
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
File: BJ5OW_-brMwUl8sgid2GYbzRPvM.mft (raw, json)
Hash identifier: ZpHiIE44cIOLXELmQI5nfm+4w6Ct+ZwMvXeLMOy0URo=
Subject key identifier: 11:70:A1:EF:8E:68:0F:1B:7E:4D:60:4C:14:90:D2:2B:40:0E:D7:BA
Authority key identifier: 04:9E:4E:5B:FF:9B:AC:CC:14:97:CB:20:89:DD:86:61:BC:D1:3E:F3
Certificate issuer: /CN=049e4e5bff9baccc1497cb2089dd8661bcd13ef3
Certificate serial: 019F9059EE5BD6BD1E35F02C292786F602BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ5OW_-brMwUl8sgid2GYbzRPvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
Manifest number: 4B
Signing time: Thu 23 Jul 2026 19:00:40 +0000
Manifest this update: Thu 23 Jul 2026 19:00:40 +0000
Manifest next update: Fri 24 Jul 2026 19:00:40 +0000
Files and hashes: 1: BJ5OW_-brMwUl8sgid2GYbzRPvM.crl (hash: +6zC8cz2FmbAtZT/CHaWugziGI0VUaaJcmsAS/lO8j8=)
2: xS6vxP921IVWaCyGTtAEbNaX5bQ.roa (hash: IXNgSsDBlcEeLICLKjhHZidP1Oorwbq5IO+mS83mDWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ5OW_-brMwUl8sgid2GYbzRPvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:ee:5b:d6:bd:1e:35:f0:2c:29:27:86:f6:02:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049e4e5bff9baccc1497cb2089dd8661bcd13ef3
Validity
Not Before: Jul 23 19:00:40 2026 GMT
Not After : Jul 24 19:00:40 2026 GMT
Subject: CN=1170a1ef8e680f1b7e4d604c1490d22b400ed7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bd:9e:36:5c:e1:ae:98:42:09:51:8c:62:e5:
3f:e3:cd:bc:3d:8a:78:96:57:06:2c:ed:ea:65:d2:
bb:14:ad:e6:d1:79:d2:3f:bb:bf:b4:39:c7:53:e7:
20:4c:7e:e7:14:57:a7:ee:65:88:58:9d:55:14:2f:
a6:1f:7a:94:9a:93:5d:0a:ce:24:34:ea:cc:a6:7d:
f8:06:8e:73:92:5f:2d:04:72:32:1f:9c:b7:7a:ba:
41:fa:78:2c:87:09:d0:7e:fa:66:0a:59:47:9c:0b:
d8:bd:5b:42:72:1d:1e:92:49:98:bc:97:d6:59:de:
1b:40:40:e8:e9:ca:4b:dd:90:5a:fa:00:8a:4c:70:
17:85:1e:42:3b:4d:45:be:29:66:fe:d8:c7:af:67:
9a:07:54:05:1a:88:43:59:62:6e:5f:53:dd:7e:01:
2c:0d:b1:7d:c4:7c:96:f8:c7:dd:7a:f4:24:4d:c4:
22:f3:aa:a6:2f:de:71:bb:d0:6f:be:19:dc:8e:f4:
8e:f4:16:bc:4d:b5:85:0c:6d:7c:6f:f1:4f:3b:98:
7c:84:a5:4d:b5:b6:a7:98:5c:3f:ba:25:30:d9:46:
d1:61:78:c3:3a:e7:24:da:15:af:0b:8d:13:71:92:
71:f4:44:f6:18:44:04:48:15:cb:f4:41:f9:db:95:
b8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:70:A1:EF:8E:68:0F:1B:7E:4D:60:4C:14:90:D2:2B:40:0E:D7:BA
X509v3 Authority Key Identifier:
keyid:04:9E:4E:5B:FF:9B:AC:CC:14:97:CB:20:89:DD:86:61:BC:D1:3E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ5OW_-brMwUl8sgid2GYbzRPvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fa:01:91:c3:de:f5:38:de:f1:7f:2a:64:41:80:8e:d4:23:
21:8d:1c:22:49:91:83:dc:14:bb:a1:15:2a:50:86:84:98:7d:
54:29:31:f5:e4:5f:db:50:a6:79:f4:8b:70:7d:ca:0f:ab:66:
be:4e:90:ee:eb:47:ac:4e:39:9f:f2:2e:90:69:04:53:89:5d:
6e:34:eb:69:46:d4:ee:7a:da:16:15:8d:e7:10:8a:a2:62:7c:
62:83:94:01:5a:61:a6:94:72:e3:bf:42:52:9c:6d:a6:80:42:
8e:35:da:d3:5b:b5:90:cd:ea:8b:8b:60:ef:a4:39:1f:65:a1:
0c:6d:dd:0b:54:25:44:f9:20:3a:ae:fb:6d:bf:a4:01:be:61:
92:43:cd:90:b7:f1:6f:c0:3f:2f:11:1f:25:1f:9f:94:6b:11:
c3:9f:83:21:22:0e:72:f7:41:07:e7:8b:e2:ca:53:71:0a:7b:
d9:9f:28:b9:33:08:4a:7d:36:33:22:65:6b:10:58:98:63:77:
37:20:1e:12:38:ca:3b:97:12:e2:c2:71:4b:5f:d3:e0:8d:4e:
c3:47:c5:02:c1:5e:63:b6:e7:3d:a8:7b:58:34:a7:a3:6b:1b:
5d:b6:1a:45:cf:9b:74:52:16:87:2a:5d:b9:67:23:95:a1:67:
67:9c:eb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:35 2026 by rpki-client