Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: oKxLd/YS4dwufuS+AVkwPijrgzH3URnOpmfMPY52XuY=
Subject key identifier: FF:71:5D:E9:F4:F4:87:BB:42:81:1F:B1:A1:6D:AD:20:20:06:0B:20
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 019D26CD747D556603B5DF3F566B5CAFDC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 17CC
Signing time: Wed 25 Mar 2026 21:01:32 +0000
Manifest this update: Wed 25 Mar 2026 21:01:32 +0000
Manifest next update: Thu 26 Mar 2026 21:01:32 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: K0yV+mXgn3rRZf+f1CUnHBNy/OoS2VMP1OtmBlgN+Wk=)
2: MzCZNjdBmMG-S9j61yIRLE51zQU.roa (hash: /f1l2aBevU/UCCB1M8fW5aBOaUCeB8ylNLs+oJQ9huU=)
3: uAumN_d_Q_yun5QzcR-UbXWPBU8.roa (hash: YEbqonGNno7TcnGdoHF66lGtgeHYIPwdSCSN8qlpAMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:74:7d:55:66:03:b5:df:3f:56:6b:5c:af:dc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Mar 25 21:01:32 2026 GMT
Not After : Mar 26 21:01:32 2026 GMT
Subject: CN=ff715de9f4f487bb42811fb1a16dad2020060b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:c5:08:5e:4e:9c:9f:51:36:84:49:21:9b:
8b:d0:15:6d:be:92:7e:7f:a4:ff:e3:c7:f4:99:46:
ae:75:9c:7d:e3:6b:71:0b:37:2b:a2:e1:40:90:97:
73:81:ed:c5:2b:00:f0:75:1f:24:43:08:ba:05:0a:
36:63:b9:73:e4:b3:be:45:17:4f:8a:9e:1d:59:c2:
0a:8a:63:d9:30:8f:95:5f:55:ca:74:d6:90:2e:11:
bb:69:c3:03:06:d5:9e:0b:e4:b9:6b:b6:a6:78:98:
ac:8f:c0:d2:c3:bd:e6:64:56:14:5b:2a:06:06:10:
52:ab:a2:bb:d3:e7:db:45:e2:47:2c:dc:7d:bc:7c:
03:2f:04:02:d1:a1:6d:91:1b:d0:8c:f9:b0:a2:74:
92:5d:a6:88:c1:5b:7a:bd:cd:d0:eb:18:a5:01:c0:
d8:a0:51:b4:f7:32:54:bf:be:fb:b1:37:09:e1:69:
96:96:36:c6:1c:de:70:ba:a8:ad:19:57:74:c5:59:
4a:3c:7d:c1:27:5e:0f:1f:9d:47:a7:47:30:5a:a8:
3d:fc:57:10:1e:f3:ac:90:4a:b7:07:89:c7:5f:c8:
8e:5e:b6:68:56:1f:4a:fa:b3:e9:21:3f:b8:cc:e7:
c1:32:93:af:37:a0:4b:b2:26:72:2e:f0:da:9d:9b:
8d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:71:5D:E9:F4:F4:87:BB:42:81:1F:B1:A1:6D:AD:20:20:06:0B:20
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:32:4e:64:65:a3:ca:e2:8b:84:45:9b:c0:cc:f3:8c:cb:f9:
be:eb:8a:da:32:74:43:fc:03:87:ce:47:6e:da:46:00:2b:f6:
ec:1d:ba:6f:75:75:98:dc:cf:11:c4:d1:1c:31:3f:5f:7b:2a:
b5:ef:ab:f0:20:2a:06:cb:36:ca:f4:6c:32:be:ea:a0:8e:49:
e9:47:e1:c4:c5:84:41:c4:13:52:88:e2:60:ba:55:44:7e:82:
24:24:dc:50:e3:4c:7c:a8:f0:6d:8a:2c:f1:71:ab:b1:27:5b:
4a:20:c1:03:2c:62:a4:c0:7d:44:1f:e9:ec:98:c5:77:df:34:
d0:9b:0d:11:17:55:15:fa:99:d5:27:d3:79:d2:80:15:17:a0:
fb:09:fe:a7:ad:b3:a8:e8:c7:0e:d1:69:66:58:33:2d:31:cc:
f1:f4:b1:5e:ea:84:27:96:c2:60:78:d9:9e:b1:83:21:27:88:
9d:5e:69:f0:fd:4b:e5:41:f6:75:3e:81:c7:b5:5c:4f:ae:1c:
8e:45:52:8a:18:67:08:b2:0d:ae:93:d1:73:d1:fc:92:90:af:
a6:8f:7d:e2:8e:e4:33:b8:0d:86:ef:dc:8e:ae:4c:d9:cb:a4:
39:7c:a8:81:ee:3c:fa:53:41:43:7b:0f:2f:fc:7d:71:c7:c5:
8f:d7:4f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:46 2026 by rpki-client