Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
File: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft (raw, json)
Hash identifier: bx2cwlOR1x8nmoyLULr+3v9hzY60PEj3DZLRENAH8Ag=
Subject key identifier: 3D:CA:F7:92:47:E4:62:EA:DE:E0:38:E8:C4:C7:88:79:38:90:78:75
Authority key identifier: 04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
Certificate issuer: /CN=04904347a2361aced7c370f7446de708277ee6d1
Certificate serial: 019D28845436F6B2382B3E0800D63A5086D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
Manifest number: 0786
Signing time: Thu 26 Mar 2026 05:00:54 +0000
Manifest this update: Thu 26 Mar 2026 05:00:54 +0000
Manifest next update: Fri 27 Mar 2026 05:00:54 +0000
Files and hashes: 1: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl (hash: qLiF+26FLUwsLHuT6FDDhbtjr3E/Z50Nl0rD8SON26Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:54:36:f6:b2:38:2b:3e:08:00:d6:3a:50:86:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04904347a2361aced7c370f7446de708277ee6d1
Validity
Not Before: Mar 26 05:00:54 2026 GMT
Not After : Mar 27 05:00:54 2026 GMT
Subject: CN=3dcaf79247e462eadee038e8c4c7887938907875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:08:b1:da:a2:a1:5f:14:8e:d7:13:e6:dc:0e:
53:2f:8a:76:bb:30:43:5d:0b:ee:05:f1:f5:8a:19:
10:12:e3:04:14:4c:b4:5c:9b:e7:2f:23:9f:f7:cc:
7c:7d:2c:94:ff:c8:09:fb:6e:ca:1f:dd:ea:8a:5f:
4e:d6:7d:23:f2:cf:4c:17:8f:be:9b:04:a2:9e:41:
b9:45:0f:e3:15:41:3b:e2:43:77:08:3c:70:b9:b1:
05:e1:f8:6f:d2:97:7e:31:6c:eb:85:15:4e:c8:e6:
1f:31:c8:1f:74:d4:d8:f9:f1:6f:d0:d0:ee:a7:97:
b9:ef:c2:95:00:14:7c:2d:67:b1:c1:e4:7b:31:bc:
4a:e1:4e:1d:69:82:9f:e7:e9:01:f8:87:12:9a:db:
ed:07:84:41:18:b5:3a:ef:fc:99:c8:05:31:f4:97:
ad:83:bf:bf:85:65:c0:a0:b9:d4:63:a3:6f:e8:94:
aa:97:5a:24:2f:14:85:25:73:f6:4e:39:38:59:f8:
b0:8a:95:20:65:74:72:a5:12:32:a0:01:c1:24:aa:
91:a7:71:96:f1:45:41:2f:e1:3a:f7:a1:a6:de:50:
c4:57:6c:4b:70:be:5d:b8:05:38:24:76:b3:28:26:
88:84:22:ac:ee:80:1a:28:5a:4e:19:1b:81:a4:36:
b0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CA:F7:92:47:E4:62:EA:DE:E0:38:E8:C4:C7:88:79:38:90:78:75
X509v3 Authority Key Identifier:
keyid:04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:45:59:70:5f:fd:31:3a:8f:ee:0f:5c:0d:dc:82:c1:c2:d3:
75:cf:c2:01:ca:0b:a5:03:22:07:63:7e:69:72:00:54:7f:0e:
7a:46:85:2e:c4:f1:c0:c0:bf:f7:25:05:0d:33:25:ec:f5:47:
6b:36:e1:9c:a3:1c:87:f1:21:7f:96:4f:44:6b:6e:f9:a8:f7:
fd:3a:c1:0a:02:88:a8:13:19:2b:ac:0b:0a:88:22:32:3a:75:
21:cf:90:19:6b:09:23:99:46:54:20:3a:24:33:f7:cc:7c:c5:
ad:be:03:ac:e1:fd:12:97:30:14:99:77:53:65:85:9a:17:77:
43:7c:ed:62:7d:ab:dc:e3:be:5c:95:04:0d:dc:98:46:46:48:
70:e2:31:a9:40:00:c6:fb:97:c9:53:39:76:cf:3f:16:bd:6a:
9a:82:84:8e:3c:44:4f:f5:1c:43:50:d6:bb:22:3c:e6:3f:4b:
68:70:28:1b:14:d5:02:99:ee:83:58:84:3b:74:63:15:f3:8c:
7e:07:26:a8:5c:c5:71:08:61:44:29:52:92:c0:0f:c2:01:43:
a5:6b:09:b0:00:dd:3c:6b:29:30:2b:cd:b3:43:b8:49:8d:87:
c4:7a:47:a4:fc:82:14:42:8f:af:5e:21:16:42:e0:34:40:65:
ba:4f:2d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:20:22 2026 by rpki-client