Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/BdjCUJ-nAyEcDYsl6_Clnsz79HA.mft
File: BdjCUJ-nAyEcDYsl6_Clnsz79HA.mft (raw, json)
Hash identifier: HIrhecCAWGw573zjxuLqHQeepwm/dHJC2KKePf7IuUc=
Subject key identifier: 97:F3:FA:6E:28:5A:08:66:B9:B4:F2:02:AC:86:C2:A8:B7:55:D1:5E
Authority key identifier: 05:D8:C2:50:9F:A7:03:21:1C:0D:8B:25:EB:F0:A5:9E:CC:FB:F4:70
Certificate issuer: /CN=05d8c2509fa703211c0d8b25ebf0a59eccfbf470
Certificate serial: 019F8F7ED21BCC6990392D3784B3DEC38A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdjCUJ-nAyEcDYsl6_Clnsz79HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/BdjCUJ-nAyEcDYsl6_Clnsz79HA.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:20 +0000
Manifest this update: Thu 23 Jul 2026 15:01:20 +0000
Manifest next update: Fri 24 Jul 2026 15:01:20 +0000
Files and hashes: 1: BdjCUJ-nAyEcDYsl6_Clnsz79HA.crl (hash: s3RCJ/DXo+WWbeE//BVVCDwqYrjUSswBUmOHnIvbz1c=)
2: iMtYArju-GxZ28LWjEjqh7WOHLI.roa (hash: vR2rSY1SVgLQpRVxybvU9HwLrzOtpwEqUr/SdEDJIsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/BdjCUJ-nAyEcDYsl6_Clnsz79HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/BdjCUJ-nAyEcDYsl6_Clnsz79HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdjCUJ-nAyEcDYsl6_Clnsz79HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:d2:1b:cc:69:90:39:2d:37:84:b3:de:c3:8a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d8c2509fa703211c0d8b25ebf0a59eccfbf470
Validity
Not Before: Jul 23 15:01:20 2026 GMT
Not After : Jul 24 15:01:20 2026 GMT
Subject: CN=97f3fa6e285a0866b9b4f202ac86c2a8b755d15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:86:fc:09:27:d5:54:ce:30:ec:91:86:7c:
68:be:2a:02:83:a6:7f:e1:7d:0c:fc:39:ff:57:e1:
a8:3a:ea:9e:c7:23:08:7f:27:d0:54:ab:cb:a8:9f:
9d:86:65:2f:62:5b:ed:95:ce:35:a8:a4:3a:15:69:
e2:3b:30:95:c2:d5:df:45:96:d7:0d:7c:22:37:96:
fc:fc:37:74:48:b0:4e:72:aa:04:6a:5e:8e:f3:b0:
6e:93:5b:49:48:53:2c:d9:7b:b2:4d:39:3f:d3:01:
eb:b3:99:87:9b:27:2d:3e:42:91:7c:1d:77:6a:23:
f7:2e:4c:90:3b:a3:14:8d:cf:e6:32:10:0f:a7:04:
0f:d6:5c:de:88:9b:99:af:72:ab:58:a3:bd:6b:4a:
a4:12:f5:13:47:38:9f:8e:75:6f:72:b9:ff:6d:d8:
1f:32:16:5c:42:a0:22:a2:3a:ff:df:0c:a5:fa:de:
f5:94:5f:78:cb:5a:8a:5e:16:7e:34:c5:cc:49:4a:
13:21:0c:ee:ba:f1:78:e7:70:7d:65:6a:0c:28:d9:
27:79:7f:df:06:68:9a:29:00:99:97:cb:f6:47:a9:
74:ab:92:f4:79:73:a2:a1:22:b6:ff:3e:70:c8:ba:
b0:57:47:d4:71:11:2b:6e:05:bc:02:36:58:0a:07:
5d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F3:FA:6E:28:5A:08:66:B9:B4:F2:02:AC:86:C2:A8:B7:55:D1:5E
X509v3 Authority Key Identifier:
keyid:05:D8:C2:50:9F:A7:03:21:1C:0D:8B:25:EB:F0:A5:9E:CC:FB:F4:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdjCUJ-nAyEcDYsl6_Clnsz79HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/BdjCUJ-nAyEcDYsl6_Clnsz79HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/BdjCUJ-nAyEcDYsl6_Clnsz79HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4a:b6:fe:6a:c2:6c:47:c3:93:ca:1b:2b:f2:46:17:f9:63:
f9:67:e6:9e:ec:52:50:8b:4a:22:5c:2e:d6:03:89:d5:31:5c:
d6:d1:b0:22:e7:0e:1f:48:fe:32:f3:e7:4f:79:cc:d7:a2:f3:
f6:f7:27:73:c2:e8:da:6e:b0:1b:d0:7a:f1:30:96:2e:e7:23:
6b:6b:16:fa:e0:3a:4c:6a:36:18:50:b0:ee:a8:b7:96:ba:ed:
25:15:4b:da:bb:bf:d2:0a:be:f4:c0:f8:ce:af:9d:6d:04:78:
88:d4:8a:44:31:24:73:06:ef:07:0e:56:fb:15:e8:bd:31:20:
94:90:fb:10:89:0d:12:fd:ae:0c:e6:1e:57:48:67:00:17:03:
d4:39:8c:4b:7c:a4:db:1b:c4:0b:0e:2f:84:d2:b8:ee:7b:fb:
19:19:c0:52:d2:c8:74:88:35:9e:c2:13:15:0c:3f:6b:68:78:
af:93:86:68:03:17:2e:08:39:f4:a0:c4:1c:2a:4d:96:9d:2b:
96:b7:9b:b0:ee:b3:44:5e:19:6d:68:65:c5:b8:5e:08:2f:ae:
0c:43:db:e2:bf:fb:7f:81:d5:d7:c9:52:8f:d8:7b:1a:e0:e3:
24:96:9d:0c:6a:3c:92:69:c1:e2:73:f9:22:c4:39:37:fe:0a:
0d:48:95:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PftIbzGmQOS03hLPew4ozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZDhjMjUwOWZhNzAzMjExYzBkOGIyNWViZjBhNTllY2Nm
YmY0NzAwHhcNMjYwNzIzMTUwMTIwWhcNMjYwNzI0MTUwMTIwWjAzMTEwLwYDVQQD
Eyg5N2YzZmE2ZTI4NWEwODY2YjliNGYyMDJhYzg2YzJhOGI3NTVkMTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsluG/Akn1VTOMOyRhnxovioCg6Z/
4X0M/Dn/V+GoOuqexyMIfyfQVKvLqJ+dhmUvYlvtlc41qKQ6FWniOzCVwtXfRZbX
DXwiN5b8/Dd0SLBOcqoEal6O87Buk1tJSFMs2XuyTTk/0wHrs5mHmyctPkKRfB13
aiP3LkyQO6MUjc/mMhAPpwQP1lzeiJuZr3KrWKO9a0qkEvUTRzifjnVvcrn/bdgf
MhZcQqAiojr/3wyl+t71lF94y1qKXhZ+NMXMSUoTIQzuuvF453B9ZWoMKNkneX/f
BmiaKQCZl8v2R6l0q5L0eXOioSK2/z5wyLqwV0fUcRErbgW8AjZYCgddVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfz+m4oWghmubTyAqyGwqi3VdFeMB8GA1UdIwQY
MBaAFAXYwlCfpwMhHA2LJevwpZ7M+/RwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmRqQ1VKLW5BeUVjRFlzbDZfQ2xuc3o3OUhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83YmY2ODktODJmYy00ODE2LThlY2Ut
MWVjZDk5MThiM2E2LzEvQmRqQ1VKLW5BeUVjRFlzbDZfQ2xuc3o3OUhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83YmY2ODktODJmYy00ODE2LThlY2UtMWVjZDk5MThiM2E2
LzEvQmRqQ1VKLW5BeUVjRFlzbDZfQ2xuc3o3OUhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0q2/mrC
bEfDk8obK/JGF/lj+WfmnuxSUItKIlwu1gOJ1TFc1tGwIucOH0j+MvPnT3nM16Lz
9vcnc8Lo2m6wG9B68TCWLucja2sW+uA6TGo2GFCw7qi3lrrtJRVL2ru/0gq+9MD4
zq+dbQR4iNSKRDEkcwbvBw5W+xXovTEglJD7EIkNEv2uDOYeV0hnABcD1DmMS3yk
2xvECw4vhNK47nv7GRnAUtLIdIg1nsITFQw/a2h4r5OGaAMXLgg59KDEHCpNlp0r
lrebsO6zRF4ZbWhlxbheCC+uDEPb4r/7f4HV18lSj9h7GuDjJJadDGo8kmnB4nP5
IsQ5N/4KDUiV9g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:18 2026 by rpki-client