Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: bp75lsqKAH2m/BTTgrKKTaF23U9uMv2hsw7k49JxTwM=
Subject key identifier: B4:32:0D:97:EA:0F:BC:CD:1C:4E:34:89:DA:5C:92:3E:A6:4F:2D:10
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 019F91A3A1F005778375DD0221EE9E54C3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 13FD
Signing time: Fri 24 Jul 2026 01:00:47 +0000
Manifest this update: Fri 24 Jul 2026 01:00:47 +0000
Manifest next update: Sat 25 Jul 2026 01:00:47 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: aKzOfyZ/LDPLUx5J/dBZaBzadJN+E3/6CJxvMlKfJb8=)
2: K7kf19E8RqOIuQDE1HXceZnfBS4.roa (hash: qUFiFBy2dkZP8rGX/6QQZpm3Sx7bmtP7VKzuR3jDVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:a1:f0:05:77:83:75:dd:02:21:ee:9e:54:c3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Jul 24 01:00:47 2026 GMT
Not After : Jul 25 01:00:47 2026 GMT
Subject: CN=b4320d97ea0fbccd1c4e3489da5c923ea64f2d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d2:ac:d9:fe:d9:b2:36:48:c5:5e:a2:b3:d0:
0c:74:a0:5a:50:21:bd:a7:fc:59:9b:04:ea:26:f1:
d0:42:13:eb:df:a6:e9:70:76:03:65:b9:04:7b:b0:
56:c7:40:d0:04:e9:4f:9f:e0:d3:83:98:4d:f2:e6:
77:24:fb:98:7a:14:00:03:d5:48:1b:39:f7:49:4a:
bd:b4:05:74:48:8d:1d:74:39:a1:f1:05:8c:bb:fc:
93:fe:36:d0:1f:af:2d:a4:4b:20:b6:6c:72:73:d6:
47:ff:39:48:6b:b9:89:65:82:d6:0d:41:72:72:ef:
07:e7:99:be:ef:3d:3c:8a:ea:cd:e7:11:0d:e3:17:
a3:71:5a:99:d0:07:09:c7:85:5e:52:35:d9:b4:b8:
ee:44:2d:3f:f9:be:64:66:a7:1a:04:51:96:ec:be:
37:fd:44:26:97:a7:3f:81:d7:40:cd:98:c0:68:99:
a1:fa:29:1f:a6:ac:01:1c:cd:77:a2:d8:48:b1:3b:
4a:42:43:a1:ce:78:41:17:47:87:b6:1a:80:9e:ad:
d7:6e:21:31:0f:37:be:64:5f:46:d4:81:88:19:3b:
b9:db:8f:1e:26:d6:e1:d0:56:a3:99:63:67:df:09:
0f:7d:62:b4:87:a4:a4:ec:0f:1c:d7:85:d4:25:17:
36:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:32:0D:97:EA:0F:BC:CD:1C:4E:34:89:DA:5C:92:3E:A6:4F:2D:10
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:30:fd:83:f7:4f:36:33:09:b0:61:03:71:d5:22:eb:6b:94:
3a:c0:b9:37:5a:90:fe:0d:61:1b:fd:d8:1b:7b:14:a8:8e:2a:
a1:54:50:27:43:78:f9:39:36:45:91:f7:e1:26:15:57:1b:d3:
6d:ef:ec:25:ef:00:f7:04:69:91:97:9f:80:f1:d8:43:8b:bb:
61:4c:fa:d8:6f:ff:cf:ae:e0:69:32:08:d9:d7:34:a7:a8:47:
e0:85:0b:d6:7a:2f:b0:8e:27:95:30:ce:85:08:5b:a4:0f:08:
06:75:be:65:b0:58:ec:46:b5:1d:ed:37:73:cf:fa:03:1b:03:
84:c0:6e:33:bd:47:12:5d:e1:28:04:a1:10:e3:9d:f1:d8:e2:
f1:9c:63:bb:d4:fa:99:c2:00:92:97:f7:a3:aa:07:c5:85:51:
a2:57:6a:3a:b5:c8:7b:d5:84:f9:01:5d:cd:03:cd:f0:72:31:
71:e3:c7:01:fd:8d:4d:a9:49:2a:86:7a:0f:0c:77:31:4c:09:
b2:e2:ce:52:4b:43:3d:44:44:35:9a:fb:e7:5e:3f:93:95:fd:
9e:54:76:d1:6e:33:e2:90:fc:f0:0e:e2:59:d0:96:a0:e2:93:
6c:b3:a1:f5:42:74:4b:2a:a4:74:46:b0:81:50:35:84:e5:b8:
5d:7f:48:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:27:40 2026 by rpki-client