Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
File: BJ5OW_-brMwUl8sgid2GYbzRPvM.mft (raw, json)
Hash identifier: TY7uGb2CkX/ht6ObInW/V1Of5c868P1F4QZBNseW768=
Subject key identifier: D6:FA:B0:07:F3:05:36:E0:C7:B5:21:DC:D4:69:BB:D9:7C:E1:E1:F8
Authority key identifier: 04:9E:4E:5B:FF:9B:AC:CC:14:97:CB:20:89:DD:86:61:BC:D1:3E:F3
Certificate issuer: /CN=049e4e5bff9baccc1497cb2089dd8661bcd13ef3
Certificate serial: 01A0CBFE72A946FC0C88235A2A93080A6E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ5OW_-brMwUl8sgid2GYbzRPvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
Manifest number: EF
Signing time: Wed 23 Sep 2026 02:00:45 +0000
Manifest this update: Wed 23 Sep 2026 02:00:45 +0000
Manifest next update: Thu 24 Sep 2026 02:00:45 +0000
Files and hashes: 1: 1evrKFhO7_Y0fEoCaCBlAe11Mq0.asa (hash: BUcK0Ghpp1YkOCKLxdjr7iZfGC9WXW9IwF5EdrSTPXQ=)
2: BJ5OW_-brMwUl8sgid2GYbzRPvM.crl (hash: ohXXSnONZpjIfJKZ6ygBP0AHbYxNMCh+fJWVH4xX2Fc=)
3: xS6vxP921IVWaCyGTtAEbNaX5bQ.roa (hash: IXNgSsDBlcEeLICLKjhHZidP1Oorwbq5IO+mS83mDWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ5OW_-brMwUl8sgid2GYbzRPvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:72:a9:46:fc:0c:88:23:5a:2a:93:08:0a:6e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049e4e5bff9baccc1497cb2089dd8661bcd13ef3
Validity
Not Before: Sep 23 02:00:45 2026 GMT
Not After : Sep 24 02:00:45 2026 GMT
Subject: CN=d6fab007f30536e0c7b521dcd469bbd97ce1e1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:80:2a:46:94:28:8e:3b:d5:bd:d2:9c:a9:b7:
81:18:dd:80:f2:89:d3:fe:68:16:04:23:1d:4b:f6:
ff:59:3d:55:78:0b:5d:99:f5:d8:b6:3c:1c:c6:01:
16:56:3e:28:87:ee:ca:18:50:46:5c:d3:4c:fa:d2:
de:29:da:76:7b:2e:92:fe:e5:67:d3:2c:6e:dd:db:
11:3c:98:06:8d:a2:20:7a:c6:f8:00:2f:48:0c:75:
f7:d7:f4:4a:6c:83:c9:7e:aa:51:c8:ee:cc:4e:46:
c4:26:9e:b9:3a:f7:aa:14:c0:46:f7:ea:d8:ca:21:
57:f3:6f:57:13:8a:b1:af:c0:5d:5e:ee:d4:1e:d3:
ae:84:a6:fd:6b:3f:0d:0b:da:90:02:60:60:25:0d:
14:fb:8e:44:b3:5a:7d:63:f5:75:3a:d7:e3:a9:88:
9f:64:f9:52:64:25:4d:0c:4d:f3:2c:5c:17:a2:b8:
d3:1c:4f:52:6c:c1:9c:6e:6f:ab:24:e0:5a:d6:04:
0e:b7:6e:e0:98:4e:23:67:3d:d6:61:fa:0f:b0:08:
fc:f8:af:f3:9b:04:33:10:4d:7d:17:84:44:e7:b3:
a6:c5:d0:82:ba:3e:31:f3:e9:a3:19:23:52:20:07:
60:bb:38:45:3e:b2:17:91:a9:87:c6:21:11:06:fb:
dd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FA:B0:07:F3:05:36:E0:C7:B5:21:DC:D4:69:BB:D9:7C:E1:E1:F8
X509v3 Authority Key Identifier:
keyid:04:9E:4E:5B:FF:9B:AC:CC:14:97:CB:20:89:DD:86:61:BC:D1:3E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ5OW_-brMwUl8sgid2GYbzRPvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:53:16:7e:39:3b:7e:c8:ed:6a:3b:a3:dd:bf:c8:17:ac:aa:
63:3d:67:eb:9a:a5:08:c3:f0:09:f4:80:2c:1b:c6:5c:42:78:
5d:40:30:08:59:9a:0b:af:6a:9e:a5:91:0c:55:ec:7e:c7:82:
7f:04:ad:7b:4e:b7:2e:cf:d4:25:ba:34:22:99:0a:c7:fd:36:
9a:1b:83:ec:33:f1:be:f3:b2:a8:23:e8:93:73:94:63:b9:8d:
80:38:ff:55:e8:81:f7:d5:f2:66:38:9a:83:b8:38:81:31:8b:
73:e6:db:c9:32:13:6b:8a:84:05:c7:f9:bf:6c:c1:5a:e6:70:
92:e7:a9:6d:6a:a7:e4:49:2a:32:38:8e:e4:bf:0d:04:09:da:
83:a5:13:f4:80:81:da:f3:39:74:1e:10:68:27:e5:fe:82:41:
7a:5f:95:e3:ce:80:f4:1a:1d:92:42:ef:43:e3:ae:f9:3b:ed:
3b:05:50:7c:71:d8:68:37:cd:c5:53:73:1b:86:b0:60:0a:25:
1b:0f:4f:05:ba:00:b2:20:dd:11:03:d9:f9:71:4f:e8:a7:72:
98:46:e5:fc:32:6a:05:a4:a2:ac:39:50:e9:a6:82:e2:70:79:
f4:0d:14:6d:27:b6:7c:2a:e0:27:bb:31:5e:f3:7e:78:ca:6b:
fa:ac:ff:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDL/nKpRvwMiCNaKpMICm4WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0OWU0ZTViZmY5YmFjY2MxNDk3Y2IyMDg5ZGQ4NjYxYmNk
MTNlZjMwHhcNMjYwOTIzMDIwMDQ1WhcNMjYwOTI0MDIwMDQ1WjAzMTEwLwYDVQQD
EyhkNmZhYjAwN2YzMDUzNmUwYzdiNTIxZGNkNDY5YmJkOTdjZTFlMWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYAqRpQojjvVvdKcqbeBGN2A8onT
/mgWBCMdS/b/WT1VeAtdmfXYtjwcxgEWVj4oh+7KGFBGXNNM+tLeKdp2ey6S/uVn
0yxu3dsRPJgGjaIgesb4AC9IDHX31/RKbIPJfqpRyO7MTkbEJp65OveqFMBG9+rY
yiFX829XE4qxr8BdXu7UHtOuhKb9az8NC9qQAmBgJQ0U+45Es1p9Y/V1OtfjqYif
ZPlSZCVNDE3zLFwXorjTHE9SbMGcbm+rJOBa1gQOt27gmE4jZz3WYfoPsAj8+K/z
mwQzEE19F4RE57OmxdCCuj4x8+mjGSNSIAdguzhFPrIXkamHxiERBvvd2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNb6sAfzBTbgx7Uh3NRpu9l84eH4MB8GA1UdIwQY
MBaAFASeTlv/m6zMFJfLIIndhmG80T7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQko1T1dfLWJyTXdVbDhzZ2lkMkdZYnpSUHZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zYTZmMmYtNmNhYy00YzE2LTg0NTQt
ODNlN2RiM2IwMDM3LzEvQko1T1dfLWJyTXdVbDhzZ2lkMkdZYnpSUHZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zYTZmMmYtNmNhYy00YzE2LTg0NTQtODNlN2RiM2IwMDM3
LzEvQko1T1dfLWJyTXdVbDhzZ2lkMkdZYnpSUHZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1MWfjk7
fsjtajuj3b/IF6yqYz1n65qlCMPwCfSALBvGXEJ4XUAwCFmaC69qnqWRDFXsfseC
fwSte063Ls/UJbo0IpkKx/02mhuD7DPxvvOyqCPok3OUY7mNgDj/VeiB99XyZjia
g7g4gTGLc+bbyTITa4qEBcf5v2zBWuZwkuepbWqn5EkqMjiO5L8NBAnag6UT9ICB
2vM5dB4QaCfl/oJBel+V486A9BodkkLvQ+Ou+TvtOwVQfHHYaDfNxVNzG4awYAol
Gw9PBboAsiDdEQPZ+XFP6KdymEbl/DJqBaSirDlQ6aaC4nB59A0UbSe2fCrgJ7sx
XvN+eMpr+qz/vA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:37:23 2026 by rpki-client