Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: SX2IfzEw5slRnjuibKcS55IVOWQ7p+fUjl+cWshr1Uk=
Subject key identifier: FF:A6:5C:30:96:89:27:2C:89:DD:2D:58:02:5B:D0:18:B7:01:79:0E
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 019FA9E31D2538A8C886DE1FBBE964415743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 1919
Signing time: Tue 28 Jul 2026 18:01:01 +0000
Manifest this update: Tue 28 Jul 2026 18:01:01 +0000
Manifest next update: Wed 29 Jul 2026 18:01:01 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: JMAyt6IscGzJOuKuNdwMlHGb2ihre0fUHamrsXi3cm0=)
2: MzCZNjdBmMG-S9j61yIRLE51zQU.roa (hash: /f1l2aBevU/UCCB1M8fW5aBOaUCeB8ylNLs+oJQ9huU=)
3: uAumN_d_Q_yun5QzcR-UbXWPBU8.roa (hash: YEbqonGNno7TcnGdoHF66lGtgeHYIPwdSCSN8qlpAMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:1d:25:38:a8:c8:86:de:1f:bb:e9:64:41:57:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Jul 28 18:01:01 2026 GMT
Not After : Jul 29 18:01:01 2026 GMT
Subject: CN=ffa65c309689272c89dd2d58025bd018b701790e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:9f:08:48:f3:1a:5d:18:b6:a5:2b:10:92:
54:8c:c7:fb:d2:7f:6a:1f:9c:90:f0:d7:a8:63:16:
44:bb:d6:1a:71:55:cb:d6:af:f7:5f:4f:9e:1d:6d:
0b:c7:04:e4:b9:c7:8e:40:db:4a:ab:79:fe:8b:19:
ff:8a:00:5d:1a:96:3c:b8:a2:3f:68:e1:6c:1b:73:
08:8c:07:4d:c9:dd:ea:07:38:21:15:a7:a2:03:fe:
07:6c:e0:31:82:b1:a6:a3:6c:2b:d5:98:6a:cf:eb:
f8:6a:33:ce:6e:46:27:b6:b5:63:f1:b3:82:f7:b3:
e8:2b:f0:c8:ec:3b:0f:dc:6c:d3:71:f8:19:b9:34:
45:67:ff:92:05:4e:e1:81:34:50:05:bd:ea:45:b5:
37:19:04:48:4f:f4:f2:37:32:c6:0e:82:22:5d:7d:
83:8e:ef:40:68:f7:fb:bc:1f:d8:65:e6:19:b7:14:
ce:8f:12:2e:38:8d:f0:ae:ad:36:0f:58:49:f9:01:
f9:73:54:79:55:7a:b3:6b:1e:ac:9b:ea:b2:97:ed:
c9:62:d6:59:b8:3d:d2:9a:73:e4:3b:1c:26:7a:ac:
51:99:67:68:4c:0e:19:09:6d:45:d3:db:11:ce:14:
bd:e6:81:68:1e:d2:23:2e:d7:1a:01:9b:c8:c8:88:
6c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A6:5C:30:96:89:27:2C:89:DD:2D:58:02:5B:D0:18:B7:01:79:0E
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d0:ae:31:aa:e2:e2:9f:c1:93:6f:6b:98:ae:e1:45:99:74:
73:92:80:55:d5:a2:33:3a:ec:42:70:18:c0:23:cb:58:2e:81:
5f:73:16:d3:fb:02:d4:a2:d8:64:1c:9f:49:0f:5e:c7:8e:4b:
f1:dc:d4:1b:15:41:ed:99:91:ce:ed:7c:1a:c5:c1:c1:6d:2b:
a0:7f:13:37:95:80:4d:a7:97:0d:a7:20:ec:f5:96:a3:59:60:
87:6f:b0:66:c9:fa:ad:9b:7b:b5:dd:ce:d6:a3:b1:81:27:b7:
06:ca:b2:36:72:2d:a9:26:7f:d3:e0:70:81:14:35:2e:0f:19:
76:a1:fc:57:88:ce:f6:f3:56:3d:de:72:6a:67:8c:aa:c5:bf:
6f:b4:c1:b9:1e:20:5a:59:04:1e:2d:24:7a:90:7e:80:f3:3e:
c5:77:55:e8:40:40:58:fe:b2:c0:68:bf:85:a1:39:2d:dd:bd:
ac:77:80:c1:56:c1:b7:c9:1e:ff:bd:0a:99:cd:ab:a2:40:78:
e4:1c:b1:63:ed:0d:65:33:c6:84:03:99:be:d1:a0:27:70:cd:
90:d3:a9:db:7a:4d:c2:bf:6e:91:22:5b:a1:4c:a2:d6:3a:bd:
1c:04:2b:38:67:2d:bf:69:2a:ed:ab:c9:29:60:f5:14:ef:e4:
e7:83:c1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:22:22 2026 by rpki-client