Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
File: Bjc-uCHJZromeoONlS_EpBjLoQc.mft (raw, json)
Hash identifier: nMLnHnsBiPwmN9lq1a1De1NmDXsU3OlvS+CuQAD7Qmc=
Subject key identifier: D6:2B:C4:79:E2:6C:F6:B6:4B:F2:26:D3:32:7A:88:D8:B4:D2:BA:39
Authority key identifier: 06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
Certificate issuer: /CN=06373eb821c966ba267a838d952fc4a418cba107
Certificate serial: 01A1DEDE8F9EA7861783B736B6F7CDE70812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 11:01:30 +0000
Manifest this update: Sun 15 Nov 2026 11:01:30 +0000
Manifest next update: Mon 16 Nov 2026 11:01:30 +0000
Files and hashes: 1: Bjc-uCHJZromeoONlS_EpBjLoQc.crl (hash: /onjIHq1yHGSd63JcT3xuLRbwji2fuAkwYEdvDj6hlA=)
2: nE1ecoHCr0ohx7PmOrxsros4YrQ.roa (hash: lj8cnvzdQ0C14+FMuBCsMEdb4FCPBx82iuKKh+tVyos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:8f:9e:a7:86:17:83:b7:36:b6:f7:cd:e7:08:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06373eb821c966ba267a838d952fc4a418cba107
Validity
Not Before: Nov 15 11:01:30 2026 GMT
Not After : Nov 16 11:01:30 2026 GMT
Subject: CN=d62bc479e26cf6b64bf226d3327a88d8b4d2ba39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:b1:0d:88:ba:2a:3e:05:2a:6b:21:01:5a:
01:61:bf:56:18:ba:a2:ac:eb:10:a5:e3:59:ff:94:
d4:ec:de:56:4a:bc:d2:23:85:f0:6e:6c:90:d6:05:
42:fb:e5:4e:8c:b5:8c:69:e2:c7:ef:93:85:30:1a:
ac:59:30:8a:2a:06:b3:58:c7:77:e1:d7:26:a3:d2:
4e:e0:88:bd:18:98:8c:47:32:6d:eb:eb:39:3e:03:
db:17:bc:21:b2:68:be:96:d9:2e:3d:22:45:4f:ec:
56:e4:29:d5:d7:1e:76:4f:41:f6:92:ba:c4:63:1f:
e0:e9:43:f3:b9:f2:a3:0b:66:e5:20:a4:49:21:a7:
1e:c0:1f:6a:c5:e3:f1:f3:5f:3a:e8:3d:1f:84:a9:
1e:fe:da:ea:1d:8c:69:f0:84:16:7f:7b:5f:62:6b:
56:1d:ef:fe:b5:8d:69:52:8f:4d:71:7a:46:59:e1:
4b:ac:a1:35:df:51:19:5f:5f:af:8d:43:24:69:31:
52:ac:19:77:3c:30:93:e3:d4:6c:6d:24:1a:8c:e1:
81:03:0d:a8:31:cb:c4:e2:c3:66:41:19:4f:82:23:
2d:25:b7:60:c5:07:95:80:9b:43:dd:f3:47:83:68:
06:7d:db:83:41:a9:13:a9:ac:88:0b:79:2d:c4:ea:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2B:C4:79:E2:6C:F6:B6:4B:F2:26:D3:32:7A:88:D8:B4:D2:BA:39
X509v3 Authority Key Identifier:
keyid:06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:57:c5:58:77:d9:51:f9:6c:27:32:ba:b6:42:d3:36:7e:42:
00:ae:72:8f:15:1e:9c:0c:0e:a1:8d:51:87:30:ca:d8:6f:45:
b9:2e:58:95:c4:bb:92:4a:27:77:8f:65:43:b0:b4:34:e2:38:
0b:c9:aa:0e:44:06:e0:b8:1c:1b:69:28:88:f1:c5:68:3a:62:
d0:a0:f5:dd:5f:a6:0b:15:74:74:95:9a:6b:f5:f0:46:45:3a:
e1:f8:a7:e3:9a:5e:0e:4f:75:11:fa:0e:95:67:0c:b3:10:2a:
45:e9:4c:35:46:b4:88:dd:ed:c1:fc:82:81:3e:9f:c7:65:d4:
2c:39:06:50:a7:a6:63:9c:fd:0e:52:5c:5f:03:da:bb:cd:30:
28:3d:1a:d6:07:9e:23:e8:df:ab:38:d3:5c:60:ef:09:ad:ab:
ba:ad:03:f5:b9:99:55:12:60:24:1f:14:5d:e3:00:02:99:38:
ee:c6:77:99:1d:a5:ed:11:77:da:bf:b4:e3:0a:70:7f:7d:89:
fe:9b:57:fc:9e:fa:88:08:cb:b5:a9:20:37:b9:be:8e:39:d8:
79:72:a4:c7:7a:b7:2c:21:d7:cd:8a:1c:70:bf:13:85:56:d8:
26:81:b9:f5:d9:f0:7c:ab:b7:d2:af:5d:01:9a:f8:72:df:fb:
ee:2e:af:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:32:36 2026 by rpki-client