Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: O0bLyddDmIGWWG0cMCOm9bZatD//62vESmmx8v3wiS4=
Subject key identifier: 02:BA:CE:03:16:E4:8B:DD:D9:CE:34:37:7C:93:DA:19:B1:DC:31:C9
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 019D98BD8420C7F3C0B26D0BBECF85A7EB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 1807
Signing time: Fri 17 Apr 2026 00:00:50 +0000
Manifest this update: Fri 17 Apr 2026 00:00:50 +0000
Manifest next update: Sat 18 Apr 2026 00:00:50 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: KE23RjIESZalqIENw+Ym2HT7gn5bgdp8JjkG7dz/gzM=)
2: MzCZNjdBmMG-S9j61yIRLE51zQU.roa (hash: /f1l2aBevU/UCCB1M8fW5aBOaUCeB8ylNLs+oJQ9huU=)
3: uAumN_d_Q_yun5QzcR-UbXWPBU8.roa (hash: YEbqonGNno7TcnGdoHF66lGtgeHYIPwdSCSN8qlpAMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:84:20:c7:f3:c0:b2:6d:0b:be:cf:85:a7:eb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Apr 17 00:00:50 2026 GMT
Not After : Apr 18 00:00:50 2026 GMT
Subject: CN=02bace0316e48bddd9ce34377c93da19b1dc31c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:a3:fb:80:11:b5:09:11:42:a0:91:9a:22:
d3:c2:ae:86:7e:c0:9a:70:c6:f2:dd:96:d2:1c:2e:
0d:c7:75:cb:d5:6b:38:cc:c9:c7:9c:45:98:b5:fd:
d4:fb:3e:16:82:02:9d:2e:00:a2:2d:67:d9:ac:56:
92:20:2a:ff:40:db:9e:8c:c3:de:95:6d:96:70:75:
23:96:9a:f0:a5:62:ca:1c:1e:c1:99:15:3c:57:be:
83:47:72:42:3a:28:ad:0b:35:09:ca:a9:ab:ee:97:
e0:6e:d6:6a:17:98:e4:e8:24:30:96:2d:6a:9d:c0:
80:41:53:f2:8c:d7:48:30:76:8e:6a:28:d0:a1:d2:
60:25:fb:ca:68:8b:96:72:90:e4:c3:9b:da:8d:53:
81:5b:a6:63:26:02:a5:c0:94:14:49:a9:c6:06:c6:
73:18:97:7c:61:c1:a2:54:e3:ef:2c:56:ff:b0:20:
c5:5f:c5:f0:44:2c:a5:b2:9e:c2:b4:78:5d:4f:ae:
58:ed:d8:65:f2:d4:85:05:ac:25:c8:89:8a:36:a0:
43:88:c2:4e:94:81:43:92:ee:38:fc:48:3c:9f:4d:
a5:01:c0:fb:62:5c:9c:6e:0d:65:d0:ed:25:57:6c:
e7:ca:61:32:48:32:e1:f9:66:3f:df:29:f1:40:57:
ea:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BA:CE:03:16:E4:8B:DD:D9:CE:34:37:7C:93:DA:19:B1:DC:31:C9
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:32:29:ac:c8:6b:1b:4c:b2:6f:a5:67:d7:9d:50:52:5e:c9:
a8:41:a1:e3:be:e4:c4:93:16:d0:c6:8d:26:ee:ed:95:be:c5:
47:dd:a2:2a:d3:2f:c3:12:8e:7b:ae:27:79:9e:13:3d:6a:89:
fe:78:20:3b:b4:4b:d4:e6:de:72:29:74:62:15:52:9e:c5:47:
a8:b4:13:4c:df:d8:a0:9d:12:87:35:10:27:2d:25:b8:33:7c:
4e:d6:51:82:3b:3c:23:43:4e:83:dc:c0:26:4d:19:1d:01:77:
e7:01:10:da:32:80:c3:ff:6c:ce:70:fe:39:9c:1a:14:a0:61:
ab:bc:a1:9e:1f:ea:1d:39:2a:af:a5:50:0e:3d:b6:6b:2a:2e:
66:43:0d:00:58:fc:fc:4f:28:33:70:ab:fc:4c:8e:a4:90:64:
48:5b:15:75:59:a0:c3:d4:a7:0d:31:f0:d1:4e:00:b2:4c:84:
f7:d3:fa:aa:86:ba:59:e8:fb:23:fa:cc:e4:eb:67:83:80:e0:
74:bc:34:03:04:d0:8e:8e:7e:33:7b:68:f6:fe:4a:b6:f8:27:
00:3b:79:a6:ea:3c:b4:a3:af:db:74:e3:bd:d2:70:95:db:20:
66:2e:50:5a:f4:9f:6a:9d:2f:0e:9d:1e:41:43:52:31:9c:e4:
0c:09:7f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:04:05 2026 by rpki-client