Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
File: BJ5OW_-brMwUl8sgid2GYbzRPvM.mft (raw, json)
Hash identifier: vsloLAgn8jdzl8xNfqbPS5fRfqIKF3B2ow7ZeXMyXbU=
Subject key identifier: 9F:83:8B:F8:3C:03:25:4F:78:D6:F5:23:D1:35:0A:C7:7A:FA:CD:7E
Authority key identifier: 04:9E:4E:5B:FF:9B:AC:CC:14:97:CB:20:89:DD:86:61:BC:D1:3E:F3
Certificate issuer: /CN=049e4e5bff9baccc1497cb2089dd8661bcd13ef3
Certificate serial: 01A1DE39A1542822940CAA4FAFD51D5BF605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ5OW_-brMwUl8sgid2GYbzRPvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
Manifest number: 017D
Signing time: Sun 15 Nov 2026 08:01:21 +0000
Manifest this update: Sun 15 Nov 2026 08:01:21 +0000
Manifest next update: Mon 16 Nov 2026 08:01:21 +0000
Files and hashes: 1: 1evrKFhO7_Y0fEoCaCBlAe11Mq0.asa (hash: BUcK0Ghpp1YkOCKLxdjr7iZfGC9WXW9IwF5EdrSTPXQ=)
2: BJ5OW_-brMwUl8sgid2GYbzRPvM.crl (hash: nCR8HYDHq5+/IP3pcOBGSjydCi/WQ+x6JZvj8MG4xaE=)
3: xS6vxP921IVWaCyGTtAEbNaX5bQ.roa (hash: IXNgSsDBlcEeLICLKjhHZidP1Oorwbq5IO+mS83mDWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ5OW_-brMwUl8sgid2GYbzRPvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:a1:54:28:22:94:0c:aa:4f:af:d5:1d:5b:f6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049e4e5bff9baccc1497cb2089dd8661bcd13ef3
Validity
Not Before: Nov 15 08:01:21 2026 GMT
Not After : Nov 16 08:01:21 2026 GMT
Subject: CN=9f838bf83c03254f78d6f523d1350ac77afacd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:02:51:19:98:f5:f3:06:a7:25:0b:f4:79:4f:
d6:d6:86:8e:d3:59:f7:17:c2:02:4d:47:80:b0:a1:
4e:7e:77:64:9d:f9:85:e1:12:98:6d:9c:3b:cc:16:
cc:20:5e:a1:96:d0:18:52:f6:cc:8d:b9:37:64:ee:
94:1c:e6:09:4e:f7:20:b2:53:aa:10:6f:25:55:15:
b6:cd:9b:17:96:2c:47:4b:77:b8:39:4e:0c:b6:83:
62:a9:c9:4b:9d:22:cd:2e:93:f2:01:e2:26:f9:98:
63:01:1c:16:80:a6:51:cc:bc:8c:7b:1f:18:c8:7d:
c6:4a:a6:b8:1b:36:4b:75:9f:b4:5f:01:40:05:5c:
86:e8:09:a9:fa:6c:46:91:d2:eb:95:f0:1d:ec:be:
53:c7:e6:7f:0f:9e:6e:e4:5d:cc:d1:c9:39:16:20:
0b:7a:56:1c:39:4e:1b:ff:e6:4b:a5:bc:d9:4e:c4:
55:fc:29:d4:6a:3f:2f:e0:04:77:80:c4:96:55:50:
98:ba:01:c0:4f:53:a5:07:7c:bf:69:44:03:49:7f:
0c:b6:0a:72:04:eb:f2:94:b5:ab:53:5d:3a:38:81:
43:f5:7f:92:09:83:6c:dc:5a:da:5f:24:2c:2f:44:
b7:6c:c1:f4:9a:33:37:87:da:62:de:aa:24:3b:fe:
00:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:83:8B:F8:3C:03:25:4F:78:D6:F5:23:D1:35:0A:C7:7A:FA:CD:7E
X509v3 Authority Key Identifier:
keyid:04:9E:4E:5B:FF:9B:AC:CC:14:97:CB:20:89:DD:86:61:BC:D1:3E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ5OW_-brMwUl8sgid2GYbzRPvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:65:e8:0a:c9:99:1d:43:e7:33:5f:37:e2:d5:1d:5b:90:de:
77:a4:c5:c0:fe:a4:cc:6a:b2:66:f9:ae:7c:56:b6:d3:61:87:
68:82:8b:96:3c:31:ab:bd:4e:41:8d:9d:a2:a7:23:2b:98:5e:
d5:6d:d1:90:5d:78:f2:18:ba:18:e9:0e:17:9f:de:07:f8:30:
30:a9:10:12:5f:3b:a6:1a:05:2e:50:c7:40:a0:a1:af:bf:47:
3a:31:45:92:a0:14:ce:59:d6:4b:3c:aa:ca:cb:db:e8:07:63:
45:9a:25:fd:a5:03:8b:56:bd:01:67:ac:cf:e6:68:9b:0e:60:
5f:1e:e9:2f:d0:a1:17:f6:37:6f:8e:59:4a:13:12:a1:ea:e8:
53:c6:97:64:ee:a4:4d:27:4e:2a:7f:85:61:5c:fb:3a:24:2e:
30:65:58:79:20:9b:43:dc:48:1c:3b:a0:08:6c:34:61:73:fc:
9f:6b:34:2b:b9:9d:7b:b8:a0:04:af:a4:1f:a5:39:f1:52:86:
f9:7a:f6:eb:a7:41:e2:5b:c9:b5:14:1f:f0:86:1d:ec:17:6e:
53:07:45:07:01:a3:1c:23:6d:07:ea:5f:4b:bd:c5:51:4d:8f:
78:43:5e:d9:c7:47:3f:f9:74:41:ab:ea:6e:19:c7:4f:71:96:
0b:49:3e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:12:08 2026 by rpki-client