Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: AvHBuEP7jS0d633J/d1FITsG4yR5T8XGpQuZvP+5qpM=
Subject key identifier: 6B:F8:62:93:A6:5A:5F:D7:C3:84:5B:0B:02:A7:21:A3:04:C3:93:23
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 019D27A8765A3EC14A6930080C0E1D6CB90A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 12BD
Signing time: Thu 26 Mar 2026 01:00:44 +0000
Manifest this update: Thu 26 Mar 2026 01:00:44 +0000
Manifest next update: Fri 27 Mar 2026 01:00:44 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: bzUHm67m9Df9Ro2cSCmeji7wCgZBTpp4sOuzvkCbxLM=)
2: K7kf19E8RqOIuQDE1HXceZnfBS4.roa (hash: qUFiFBy2dkZP8rGX/6QQZpm3Sx7bmtP7VKzuR3jDVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:76:5a:3e:c1:4a:69:30:08:0c:0e:1d:6c:b9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Mar 26 01:00:44 2026 GMT
Not After : Mar 27 01:00:44 2026 GMT
Subject: CN=6bf86293a65a5fd7c3845b0b02a721a304c39323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:2a:b4:ea:73:c6:4c:ee:71:88:04:c8:71:
76:ed:f2:86:70:89:d2:bc:1f:01:de:d0:c2:f5:ac:
87:1c:20:43:a4:22:c1:4b:04:e5:23:c0:b5:a9:84:
57:39:51:41:85:a4:11:35:39:c1:46:8b:93:86:95:
2c:c9:e7:c7:0e:b7:92:57:25:69:e8:8f:96:26:37:
11:da:87:a9:9b:e6:83:b0:d6:d9:ad:2f:11:d9:da:
5e:ae:ae:85:a6:95:c2:84:74:e1:13:45:6c:ff:79:
26:9f:de:ed:2e:58:41:83:29:a9:7f:0f:3e:d8:ee:
8f:8c:5d:03:1d:df:7e:a8:48:ad:af:f9:19:e2:c5:
36:24:e7:e6:71:c2:16:36:03:85:8a:6f:eb:4e:dd:
06:5e:8b:07:82:ba:55:b2:2b:9f:41:10:2e:dc:98:
63:19:37:2c:ee:41:da:19:cb:eb:0d:c4:b6:7a:77:
03:b1:95:b8:6b:d8:d0:62:da:b6:3e:c8:57:04:95:
81:63:50:65:43:81:68:67:aa:96:eb:4a:91:1a:c7:
81:47:88:d6:77:99:c3:9f:3c:5a:1c:21:29:63:05:
0c:20:fc:cc:44:a8:43:29:76:69:88:f4:66:af:f7:
8b:d4:4f:bd:d2:42:de:e7:9a:17:a2:c6:60:30:2e:
b7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F8:62:93:A6:5A:5F:D7:C3:84:5B:0B:02:A7:21:A3:04:C3:93:23
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c9:d7:ea:46:8a:2e:66:2a:e3:c7:3d:51:62:32:4a:4e:07:
e3:2a:a5:67:50:a7:e6:14:d3:c7:15:fc:34:43:67:47:eb:6e:
1e:c0:be:69:33:c7:df:6f:6d:41:93:29:4f:1d:6d:f9:7e:9b:
3a:4f:9c:2c:58:51:20:6d:df:f0:e7:29:32:18:b3:39:19:47:
d9:d6:30:19:53:ca:bf:f7:a5:55:56:f2:0b:0b:26:10:09:9c:
24:92:67:90:c4:73:66:76:eb:0f:f4:82:b3:c9:bf:46:0b:0a:
84:7d:b5:a4:05:ea:83:a7:8b:b2:75:69:bb:a6:5b:90:b2:f2:
80:c9:ce:71:8f:0d:a1:07:b4:7e:96:c7:78:76:af:1b:6a:24:
16:df:d3:bb:12:8f:5a:a0:38:d1:2f:6f:27:c1:0e:80:b7:95:
28:1f:35:28:83:19:6b:e1:91:18:08:e6:d4:d7:ec:4d:ad:c1:
89:ec:88:1f:80:c2:2a:93:82:73:c2:17:35:1d:41:f2:06:c5:
7a:21:eb:4e:a0:a4:2e:f8:16:6e:e2:50:0a:20:d9:77:41:45:
89:88:3f:53:fc:86:9d:e5:97:10:1d:7f:c1:4d:55:aa:d1:6d:
6a:5c:56:6c:35:b1:6b:2d:6b:7d:57:4f:18:75:90:52:86:5a:
97:2a:ce:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqHZaPsFKaTAIDA4dbLkKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MzI1NDIyMjFjYWVmNjQ0OGNjNTQ1MjE0ZTAwMDA3MWJk
NTZiODYwHhcNMjYwMzI2MDEwMDQ0WhcNMjYwMzI3MDEwMDQ0WjAzMTEwLwYDVQQD
Eyg2YmY4NjI5M2E2NWE1ZmQ3YzM4NDViMGIwMmE3MjFhMzA0YzM5MzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1sqtOpzxkzucYgEyHF27fKGcInS
vB8B3tDC9ayHHCBDpCLBSwTlI8C1qYRXOVFBhaQRNTnBRouThpUsyefHDreSVyVp
6I+WJjcR2oepm+aDsNbZrS8R2dperq6FppXChHThE0Vs/3kmn97tLlhBgympfw8+
2O6PjF0DHd9+qEitr/kZ4sU2JOfmccIWNgOFim/rTt0GXosHgrpVsiufQRAu3Jhj
GTcs7kHaGcvrDcS2encDsZW4a9jQYtq2PshXBJWBY1BlQ4FoZ6qW60qRGseBR4jW
d5nDnzxaHCEpYwUMIPzMRKhDKXZpiPRmr/eL1E+90kLe55oXosZgMC63GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGv4YpOmWl/Xw4RbCwKnIaMEw5MjMB8GA1UdIwQY
MBaAFAYyVCIhyu9kSMxUUhTgAAcb1WuGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmpKVUlpSEs3MlJJekZSU0ZPQUFCeHZWYTRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy82YzVhYTEtNTg4MC00NjUxLTg1YTQt
YWZkM2JmNmJjNThjLzEvQmpKVUlpSEs3MlJJekZSU0ZPQUFCeHZWYTRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy82YzVhYTEtNTg4MC00NjUxLTg1YTQtYWZkM2JmNmJjNThj
LzEvQmpKVUlpSEs3MlJJekZSU0ZPQUFCeHZWYTRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsnX6kaK
LmYq48c9UWIySk4H4yqlZ1Cn5hTTxxX8NENnR+tuHsC+aTPH329tQZMpTx1t+X6b
Ok+cLFhRIG3f8OcpMhizORlH2dYwGVPKv/elVVbyCwsmEAmcJJJnkMRzZnbrD/SC
s8m/RgsKhH21pAXqg6eLsnVpu6ZbkLLygMnOcY8NoQe0fpbHeHavG2okFt/TuxKP
WqA40S9vJ8EOgLeVKB81KIMZa+GRGAjm1NfsTa3BieyIH4DCKpOCc8IXNR1B8gbF
eiHrTqCkLvgWbuJQCiDZd0FFiYg/U/yGneWXEB1/wU1VqtFtalxWbDWxay1rfVdP
GHWQUoZalyrOKQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:36 2026 by rpki-client