Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
File: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft (raw, json)
Hash identifier: l8g0pTlYlnExiSvu3hZk8y7SdxhgeqPqZgg6XuBz2R4=
Subject key identifier: D8:BA:47:58:72:F7:2A:57:85:8B:8D:75:67:40:9E:E7:34:D2:C3:CA
Authority key identifier: 04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
Certificate issuer: /CN=04904347a2361aced7c370f7446de708277ee6d1
Certificate serial: 019E1BD8F6DC42A7C2C8EB7020BFE042AA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
Manifest number: 0804
Signing time: Tue 12 May 2026 11:01:04 +0000
Manifest this update: Tue 12 May 2026 11:01:04 +0000
Manifest next update: Wed 13 May 2026 11:01:04 +0000
Files and hashes: 1: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl (hash: /2mxjZvtHgffmUHPXJZaZx6eRuk2GPtd/WdePae23lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:f6:dc:42:a7:c2:c8:eb:70:20:bf:e0:42:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04904347a2361aced7c370f7446de708277ee6d1
Validity
Not Before: May 12 11:01:04 2026 GMT
Not After : May 13 11:01:04 2026 GMT
Subject: CN=d8ba475872f72a57858b8d7567409ee734d2c3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e6:af:bc:70:e2:f3:22:a9:59:21:6a:3c:f0:
e7:ee:cf:e2:1b:a8:00:f7:f7:48:01:b4:fb:e0:c0:
f6:0a:c8:59:a4:29:07:30:f1:ea:ba:19:78:f6:3f:
d3:00:d3:24:7d:94:ae:97:31:00:76:a3:49:c3:1a:
cc:58:bf:2e:13:49:33:eb:c2:d5:38:9f:66:94:4c:
e8:8c:85:39:ab:b1:8b:70:45:25:d9:ee:fc:a2:02:
93:7c:6a:74:af:da:a7:cf:59:a5:55:af:44:08:cb:
0e:41:10:d8:89:36:b7:4b:fa:78:ee:a9:38:81:9f:
ac:41:47:8f:f7:5a:19:8c:df:3c:2e:af:40:1b:f9:
66:7a:f5:e2:13:63:51:dc:4e:49:4a:21:7a:4a:e8:
be:d1:e0:0c:51:f9:be:d8:53:fd:57:d3:f6:2c:57:
c0:1f:1b:25:2a:24:79:51:8a:c6:0a:f7:10:ac:46:
99:3f:fe:40:86:07:7a:2d:f7:c4:6e:7e:88:8e:48:
59:0a:dd:e6:11:16:08:44:7c:3d:e8:5f:73:77:12:
fa:72:50:87:df:d8:e1:1d:13:b2:50:48:89:99:d6:
a4:89:33:b7:ed:52:ee:bc:77:c3:ee:5e:64:ec:10:
56:84:38:c3:a0:ab:5b:21:db:33:6a:44:87:f3:de:
10:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BA:47:58:72:F7:2A:57:85:8B:8D:75:67:40:9E:E7:34:D2:C3:CA
X509v3 Authority Key Identifier:
keyid:04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:90:51:30:2d:3d:02:c3:72:b1:80:9e:53:3d:b3:ec:6e:a6:
a8:70:0d:a0:ce:6d:6e:86:cf:2a:46:82:58:47:ec:3d:67:00:
cc:2c:7c:a9:b1:ff:af:70:a6:57:39:cd:a3:5d:6d:c9:da:f7:
0f:f2:ad:25:24:8e:7c:34:7b:95:ea:51:47:fc:3c:e9:d2:e0:
9d:b9:8b:f7:bb:43:7c:e8:0e:9e:f0:2a:f0:e3:5a:86:f5:bf:
67:3e:0f:9a:31:31:2c:15:f2:8a:4c:aa:5e:e4:19:9f:42:9e:
80:f8:e1:15:26:78:db:61:2b:9a:13:b9:e6:e6:e6:f7:fe:3d:
5f:b1:59:b5:49:10:54:29:f3:37:82:71:9b:ac:72:1e:e1:e3:
46:b0:dd:86:51:2f:4a:47:ae:af:04:5f:3b:c7:a1:34:4a:4a:
72:98:bb:15:57:2b:43:78:ae:cc:03:ba:76:22:e4:6e:16:a2:
74:bb:5c:93:1e:24:1c:11:75:a0:3e:f5:89:fc:89:c3:a4:f4:
b1:f7:04:83:ab:75:be:2c:9e:c7:fa:9b:0f:37:79:7f:fa:87:
db:9c:ef:66:bf:b2:4f:52:45:02:b0:50:5a:a8:b2:19:2b:0b:
f2:23:e8:9b:be:4a:90:f7:d1:28:52:a0:ea:fd:ea:49:b3:08:
50:4c:a0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:08 2026 by rpki-client