Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
File: BjfRzl3D-oAOHR3PvaqEH93UOQU.mft (raw, json)
Hash identifier: FSAHuefKSppfYT3+zy/eIJPIQIhxigeJcjJ+6TLSCBE=
Subject key identifier: 7A:53:CC:3C:42:F4:C1:29:7D:3B:2A:74:1B:43:D7:43:BF:C9:00:98
Authority key identifier: 06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
Certificate issuer: /CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Certificate serial: 019F93C9000AED33A0B2036445F3820CE80D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
Manifest number: 1811
Signing time: Fri 24 Jul 2026 11:00:51 +0000
Manifest this update: Fri 24 Jul 2026 11:00:51 +0000
Manifest next update: Sat 25 Jul 2026 11:00:51 +0000
Files and hashes: 1: BjfRzl3D-oAOHR3PvaqEH93UOQU.crl (hash: QAkYMBrbahqTL0r527bAjTV8yqYQM/EjcoJKK+w03PQ=)
2: G-BgSgA1DvY02PMsHCU-rGoXRQo.roa (hash: PS8e/lwF9c6L43N47uqYtfOx0c2N/MEHbFT+QBvkfks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:00:0a:ed:33:a0:b2:03:64:45:f3:82:0c:e8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Validity
Not Before: Jul 24 11:00:51 2026 GMT
Not After : Jul 25 11:00:51 2026 GMT
Subject: CN=7a53cc3c42f4c1297d3b2a741b43d743bfc90098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:20:fc:43:20:90:03:44:ac:3a:b2:d8:e6:
33:46:21:ae:99:79:ca:b1:e4:9e:f6:77:0a:7a:0c:
22:10:70:dc:a5:36:ea:40:bf:07:e3:19:9f:e2:d8:
73:ae:a0:b8:62:d2:94:aa:c3:26:ec:7c:e6:05:16:
c8:53:d6:44:40:c3:45:16:d4:38:44:e9:d1:44:22:
d8:43:a1:9d:cf:ea:b8:cb:91:14:8b:92:90:ff:35:
d7:be:ee:6b:50:aa:e9:72:ba:0b:a5:ec:0b:85:dd:
24:05:ef:ee:d8:f7:22:f6:5a:50:d3:86:f2:8f:18:
73:6e:cb:7a:a4:bb:87:22:1d:e8:ac:40:dc:eb:88:
0d:0a:1a:09:42:68:25:1a:1d:f6:3e:b8:05:d5:78:
1d:82:92:64:c8:f8:62:33:56:69:d8:1d:03:73:bc:
aa:24:20:df:70:a1:d0:9f:43:43:c9:fc:4c:27:50:
ea:01:6b:2d:18:f1:88:7e:60:d2:44:c5:63:db:e1:
b1:a2:2f:be:2c:2d:25:60:a0:7f:16:d2:2e:43:15:
38:fb:53:bb:3b:2d:c4:ef:ff:c8:fa:16:8f:44:3a:
dd:42:99:e4:7f:ee:f0:59:e2:87:94:dc:a4:7b:f1:
c7:00:76:fa:f1:52:cb:7a:94:ae:c1:5e:34:98:7b:
26:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:53:CC:3C:42:F4:C1:29:7D:3B:2A:74:1B:43:D7:43:BF:C9:00:98
X509v3 Authority Key Identifier:
keyid:06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1c:9a:24:bd:bf:5b:4b:c2:18:59:3f:39:21:12:a2:f5:9f:
0b:26:d9:be:2a:5a:fa:92:93:de:a2:ca:98:ef:63:98:dc:2d:
f2:32:ed:73:2c:0b:c5:e8:67:c1:0a:43:3a:38:49:59:a6:23:
2a:e8:93:36:53:d5:cc:91:d8:73:af:b0:cd:4a:33:6d:30:4e:
fe:c8:cd:13:2d:38:c9:fd:d5:3a:c9:69:12:9c:aa:6a:b7:85:
b0:8e:fe:1a:f0:1d:31:b0:6a:b4:f4:e4:f6:a9:2f:ed:32:37:
6e:57:99:6e:47:2c:5a:5a:cb:d1:68:d8:8d:a7:45:ce:56:48:
13:55:bb:e2:2f:20:d6:d3:bf:d9:74:23:a9:bc:2a:d9:54:4b:
9f:66:c9:42:21:b8:0d:09:52:38:c6:76:89:67:1d:4b:08:39:
ec:c5:79:f4:b3:ec:a4:7b:f2:27:c0:21:75:ea:0f:ee:91:dd:
5d:60:92:a4:1b:39:3a:ed:1c:2f:78:51:d2:a4:45:1a:64:9c:
e2:63:a0:6b:01:d3:20:67:5f:42:1d:33:f8:95:ab:e7:6b:44:
93:8b:46:40:1e:28:d1:c1:61:3b:83:03:48:fd:f2:1b:64:8e:
95:20:6a:e8:dd:63:b6:fc:8e:e4:dc:54:00:a2:2c:cf:5c:78:
57:8d:8a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:00:35 2026 by rpki-client