Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
File: BjyTAb89LhVgz69-3EGnw-yKFqY.mft (raw, json)
Hash identifier: Lybxh84KuHg/yNn9wMgowl+Ww/XjsbleSga1wXBVF+E=
Subject key identifier: B5:EC:6C:EE:AA:57:6B:EC:AF:98:AD:FB:A8:25:BA:5B:93:DF:90:4B
Authority key identifier: 06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
Certificate issuer: /CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Certificate serial: 019F905A45DA7031C6ADC5F5664AAFE8B612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 19:01:02 +0000
Manifest this update: Thu 23 Jul 2026 19:01:02 +0000
Manifest next update: Fri 24 Jul 2026 19:01:02 +0000
Files and hashes: 1: BjyTAb89LhVgz69-3EGnw-yKFqY.crl (hash: fljeW0Wt+WpJGYdNG/4NcSEpUKpXopxDJQPM7FnMlXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:45:da:70:31:c6:ad:c5:f5:66:4a:af:e8:b6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Validity
Not Before: Jul 23 19:01:02 2026 GMT
Not After : Jul 24 19:01:02 2026 GMT
Subject: CN=b5ec6ceeaa576becaf98adfba825ba5b93df904b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:7f:44:50:6e:08:9e:53:22:27:be:af:2d:
40:ce:00:7b:bc:79:24:6f:8b:16:fd:e3:fc:76:69:
fe:70:2e:ef:92:22:ff:d7:dd:41:ec:de:94:a9:a9:
3d:30:d3:e4:6e:3f:6a:5d:0c:2c:70:96:11:57:6c:
8e:ea:39:97:3e:04:df:ec:cb:a9:1d:6e:94:6a:22:
93:6d:62:4a:a4:63:0a:61:05:fc:38:4a:83:9e:4a:
16:e7:22:c5:0e:63:97:70:38:13:81:65:3e:f8:ad:
e7:5d:f3:63:52:1f:5c:40:db:02:20:7b:2d:20:17:
51:23:9b:27:a8:fc:b2:55:8c:9f:75:4c:d7:fa:6b:
d7:64:55:8b:ac:4b:aa:14:90:ea:fb:9d:1e:53:58:
e7:6a:cc:ad:25:e4:ca:30:3f:5f:ea:00:1d:2c:2a:
07:5d:aa:ae:bb:f6:d9:6a:bd:82:50:fa:1e:17:17:
43:ee:3f:c9:42:14:a8:0e:f8:d2:84:dc:3e:3c:18:
f9:80:ed:cf:af:dd:1c:79:cb:40:a5:e2:41:28:4b:
67:46:9e:55:48:05:3b:c4:a7:b5:64:c1:ca:b3:cd:
31:3f:c0:33:0a:45:01:f9:fe:ce:34:dc:62:68:de:
03:08:4a:a4:b1:2f:fc:68:a7:ac:55:6c:57:ca:9d:
d2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EC:6C:EE:AA:57:6B:EC:AF:98:AD:FB:A8:25:BA:5B:93:DF:90:4B
X509v3 Authority Key Identifier:
keyid:06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d6:7e:9a:b6:c1:fc:87:6e:4d:22:39:95:2e:90:b9:5a:ea:
fa:f8:33:8d:ea:e7:85:f5:bd:d0:4b:82:73:25:37:49:39:74:
37:49:df:ec:d5:59:5c:e0:42:d9:3d:6b:d2:bf:61:b3:19:b8:
6a:36:52:9e:a7:5a:09:34:b1:dd:19:d2:2c:25:32:70:b0:32:
06:44:3e:b8:8c:d6:08:c9:bc:a5:a6:7b:72:20:32:66:36:a2:
69:73:27:85:89:f2:4a:07:4d:6e:d4:7b:0c:b4:0b:6b:22:f0:
e3:95:a0:eb:c3:ce:37:50:52:ef:b5:e1:34:35:8e:25:0e:96:
6d:34:54:8a:59:a4:0c:80:57:88:53:8e:e4:c8:2b:d7:fc:73:
40:30:ff:fa:0d:d1:89:d5:c0:81:23:e3:f0:ce:eb:7f:31:63:
30:8f:7d:4d:a5:e4:16:57:6c:4b:99:9e:71:a2:29:4d:1a:24:
3a:40:1f:78:34:7c:13:bf:18:1e:7b:15:b7:a4:b6:28:b3:f4:
9f:a9:81:28:2e:ed:de:77:d5:66:81:1e:0e:76:6e:17:de:e8:
9e:43:1f:f1:d6:dc:9c:90:3d:86:2f:06:47:5c:dd:04:6a:b0:
a6:d0:ce:00:21:de:41:87:6f:f3:83:6e:1f:ed:7f:93:5c:6f:
60:d7:24:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:34:06 2026 by rpki-client