Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
File: BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json)
Hash identifier: 0TY0ahvrHxPiONF9e8Gra1vSo5pEB30rCrt1BLEacV4=
Subject key identifier: 70:FF:4F:09:A5:70:53:D9:6F:34:95:52:F3:FE:22:61:8D:26:1A:CD
Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
Certificate issuer: /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Certificate serial: 019FAABF173AC0FD6E4BF5B18DACE6E8C4BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
Manifest number: 0F96
Signing time: Tue 28 Jul 2026 22:01:17 +0000
Manifest this update: Tue 28 Jul 2026 22:01:17 +0000
Manifest next update: Wed 29 Jul 2026 22:01:17 +0000
Files and hashes: 1: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: FHelU/KSeqTpxm+3IwmmmsLzTKMAfXtKtdW/sUZKlcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:bf:17:3a:c0:fd:6e:4b:f5:b1:8d:ac:e6:e8:c4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Validity
Not Before: Jul 28 22:01:17 2026 GMT
Not After : Jul 29 22:01:17 2026 GMT
Subject: CN=70ff4f09a57053d96f349552f3fe22618d261acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d2:b8:a3:8e:40:b6:06:14:fc:3c:a3:5d:87:
73:72:c5:41:10:f9:6c:11:13:41:96:88:b5:6e:e0:
92:5c:0d:ad:94:a8:8e:9b:ba:e7:5a:8a:c0:23:f9:
60:8c:07:b1:75:0f:77:c7:28:96:1f:16:74:f7:65:
44:95:fe:02:8a:9e:c5:a0:1d:ba:98:b0:9b:43:88:
b1:8a:3c:62:93:f3:1e:fc:6e:75:a0:74:63:b0:87:
af:29:83:b1:90:31:46:1b:b6:8f:11:59:1c:29:8e:
2e:f6:a6:86:4d:54:58:87:aa:dc:7f:69:90:c4:86:
b4:7e:40:17:48:62:cd:2f:79:a5:ff:08:ec:40:f6:
28:7f:8b:57:b3:f5:4c:38:42:28:9c:c4:a0:29:0a:
eb:a0:42:ce:42:24:ba:f4:74:33:92:c6:8a:36:90:
fd:ff:41:07:2f:27:4f:b7:7b:88:f4:79:f4:17:0e:
8e:77:11:48:85:e3:99:b3:69:c8:c6:a4:b7:b3:d2:
80:2e:32:2a:57:2f:2d:73:c9:87:4c:1c:5a:65:35:
6e:57:c1:62:3e:4c:bf:c1:92:da:25:f5:87:9c:fd:
1a:8c:e1:ec:53:fb:74:38:23:4d:54:bb:74:64:f7:
1c:ab:df:62:8d:32:0e:1e:c3:49:55:49:be:85:a4:
aa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FF:4F:09:A5:70:53:D9:6F:34:95:52:F3:FE:22:61:8D:26:1A:CD
X509v3 Authority Key Identifier:
keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0f:3b:63:9b:1e:8b:b9:be:98:1f:51:2c:aa:2e:29:48:43:
2c:30:01:92:02:ff:23:ff:06:dd:5f:cc:9b:f8:59:d6:bc:83:
87:88:35:c3:9c:6c:ee:f5:1f:9e:3d:0f:98:07:e6:13:17:76:
62:5c:26:90:f7:69:cb:85:27:30:f9:07:dd:29:66:b3:13:df:
f0:00:4c:b3:8b:76:9f:f6:d4:9d:0a:36:b8:fc:ae:b0:70:77:
75:6c:65:10:8c:9f:1a:05:32:d9:57:1d:2b:5e:39:f0:31:9d:
a0:28:3e:8f:7f:ee:f2:3f:5d:1f:e4:e5:dc:87:c4:13:05:2c:
eb:e3:c3:01:29:e9:41:7c:b4:5e:ce:10:cc:62:1d:0b:57:4c:
cc:ef:c3:04:ac:42:2f:29:93:05:63:8e:99:4b:d1:14:f2:45:
0b:9b:e5:f8:44:2e:e5:e3:79:e4:5f:cf:ed:90:ca:43:be:1f:
a6:ce:a7:48:6f:bc:85:6b:9c:b0:e2:bd:f7:e1:6d:7a:0a:77:
a8:4f:1c:a3:55:0f:87:70:c6:d8:6e:08:c0:a3:72:17:25:cf:
b4:fa:ed:a4:49:f4:70:15:73:66:a9:0a:49:9a:d3:7b:c2:9a:
0f:c5:d3:9f:db:96:7a:fd:31:40:1e:97:60:3a:2a:9e:ad:9e:
73:91:63:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:16 2026 by rpki-client