Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: PMRCslS9CFET+XnO0eUiBSaSWx9fZ+qu6EcjwIo1j9s=
Subject key identifier: 9B:AC:54:4D:BB:0C:53:95:80:E7:18:6D:9E:E2:FC:96:41:34:EA:D6
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 01A0C9A2074D2A4FAF9469FB2EF5CC2BED48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 19AE
Signing time: Tue 22 Sep 2026 15:00:34 +0000
Manifest this update: Tue 22 Sep 2026 15:00:34 +0000
Manifest next update: Wed 23 Sep 2026 15:00:34 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: jt4Et5co/oAaOXDkLfs60zW9u/FSPZe3g7VARsf+84Y=)
2: MzCZNjdBmMG-S9j61yIRLE51zQU.roa (hash: /f1l2aBevU/UCCB1M8fW5aBOaUCeB8ylNLs+oJQ9huU=)
3: uAumN_d_Q_yun5QzcR-UbXWPBU8.roa (hash: YEbqonGNno7TcnGdoHF66lGtgeHYIPwdSCSN8qlpAMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:07:4d:2a:4f:af:94:69:fb:2e:f5:cc:2b:ed:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Sep 22 15:00:34 2026 GMT
Not After : Sep 23 15:00:34 2026 GMT
Subject: CN=9bac544dbb0c539580e7186d9ee2fc964134ead6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:7d:e7:8e:6f:af:8e:c9:8c:c3:ff:fa:bf:
0d:16:12:2f:c8:80:50:52:b3:59:c7:e0:3b:85:59:
35:a9:4b:e3:5b:64:6b:18:8a:97:3d:99:44:4c:dd:
f0:6e:94:9e:13:f7:fc:b3:b6:82:94:9c:6b:64:47:
d6:1b:05:99:9f:bb:6c:ca:60:98:13:a4:98:dc:8c:
e2:0c:3d:e7:63:f2:c5:06:a6:72:ef:03:1c:3b:85:
6a:5a:e8:09:28:b3:71:e8:23:d7:84:ef:d8:5b:bd:
7b:9a:5f:7b:61:bf:48:0f:27:1a:15:77:21:23:31:
d8:64:56:05:a1:57:70:75:5e:6e:1e:d2:ca:c2:94:
c2:05:38:ad:20:d0:d8:44:52:c6:b4:50:31:75:50:
3d:2e:c1:b1:73:16:4c:45:2e:47:3c:f5:f2:13:8f:
e3:57:58:77:c0:2e:40:a8:27:8b:0d:43:4a:0b:79:
9a:3a:d5:47:26:51:b4:f8:8c:25:5b:75:01:80:c5:
31:a1:1d:aa:34:c4:08:9f:c6:30:5c:fc:2a:58:df:
33:53:5d:0b:c6:23:ce:78:83:8c:78:5d:be:7e:2b:
85:21:21:d7:dc:fd:22:f3:6c:39:a8:83:3b:c7:8a:
cd:77:a1:a2:d1:ce:46:24:fd:51:1b:da:02:9c:21:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AC:54:4D:BB:0C:53:95:80:E7:18:6D:9E:E2:FC:96:41:34:EA:D6
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a1:bf:d2:0d:74:5b:72:96:a6:8c:02:08:d7:bd:10:20:cb:
1b:ba:6c:c2:55:2b:16:d1:cf:5d:50:3b:78:74:80:48:72:8c:
56:e9:32:f9:a2:9c:92:ad:3c:7f:c9:35:75:2a:5c:5d:a8:5c:
de:f4:b1:fc:a2:69:2a:ac:da:f9:93:f5:b6:fa:d8:60:42:a3:
02:74:98:95:1e:46:d7:22:bd:8e:08:eb:8e:24:ba:63:89:83:
da:db:29:ad:0b:4a:20:1f:e8:b0:eb:96:bd:d1:c1:48:1d:bd:
a8:bb:d7:df:50:46:67:61:a7:9a:25:30:90:5b:e0:2a:0e:c0:
6c:26:68:d4:33:86:32:ab:8f:20:64:89:46:2d:13:d8:5d:ee:
13:fb:36:15:18:4e:a6:2c:62:0c:90:d4:aa:26:65:a3:07:c3:
b6:e9:50:1d:84:68:06:c0:0b:76:cd:39:d1:b8:f5:d3:e8:e8:
0f:83:4b:80:05:fc:cc:ed:15:66:48:f4:f0:76:fc:ee:b1:15:
1a:44:06:f7:3b:f9:1f:83:02:62:7c:67:54:b4:5b:a4:01:31:
1c:d8:70:d3:16:8a:18:d0:39:85:46:b2:d6:6f:bb:f0:1d:e6:
1b:f7:1d:9d:2f:57:3e:52:26:a1:da:4c:e2:97:8c:37:b6:9f:
54:40:fb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:23:12 2026 by rpki-client