Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
File: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft (raw, json)
Hash identifier: HmyIv9dqAaSh8822i/QkyJCi7fST7LRQ81Od6MI8lCU=
Subject key identifier: 33:3E:DE:AF:9C:0F:A2:2A:C4:05:90:A4:D1:26:B6:1A:03:39:EE:97
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial: 019F905A5292BC7A33366EAEAB89885586B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 19:01:06 +0000
Manifest this update: Thu 23 Jul 2026 19:01:06 +0000
Manifest next update: Fri 24 Jul 2026 19:01:06 +0000
Files and hashes: 1: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl (hash: 5XXDDmsIoG3ePobf2pND0xx85v3Glh4+CW9eZ9fOdfI=)
2: MJnpHwqWRCcgwA2k13dIsZbF1wg.roa (hash: PFwAyy/D0gAKEytNprzS6x7dl1CAJgdTy4faTQEJoSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:52:92:bc:7a:33:36:6e:ae:ab:89:88:55:86:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
Validity
Not Before: Jul 23 19:01:06 2026 GMT
Not After : Jul 24 19:01:06 2026 GMT
Subject: CN=333edeaf9c0fa22ac40590a4d126b61a0339ee97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3c:ed:0f:07:63:d3:66:79:4f:29:85:07:c4:
94:91:01:3f:a8:07:98:09:aa:1a:98:7c:45:54:10:
33:38:b5:a7:09:8e:61:f9:85:1d:d8:15:d1:36:c9:
c5:4a:80:8d:f7:b2:c1:4f:b8:2c:ab:23:fc:1b:ef:
36:97:2f:da:6b:87:14:dc:b6:f7:26:61:b2:9e:e5:
5b:70:ce:c4:9f:e4:42:6d:00:9a:b1:75:09:14:28:
9b:d2:3e:0b:a6:21:a9:1d:44:78:0d:7a:b9:2d:ab:
d4:84:37:80:1c:52:3d:5c:08:d9:15:17:b8:4b:bb:
f2:83:10:7f:59:38:13:6d:63:86:40:24:5a:4e:4c:
7c:a2:d0:92:d1:fa:2c:95:32:71:8b:ea:7f:06:ce:
ec:bc:f7:9b:68:c4:3a:20:ee:af:c8:94:9a:d1:71:
ea:52:cc:ce:fc:8d:af:29:b7:63:f4:5a:b1:16:d6:
f6:cf:f5:82:66:13:c7:cf:54:34:16:fb:13:f1:e6:
04:98:fb:fe:6a:d4:7e:6b:4a:60:e3:a4:c9:a3:ab:
d4:a4:c4:bc:d9:78:92:2c:01:29:66:be:d1:3b:fe:
a5:8a:24:ce:cd:7d:20:62:4a:17:42:74:89:08:39:
a6:f3:cd:10:3c:60:55:f1:0c:e3:e2:5d:d6:f8:6e:
d7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3E:DE:AF:9C:0F:A2:2A:C4:05:90:A4:D1:26:B6:1A:03:39:EE:97
X509v3 Authority Key Identifier:
keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0d:a5:95:4f:50:77:16:c1:4f:db:d4:42:60:ec:1c:27:73:
2e:f7:6e:0c:23:6f:12:73:3d:f0:a0:ae:67:a2:b3:c6:99:87:
cf:1e:92:c2:0f:38:d5:3b:fd:d3:c5:0e:b7:a6:d6:74:7a:f4:
97:40:75:77:4a:db:91:d6:fe:4d:f7:b4:c7:4c:b2:7b:2c:a8:
8b:d9:f0:c4:2b:ce:d6:05:ea:43:0e:d1:33:b8:33:5c:8d:66:
6b:98:4f:78:f7:f6:21:e9:77:5d:b5:ad:3b:e5:80:95:5c:b1:
d0:f1:d6:eb:52:10:4a:0a:5b:9a:02:98:7c:32:02:09:05:f3:
49:6c:c2:b3:7c:d1:77:2c:6b:22:f8:8f:e5:10:99:3f:e8:09:
99:a5:1f:0a:d0:e1:c0:45:90:d2:ea:fb:5f:44:a0:ce:d9:9b:
b9:74:62:df:2e:1d:89:13:5f:bb:a5:9e:d0:fa:7f:66:da:e7:
88:db:e2:0c:17:9a:c0:a1:ae:f5:e6:c4:6a:21:36:fa:63:3b:
d2:b2:d8:3b:59:b7:5f:29:9f:c6:2b:43:99:88:18:eb:1a:30:
22:c5:eb:64:c6:66:eb:b1:44:9b:4e:89:b3:68:ba:e7:b1:a3:
21:2b:7f:e8:06:97:25:94:7d:d5:3e:d9:7e:d5:20:45:69:75:
cd:bc:a2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:21 2026 by rpki-client