Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
File: BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json)
Hash identifier: nZWcyrD038NjZh7oN3cjrIYGpXh7DX90pJpjbO4wRss=
Subject key identifier: 1D:17:AE:14:F9:73:46:37:AE:48:FF:8A:3A:E5:C8:B8:3D:11:03:84
Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
Certificate issuer: /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Certificate serial: 019D99997F99AFDD05D1C1AE1C80C87266DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
Manifest number: 0E84
Signing time: Fri 17 Apr 2026 04:01:06 +0000
Manifest this update: Fri 17 Apr 2026 04:01:06 +0000
Manifest next update: Sat 18 Apr 2026 04:01:06 +0000
Files and hashes: 1: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: ETPOrv8pXvf8SnJewTkSHVNq2Rx/cx7sjw+8LOHAOJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:7f:99:af:dd:05:d1:c1:ae:1c:80:c8:72:66:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Validity
Not Before: Apr 17 04:01:06 2026 GMT
Not After : Apr 18 04:01:06 2026 GMT
Subject: CN=1d17ae14f9734637ae48ff8a3ae5c8b83d110384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:66:19:ab:c4:38:68:6c:1b:20:a3:41:ae:41:
c5:0a:60:23:ce:c1:bd:49:cb:29:ac:70:51:32:79:
ec:2f:34:c2:de:1a:3d:0f:6e:a5:51:fa:6e:4b:62:
d0:43:a2:c3:fa:af:0f:04:db:ac:f4:81:e1:89:d4:
51:be:a4:8d:7e:c5:80:95:33:ba:14:49:64:b4:66:
2f:a9:c4:13:9e:0c:c6:e3:47:e7:c9:7a:dd:3e:6b:
2e:bb:23:d5:ad:21:a8:c3:0b:b1:79:50:64:91:e0:
fa:56:f6:66:43:a0:21:a2:6d:40:da:af:9e:dc:bf:
43:2f:d3:93:b1:b0:0c:c0:98:39:51:55:ee:48:5a:
0c:0c:af:e1:5f:4e:b7:75:3a:53:f8:02:08:84:6a:
fd:fd:42:f9:90:80:75:76:bb:16:01:96:bd:53:e3:
f4:cb:14:62:3e:1a:f6:ff:1d:34:10:5d:3e:8d:ee:
04:d1:76:c5:08:77:e7:f1:f9:ac:4e:c6:0b:4a:5e:
32:7e:cd:79:51:dc:ce:13:dc:e4:6f:0a:aa:0a:a6:
7c:ac:dc:67:d0:e5:2c:4e:57:13:af:23:45:9e:2e:
21:5b:f3:78:79:79:23:50:3f:dd:19:7f:20:13:4e:
9d:51:bb:57:3e:90:7c:2d:86:ed:b8:8a:1a:a3:e0:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:17:AE:14:F9:73:46:37:AE:48:FF:8A:3A:E5:C8:B8:3D:11:03:84
X509v3 Authority Key Identifier:
keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ba:b3:ae:9b:41:df:87:b2:51:b3:8e:dd:da:e5:e0:8d:9b:
32:bb:4b:96:1e:5c:7e:c5:c3:db:88:fb:e6:fa:10:5b:66:f9:
57:b8:bc:e2:75:6f:a5:5e:06:27:f1:e6:4b:93:74:71:39:a4:
0e:b7:9d:10:f6:a6:6e:2c:e7:8b:d5:75:d9:26:dd:1e:3d:58:
97:11:84:4d:b4:ea:e4:b5:fc:ad:d6:90:fd:db:24:33:96:5c:
68:10:42:3b:2a:7d:e9:65:87:3f:1c:c5:25:36:63:ba:59:a5:
38:d4:00:13:d5:d5:e7:c2:35:28:56:4b:25:f8:c3:64:78:e8:
70:55:ff:c4:b1:b6:48:32:91:9e:7a:fa:ce:95:4a:20:7a:c9:
7b:8d:65:2c:ad:21:49:dd:87:96:53:b3:78:2f:1e:b4:be:3c:
99:41:d1:8d:9f:b3:ff:d1:5e:8a:a9:b4:fe:e8:c3:31:27:6b:
55:38:8d:5b:7e:09:83:4b:d1:d9:df:2d:5b:07:5a:7e:2b:fa:
c3:d4:db:19:e7:a7:f1:f7:a3:06:06:e4:b5:65:4a:2c:df:36:
40:4c:4f:66:af:f1:1f:47:3b:9e:f7:6e:56:c5:7f:58:a1:d4:
36:a9:e1:66:c3:33:7d:bf:8c:28:15:98:04:f9:44:f1:f0:aa:
37:1a:da:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:38 2026 by rpki-client