Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
File: Bjc-uCHJZromeoONlS_EpBjLoQc.mft (raw, json)
Hash identifier: C/Exh+Zj/TSBYFZpgE7R+a01xLZMtZQ0C27v7JpU2wM=
Subject key identifier: F5:88:9A:34:EF:F0:3B:8B:E4:48:F3:44:DC:89:A3:69:5D:CB:DC:C8
Authority key identifier: 06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
Certificate issuer: /CN=06373eb821c966ba267a838d952fc4a418cba107
Certificate serial: 01A0CE9197F4B7C393A3B3440C54BEC55860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 14:00:43 +0000
Manifest this update: Wed 23 Sep 2026 14:00:43 +0000
Manifest next update: Thu 24 Sep 2026 14:00:43 +0000
Files and hashes: 1: Bjc-uCHJZromeoONlS_EpBjLoQc.crl (hash: 3ioYa1vY65DQmLkE1T0GPT4YhkoIB5xxTPic+q7dzU8=)
2: nE1ecoHCr0ohx7PmOrxsros4YrQ.roa (hash: lj8cnvzdQ0C14+FMuBCsMEdb4FCPBx82iuKKh+tVyos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:97:f4:b7:c3:93:a3:b3:44:0c:54:be:c5:58:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06373eb821c966ba267a838d952fc4a418cba107
Validity
Not Before: Sep 23 14:00:43 2026 GMT
Not After : Sep 24 14:00:43 2026 GMT
Subject: CN=f5889a34eff03b8be448f344dc89a3695dcbdcc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:b1:27:bf:60:e7:12:94:1c:f0:ca:78:8a:
a2:ef:c0:fc:19:b5:94:b2:4b:3e:11:fc:f8:59:f4:
c2:e9:72:63:a1:fa:4e:a7:c8:fe:ad:38:56:9c:36:
ca:3b:0c:8a:9a:30:2f:74:6c:ae:64:32:4b:78:b8:
9c:14:1f:c8:50:28:5b:58:c0:bc:ee:4f:0c:0b:9e:
f0:c7:89:9f:99:b4:9f:d4:af:cb:2f:53:9b:e4:ba:
1e:ef:71:f5:52:ce:83:e3:d5:83:39:99:81:15:1e:
e2:61:ee:e4:01:bf:49:84:c7:a9:e9:df:2a:60:1e:
8b:ce:81:49:ef:01:4f:a7:15:10:c4:7b:e9:44:6d:
9d:b5:62:bb:34:3e:8c:ca:ef:64:c6:73:81:e5:e7:
87:c9:80:24:c6:63:55:47:9b:26:f3:56:b2:4f:34:
c6:95:2a:d9:37:f7:72:51:c0:c8:89:40:c1:b9:8e:
22:8f:8f:63:41:cd:d7:a3:8c:f2:56:03:26:4c:87:
3d:79:d7:51:6d:a5:1e:1d:1d:b5:83:1e:f3:38:cd:
97:f7:7d:85:6f:ee:a2:4c:34:23:96:dc:f2:c5:48:
f6:6e:61:ec:3e:99:f7:cf:34:3a:5f:47:80:54:55:
60:06:e3:64:99:04:76:73:fc:80:43:09:28:a4:f7:
2b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:88:9A:34:EF:F0:3B:8B:E4:48:F3:44:DC:89:A3:69:5D:CB:DC:C8
X509v3 Authority Key Identifier:
keyid:06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:45:d9:26:2a:22:bb:fc:79:b7:ea:ee:df:5b:d0:06:4f:ec:
10:c2:32:2c:6d:66:fc:1d:b8:eb:7f:dd:f6:ff:ff:b5:48:0b:
bd:ad:b5:23:ba:c4:d8:8f:8c:fe:fc:93:ea:cc:2f:ad:d6:01:
77:0c:6f:92:96:f5:1b:92:98:14:de:54:ee:8d:54:b8:d9:32:
b4:06:54:6f:15:20:08:53:a8:ee:aa:80:f1:b7:2a:eb:28:79:
cf:b7:0a:92:bf:3a:53:60:ce:27:c5:ff:15:0f:cb:f4:7d:d5:
65:75:11:bf:b6:0e:53:85:64:3b:df:73:23:f6:bd:67:60:6c:
9c:2d:dc:3f:fd:0e:33:5b:70:c8:02:15:31:6a:43:af:b0:84:
f5:4b:eb:c3:01:ca:cd:1a:ba:26:e4:b6:7e:47:4a:03:f5:62:
52:be:fd:9a:ca:32:e4:6d:f9:f2:b3:88:f5:c5:e3:fe:b1:88:
7f:60:f8:1b:34:80:c4:52:d8:eb:5e:95:af:1b:02:07:9f:58:
eb:ed:7a:a6:6e:e4:d9:a6:0d:73:f6:71:62:df:a0:ae:43:0f:
46:64:b8:26:09:1c:8a:19:bb:7b:46:68:45:2c:09:4a:7e:4d:
4b:85:4a:b1:c4:ee:6d:3d:6f:3b:03:73:c3:ea:cc:ff:0d:9a:
83:33:5c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:20:36 2026 by rpki-client