Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
File: BjyTAb89LhVgz69-3EGnw-yKFqY.mft (raw, json)
Hash identifier: MtNHEh3rjJQwlYQ6a0jxXQ81Z1Vns0B1P5hHBI59Y/Y=
Subject key identifier: 1D:27:E2:E1:2A:E7:69:91:83:73:23:DB:C6:01:FA:7F:40:CC:C2:07
Authority key identifier: 06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
Certificate issuer: /CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Certificate serial: 019D33E40325BD26BBDD5ACCB1C34038CD8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
Manifest number: 188A
Signing time: Sat 28 Mar 2026 10:01:14 +0000
Manifest this update: Sat 28 Mar 2026 10:01:14 +0000
Manifest next update: Sun 29 Mar 2026 10:01:14 +0000
Files and hashes: 1: BjyTAb89LhVgz69-3EGnw-yKFqY.crl (hash: TN5ot52R4tqEb/OAVhrROBFInkuGH5XInnyGBNLxRhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e4:03:25:bd:26:bb:dd:5a:cc:b1:c3:40:38:cd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Validity
Not Before: Mar 28 10:01:14 2026 GMT
Not After : Mar 29 10:01:14 2026 GMT
Subject: CN=1d27e2e12ae76991837323dbc601fa7f40ccc207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:b7:04:ab:a7:8c:4a:1e:2f:49:9a:e8:5b:
02:cc:39:09:f5:af:10:b6:b9:cd:a6:52:3b:93:4d:
d1:72:92:86:48:e6:0c:fd:7c:2a:e8:ee:f9:37:9a:
af:37:9b:5d:47:3a:98:bc:aa:3e:ed:59:b3:21:d9:
fb:2e:64:cd:e2:cb:df:7d:32:04:b4:2c:81:c9:c5:
b3:eb:f6:db:cb:58:88:ac:f3:1e:cf:f0:55:e4:d4:
4a:ab:a7:5e:34:5e:9e:d8:f0:d3:7f:e5:c4:f1:d3:
f9:d0:b4:00:77:f7:9e:2c:0c:0f:47:34:7b:28:99:
d8:b0:f1:55:67:34:e2:3e:26:0d:92:d0:6e:ec:bf:
2e:5f:b7:8b:45:b3:7e:5c:b7:15:c4:bb:04:01:c0:
a5:53:17:ee:53:e1:d8:f1:11:5b:d4:2a:5f:14:0a:
8a:85:82:a2:05:68:76:bc:f8:ce:4c:1b:96:7b:50:
c7:af:db:43:6c:29:4f:b9:db:c1:82:95:6f:64:b3:
96:38:cb:5b:bb:b5:cf:ca:0c:97:29:69:6f:6b:49:
a1:33:d5:9e:28:2a:f5:8a:83:b3:3a:69:e3:c7:b9:
67:f1:c3:d1:e2:2d:fe:9b:59:81:0a:41:77:b0:95:
05:87:45:bf:2f:53:84:81:da:41:dc:ad:c5:33:56:
cf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:27:E2:E1:2A:E7:69:91:83:73:23:DB:C6:01:FA:7F:40:CC:C2:07
X509v3 Authority Key Identifier:
keyid:06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ed:1a:96:b6:13:e0:38:72:46:24:c4:d6:fa:c8:47:a2:1f:
9f:36:0b:8b:93:0c:ab:7e:d3:ed:82:c2:24:b8:de:74:28:73:
c4:35:4b:ef:bf:21:5e:06:8a:5c:b6:89:b3:96:f5:7f:d9:06:
73:9a:0f:9b:f9:6d:fd:45:a1:6c:a7:18:09:a6:34:c1:63:55:
66:07:10:63:4a:38:1d:84:59:c1:b6:92:60:55:da:2a:98:b4:
4b:a3:4c:78:d6:a5:a0:cb:ef:21:09:ee:96:1c:71:d7:50:58:
e7:22:2c:b8:11:df:fd:61:2e:bf:f2:a7:44:e2:94:b6:90:1d:
7a:04:5b:82:91:06:fb:8a:88:ec:f5:dc:eb:22:5b:2e:e9:a3:
63:35:28:53:3b:82:58:99:ce:27:5a:79:7f:69:35:9c:51:ca:
63:32:7c:52:c9:b4:9f:d8:53:bf:91:c4:72:8a:3d:51:58:4e:
44:ee:08:fa:3c:38:eb:56:ec:0a:4b:78:0a:2f:e2:1c:74:55:
80:ad:98:87:63:c6:05:45:fd:e3:50:59:84:41:c9:e3:14:64:
65:76:97:06:f2:3b:1f:dc:cc:69:42:3d:bb:bf:19:34:2e:26:
3d:19:4a:60:2c:f4:22:fd:f9:5a:28:56:82:6d:0b:57:d6:22:
38:04:4b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:02:24 2026 by rpki-client