:4c:1c:ee:04:4b:75:9d:6e:7c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Jun 13 00:00:46 2026 GMT
Not After : Jun 14 00:00:46 2026 GMT
Subject: CN=f736242de85126aaf6bb033cc2ca97e6de6c42f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:21:6a:dd:70:25:44:d3:c6:64:79:5c:c0:fa:
63:6d:31:e1:e9:a8:73:34:1b:43:de:56:4a:ca:6a:
85:d7:12:c3:de:7c:f9:ce:b1:45:51:6f:1f:3a:94:
db:0a:8b:80:5e:c5:a2:37:a6:91:93:0e:95:23:50:
44:13:02:8a:2f:02:6c:07:19:54:a5:60:fe:ca:2c:
b1:e9:59:09:58:d4:05:7c:33:c7:0c:83:37:c9:2a:
42:0d:01:a2:8d:08:6c:08:e1:5b:94:a4:3c:82:82:
05:0f:7e:8b:f3:f6:8c:36:19:98:4a:cb:b9:90:fb:
59:c2:16:fe:e7:1c:d5:4d:83:b9:4a:b6:eb:53:3c:
9a:36:51:0e:6c:09:3f:96:24:1b:87:f6:ca:96:98:
e4:ed:f9:c6:e9:09:79:b5:59:e1:1c:82:cc:9a:94:
96:35:be:5f:6d:eb:40:02:0b:c3:35:aa:7e:ba:83:
62:96:84:2a:c1:3c:5f:de:b6:75:bd:2d:88:61:ae:
ed:9a:b6:10:6f:b3:50:45:e6:de:57:d7:3e:ae:c4:
a0:c6:b5:fc:47:97:6f:40:83:3c:76:52:f3:7d:91:
a4:7b:cf:08:53:4d:c0:55:f5:a2:c6:8d:11:ee:4d:
24:50:f4:8b:ca:3a:7e:69:66:ea:50:c3:36:65:6b:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:36:24:2D:E8:51:26:AA:F6:BB:03:3C:C2:CA:97:E6:DE:6C:42:F5
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:42:6c:d6:8e:74:83:da:36:7d:b5:0e:c2:5d:0b:48:3f:54:
82:0d:e5:1e:e0:f2:d6:f4:f5:5a:0a:7b:e7:74:33:5a:1f:a9:
de:93:df:d2:a8:18:af:e9:74:ca:c8:2a:f0:9e:fd:d4:96:cd:
6f:24:e0:95:f4:ba:c5:f1:96:04:9c:e6:8e:ae:2e:05:b2:c3:
2e:f8:76:8f:74:7d:58:30:66:ff:f8:73:46:2f:ea:8d:c2:71:
19:be:e0:24:17:c7:81:b3:f4:f9:0a:b3:06:f8:aa:94:7d:a8:
70:c8:0c:50:5b:31:2d:2f:e8:a0:06:c1:1a:85:09:1c:7f:12:
c0:ce:7e:ab:c7:7c:6e:07:0a:12:3c:58:50:13:2b:52:79:e9:
12:0d:75:e9:05:3d:aa:ed:10:8f:41:9e:dc:f0:10:44:c6:f5:
4a:18:0d:96:83:5a:55:d4:f3:86:f9:73:88:38:6f:9d:18:6c:
90:bb:b7:86:6d:75:55:38:5e:eb:78:7f:ef:b6:f0:73:09:26:
93:de:1f:4f:f5:77:21:a7:04:07:95:14:92:54:44:0b:6f:13:
dd:3a:02:37:0d:27:2f:80:d5:90:01:42:c7:70:45:ae:41:60:
3a:b0:a0:83:73:9c:dd:a5:da:29:c3:e9:b2:15:b0:bc:17:f5:
03:52:e2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:48 2026 by rpki-client