Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
File: BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json)
Hash identifier: qeG33kQcdtMs/R300LUgQzlBq+7lJdqUnEt9IC2g+Qw=
Subject key identifier: BC:1C:AB:1E:AE:D2:87:1C:2D:62:35:3E:2E:52:FD:99:04:DD:D8:52
Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
Certificate issuer: /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Certificate serial: 019D262849C5CE48727C8B7DB94121897C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
Manifest number: 1565
Signing time: Wed 25 Mar 2026 18:01:07 +0000
Manifest this update: Wed 25 Mar 2026 18:01:07 +0000
Manifest next update: Thu 26 Mar 2026 18:01:07 +0000
Files and hashes: 1: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: 8XxbDLA9BBBxLpOJ7hqvxQdLxMvZybWMbmv8HyBBchI=)
2: ue1Yig8TYgxiOV1FxPhvIsY035g.roa (hash: 3msZkfxcU6jcS509BBjupbbAc7uKaBkwJ1wFsWgzHXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:49:c5:ce:48:72:7c:8b:7d:b9:41:21:89:7c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Validity
Not Before: Mar 25 18:01:07 2026 GMT
Not After : Mar 26 18:01:07 2026 GMT
Subject: CN=bc1cab1eaed2871c2d62353e2e52fd9904ddd852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4a:ad:9d:e5:e4:de:0c:fd:97:da:91:e8:7b:
e5:55:64:81:d4:90:da:75:26:0d:42:f9:ed:24:de:
73:e0:9b:4b:da:72:55:44:90:6c:29:d7:76:2e:f5:
34:ff:58:32:44:ec:44:17:85:12:c5:54:ab:be:fd:
b2:ef:e1:ad:1f:3f:0a:f8:97:8a:f7:8a:af:ca:e2:
8b:7c:5f:3e:3a:6b:e1:67:0b:8c:e4:f2:9a:82:44:
b4:c5:b2:5e:e3:07:ee:8f:62:02:df:d5:67:3d:33:
23:83:68:66:db:65:9b:13:84:dd:12:b8:51:7e:d2:
8f:72:3e:f7:bd:79:1e:d2:4f:ce:7a:a6:e0:e0:48:
09:1d:b8:96:04:6a:1d:27:b5:42:99:22:15:6e:73:
64:b1:ac:44:d7:90:2a:99:58:19:48:48:a9:0e:65:
6d:8c:cc:7e:7f:21:5b:16:ad:49:71:4d:e6:28:7e:
4a:b0:24:34:0c:f6:0c:48:21:71:2f:a5:2e:df:fa:
02:a3:c8:05:7c:a0:59:a2:f7:58:77:47:62:b7:3e:
e4:39:8c:2f:95:d0:e8:8f:f8:71:5e:7c:a6:d7:df:
4a:e7:2a:1d:ad:8a:21:50:fa:95:6c:1e:83:d1:fc:
51:1a:51:30:cb:dd:d5:0c:f6:96:8e:1f:8e:ff:f5:
ff:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1C:AB:1E:AE:D2:87:1C:2D:62:35:3E:2E:52:FD:99:04:DD:D8:52
X509v3 Authority Key Identifier:
keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:de:9f:76:8d:3c:b7:f8:79:0d:9b:65:fa:9a:18:c5:c2:8e:
84:59:de:80:f9:1a:50:a2:92:e7:d1:a6:e6:bc:a5:1a:d4:a0:
9c:f4:53:78:f1:7a:fc:6b:b4:b2:9b:01:91:2f:dc:16:4b:79:
3e:38:77:ac:bf:2a:a1:67:e9:3b:97:7e:02:4e:54:15:c2:e7:
7c:ac:c3:28:ad:b6:47:36:89:f4:e5:46:5b:ca:73:b1:77:06:
e7:d6:be:d2:cf:19:a2:44:38:13:6c:05:86:33:f5:34:78:a4:
83:d2:d1:77:03:c1:9b:d0:96:36:49:81:af:08:a4:48:2c:23:
3b:89:58:a5:27:96:6d:a8:d6:dd:09:c8:3e:cf:1f:ab:73:f8:
d3:75:de:6d:6b:ec:e3:35:34:9c:4f:2c:39:f6:fc:a4:74:da:
20:24:da:bd:50:2a:16:9c:39:eb:99:40:52:56:18:e5:13:9f:
b1:fd:74:63:39:54:88:4e:d6:cb:3c:db:75:a6:bd:89:40:5f:
b4:43:ad:d3:a4:b0:c6:80:85:c7:e4:78:63:42:73:cf:e4:6f:
e2:3f:eb:f2:6c:38:16:1a:78:05:49:bf:08:ac:26:39:df:9c:
46:80:86:ef:94:aa:98:ba:18:77:f7:81:da:3d:10:2d:fb:30:
85:10:90:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:37 2026 by rpki-client