Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: s4MilzHiFheNh1qgJ+8SWHKMiFd/Biv4SQ+A0CjjwDw=
Subject key identifier: CA:7A:31:96:67:41:0D:D6:25:97:3D:BC:A1:18:85:9C:4D:50:D4:D2
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 019F92B6969CD3E6966846B5F40B08E75AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 190D
Signing time: Fri 24 Jul 2026 06:01:07 +0000
Manifest this update: Fri 24 Jul 2026 06:01:07 +0000
Manifest next update: Sat 25 Jul 2026 06:01:07 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: yDoOlNxfpjJn04MITpYd2e8QZsD9+r+xkAvi9+0jD04=)
2: MzCZNjdBmMG-S9j61yIRLE51zQU.roa (hash: /f1l2aBevU/UCCB1M8fW5aBOaUCeB8ylNLs+oJQ9huU=)
3: uAumN_d_Q_yun5QzcR-UbXWPBU8.roa (hash: YEbqonGNno7TcnGdoHF66lGtgeHYIPwdSCSN8qlpAMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:96:9c:d3:e6:96:68:46:b5:f4:0b:08:e7:5a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Jul 24 06:01:07 2026 GMT
Not After : Jul 25 06:01:07 2026 GMT
Subject: CN=ca7a319667410dd625973dbca118859c4d50d4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4a:cc:ac:1b:47:c6:ed:14:c8:0a:d2:47:ca:
59:99:1e:9a:5b:b8:8c:96:e8:7d:51:b3:04:a2:99:
b4:b7:e4:31:af:a8:b7:9c:42:81:49:74:ee:be:d0:
78:c7:85:2d:f7:45:ac:a8:78:1a:b0:f0:96:ff:45:
1b:5f:6e:ba:67:4e:4d:7f:b0:1c:4d:7c:8c:00:2b:
e7:23:7d:e3:4b:92:78:05:e9:e1:ed:23:f5:69:98:
59:fb:9e:e5:e3:ad:ef:d7:4a:1c:f5:72:b3:02:5d:
6e:dd:8e:27:84:b5:ed:fc:dd:47:13:41:bf:26:46:
56:86:0b:ab:f7:99:58:96:a0:65:41:54:d6:0e:a6:
19:1c:61:e0:58:23:dc:9a:4b:b0:df:75:b4:c4:08:
ff:8e:ea:75:d5:5f:85:cf:1d:ed:e4:41:43:b0:6a:
23:64:b3:d4:28:3c:37:05:8e:31:ef:e6:4a:81:92:
2b:ea:e4:72:a3:37:73:4e:e6:e8:32:da:c1:8d:f2:
1b:d2:d5:37:ab:eb:6c:9f:b4:e1:4c:91:6c:b1:71:
4a:b3:48:d7:d6:65:20:fd:a9:55:77:ff:42:ed:6f:
b8:8b:f9:20:64:1e:53:b7:88:b7:1b:0c:23:32:3f:
72:f1:70:7c:b9:e1:ed:23:ae:02:6e:6f:5a:1b:f7:
6b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7A:31:96:67:41:0D:D6:25:97:3D:BC:A1:18:85:9C:4D:50:D4:D2
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:3c:b8:b2:91:e4:59:2b:89:3e:e1:af:7c:06:2f:21:12:b9:
ba:b0:f3:cd:0a:7c:9f:34:80:cf:ba:aa:10:ad:89:3c:ba:b4:
b9:df:46:d8:c9:76:66:a9:2e:1a:9f:b6:1d:6d:16:1d:81:90:
94:44:0e:ad:34:7a:2e:9c:cb:b6:1f:c2:37:77:b9:01:78:e8:
06:12:f9:67:1a:8c:a1:5e:ed:b2:62:3a:39:71:23:de:a8:8c:
63:ab:3d:7c:71:87:93:9c:d9:ee:72:37:65:49:0f:3a:50:08:
75:d1:7a:61:d9:08:4c:26:9f:b9:d0:57:d9:9e:43:cd:a2:6e:
b6:7b:07:24:e7:28:c4:54:dc:15:fe:b1:10:86:62:e1:11:8f:
fa:de:36:cf:22:40:e1:7f:38:e9:d9:4d:6b:74:e1:56:6d:c4:
bc:42:82:9c:de:02:31:6b:26:70:1b:cc:ee:87:a3:58:de:bb:
5d:f9:60:56:85:ea:3d:ff:dd:db:c2:c1:6f:4e:41:71:d5:77:
7f:9f:b8:2b:6c:a4:63:e7:bb:67:11:af:0e:e4:91:da:93:5b:
8e:27:08:0a:ba:0a:f9:01:ad:39:cf:2f:01:07:16:a9:de:14:
fc:cf:9f:14:53:a7:64:f3:66:41:e6:11:df:b7:10:75:bd:22:
27:2d:bb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:06:46 2026 by rpki-client