Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.mft
File: BJt80UY9tia6isf5o9hzPbDdgSQ.mft (raw, json)
Hash identifier: hfkEp8gMAOQX3BD0cHj2i2zrcKkDevt2uFcQpjmp6xM=
Subject key identifier: C8:45:A8:FB:29:84:2A:48:50:5B:58:10:01:3B:6A:88:E9:73:EA:89
Authority key identifier: 04:9B:7C:D1:46:3D:B6:26:BA:8A:C7:F9:A3:D8:73:3D:B0:DD:81:24
Certificate issuer: /CN=049b7cd1463db626ba8ac7f9a3d8733db0dd8124
Certificate serial: 019F8F7E9090B78682602138DA0AB12DBA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJt80UY9tia6isf5o9hzPbDdgSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:04 +0000
Manifest this update: Thu 23 Jul 2026 15:01:04 +0000
Manifest next update: Fri 24 Jul 2026 15:01:04 +0000
Files and hashes: 1: 2P7SaJMcXsPyw8VXwK7lvJ92E84.roa (hash: De3uii83QPlU8l4wx/dhaSH5u2nnOc8fYmv6y+0gSd4=)
2: BJt80UY9tia6isf5o9hzPbDdgSQ.crl (hash: wqd71NaGllTKY2YE7eyr5YFf1XVRfXtkWC8SdAQ/iTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJt80UY9tia6isf5o9hzPbDdgSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:90:90:b7:86:82:60:21:38:da:0a:b1:2d:ba:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049b7cd1463db626ba8ac7f9a3d8733db0dd8124
Validity
Not Before: Jul 23 15:01:04 2026 GMT
Not After : Jul 24 15:01:04 2026 GMT
Subject: CN=c845a8fb29842a48505b5810013b6a88e973ea89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:60:b6:3c:c3:71:6b:ea:da:b8:f0:e1:56:e1:
84:33:a6:7f:0a:71:b3:cb:56:d2:2d:54:bf:7f:e4:
c8:b1:42:6f:87:c4:bc:f9:f0:2b:b1:a9:c7:70:f1:
f4:13:fc:c7:65:94:a9:c4:74:79:ba:ec:e0:1f:e7:
1d:88:66:3b:d2:09:8f:88:33:a5:6e:fd:42:41:55:
8a:cf:14:d5:4b:d7:97:6c:08:56:07:57:d5:5d:e0:
3d:12:b0:91:1d:2b:35:2b:6d:1d:db:13:85:68:45:
c5:65:7a:c6:a8:7e:eb:69:c5:05:3f:92:ac:d5:ca:
eb:9a:a0:b8:e2:e0:9b:8e:74:46:76:6c:ce:52:48:
24:04:72:d6:3c:c4:27:3d:90:9d:f5:6b:f6:b3:9b:
eb:16:65:8c:2b:84:1d:65:bc:43:6d:f9:6f:5d:db:
1a:dd:b8:26:b2:47:1e:5c:04:32:dc:ee:46:57:ad:
5b:ee:b4:11:57:db:ea:30:81:89:06:0e:64:39:5f:
e6:fb:ab:b2:5b:8e:ef:d8:0f:f6:45:43:ba:75:48:
fa:43:d6:e6:e5:30:e8:7b:f9:e1:22:46:7e:e0:91:
8a:01:4e:43:3c:f8:bd:25:d3:3a:6a:8c:32:38:ce:
85:61:98:59:d6:c3:ab:ba:92:b3:cf:54:1d:66:10:
bf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:45:A8:FB:29:84:2A:48:50:5B:58:10:01:3B:6A:88:E9:73:EA:89
X509v3 Authority Key Identifier:
keyid:04:9B:7C:D1:46:3D:B6:26:BA:8A:C7:F9:A3:D8:73:3D:B0:DD:81:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJt80UY9tia6isf5o9hzPbDdgSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/BJt80UY9tia6isf5o9hzPbDdgSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:33:ad:58:16:84:84:1f:e9:5a:48:7b:46:2f:0b:be:26:7d:
60:a9:fe:df:84:42:64:48:71:b3:c3:7a:6d:18:a4:d3:f0:cf:
e8:ff:04:aa:dd:17:e3:a1:83:ea:d6:10:43:a7:73:71:30:ab:
6c:34:c6:83:38:a9:2f:e5:17:f0:65:29:28:9f:a0:6e:ed:f9:
5a:6b:93:75:2d:1d:42:9d:2c:86:bf:a1:bc:38:da:70:eb:ca:
c0:e9:23:a7:6f:90:fd:43:55:57:89:fb:06:46:2e:0e:35:02:
56:19:2b:62:54:f7:3b:c0:5c:a4:12:ed:72:bc:05:c1:49:98:
be:05:9a:e8:93:33:40:87:67:9c:46:a3:38:41:e9:4e:48:a3:
2b:bc:66:65:03:f1:dc:05:8e:2c:b1:71:2c:9b:7c:fa:13:ae:
dc:db:90:ee:ff:9b:8a:16:a9:f6:5b:0e:54:fd:8c:cf:af:41:
ec:d5:dc:21:5f:30:08:95:2e:24:13:a7:22:a4:07:a7:94:3e:
9f:5d:53:39:89:cd:18:26:97:37:2b:d1:c8:c1:b8:5a:17:b6:
c6:c2:ba:32:aa:a7:94:8d:fa:87:fe:bd:a4:db:a0:8b:53:57:
23:da:7d:8b:65:4c:2e:5a:c4:9a:3c:f5:2d:ef:a7:e0:9b:d3:
5b:2f:54:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:26:34 2026 by rpki-client