Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: lXkzF3W0CebIAy/Ji5wAEUskasRWxFoNdBU4ISowivU=
Subject key identifier: AB:82:55:FB:2D:E4:FF:73:E0:D0:5F:D7:76:57:E0:0E:6A:05:CE:BE
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 01A0C5C52E020BD1DBFBE837F6E802C4EE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 19AC
Signing time: Mon 21 Sep 2026 21:00:28 +0000
Manifest this update: Mon 21 Sep 2026 21:00:28 +0000
Manifest next update: Tue 22 Sep 2026 21:00:28 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: t/Jc/Q8FaV3eqF4jph63accmkITb+daesL7bwj/DfEU=)
2: MzCZNjdBmMG-S9j61yIRLE51zQU.roa (hash: /f1l2aBevU/UCCB1M8fW5aBOaUCeB8ylNLs+oJQ9huU=)
3: uAumN_d_Q_yun5QzcR-UbXWPBU8.roa (hash: YEbqonGNno7TcnGdoHF66lGtgeHYIPwdSCSN8qlpAMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:2e:02:0b:d1:db:fb:e8:37:f6:e8:02:c4:ee:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Sep 21 21:00:28 2026 GMT
Not After : Sep 22 21:00:28 2026 GMT
Subject: CN=ab8255fb2de4ff73e0d05fd77657e00e6a05cebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1c:06:cb:1c:e4:74:a0:93:47:ef:ad:0f:dd:
eb:fe:dc:2d:1b:94:9b:8d:b5:4a:60:fc:38:ad:df:
84:f7:d3:bf:3e:4d:bf:a7:12:80:63:1c:4e:27:eb:
15:94:b1:dc:a2:c4:6a:2e:db:86:01:0b:fb:de:ea:
46:e1:c1:d3:39:0a:4b:f9:22:ab:91:51:7b:04:24:
d5:69:04:ea:e5:bb:d8:18:f3:5c:42:38:cb:56:7e:
d9:4f:be:17:c3:7f:0d:c7:7d:b0:ac:e5:15:9e:bb:
2d:4c:9f:a8:82:43:d9:f7:8b:05:ba:db:f1:2c:48:
20:d3:14:7b:2f:ab:48:e0:20:9b:f9:7e:82:5a:16:
a4:d2:fa:44:37:64:dc:dd:50:d0:74:a7:d2:e1:ab:
ad:0e:02:0f:3a:78:79:be:5e:08:d9:9f:36:ee:c0:
44:91:67:c9:8e:e7:05:26:d2:ef:e6:ee:73:85:b8:
0a:57:8b:7c:b1:d0:81:c9:66:84:4f:da:2e:24:00:
b1:d8:da:ac:37:2d:c4:d7:ad:db:e1:4f:4d:58:92:
02:01:a9:ea:35:af:4a:c2:4c:4b:3b:ee:11:94:07:
40:e9:25:10:32:ca:b5:23:83:5a:65:bf:dd:16:66:
33:b3:dc:18:a8:c4:24:36:ee:78:ad:e7:12:20:ef:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:82:55:FB:2D:E4:FF:73:E0:D0:5F:D7:76:57:E0:0E:6A:05:CE:BE
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2c:dc:82:f1:98:07:fd:57:1f:12:67:07:db:e1:57:06:18:
4d:0d:42:c2:6f:fa:7d:38:2e:d8:81:cc:f5:9c:ae:4e:d1:9f:
b1:0b:0b:d8:a9:d7:80:24:56:9e:ea:c8:67:24:64:33:37:86:
1b:84:c4:a4:10:95:fa:21:46:6f:97:64:3e:ab:d7:89:79:39:
8e:d8:d9:a1:81:1a:3e:73:0c:b1:91:ec:be:fb:d6:18:6e:7a:
fe:1d:85:64:e3:23:84:84:c6:a5:aa:b4:8b:f9:6c:06:4b:52:
01:7d:43:5f:a6:2d:72:7d:07:f8:0f:39:f8:43:80:7a:6c:63:
50:7f:27:1e:0c:18:1b:46:e5:fb:4b:7b:d4:11:95:d1:3c:30:
36:f9:17:0d:ba:04:e9:a4:a7:43:10:9f:92:55:bc:7d:1b:ff:
71:45:56:56:38:95:43:cb:ae:71:cc:12:af:ed:e8:c3:bb:a1:
aa:0f:4f:9a:ba:3d:e0:b3:bf:52:49:d6:30:6b:f7:26:b6:06:
96:1c:c9:c5:b4:74:ee:77:ca:1f:31:a6:90:ce:fe:ab:40:36:
bf:40:c7:d8:f5:f0:12:b3:f5:8f:8d:60:be:ff:e5:a2:3a:2d:
85:d4:ba:c7:19:3b:43:f8:72:e5:80:93:67:73:cb:37:36:8b:
ee:e5:7b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:10:06 2026 by rpki-client