
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: B1ouE6tcMrdKU4NS/wu1Cva7hqhyZlUjv9dPsCI/PSo=
Subject key identifier: 12:71:97:72:BB:CD:C3:1B:3C:48:75:14:20:70:7E:8B:9B:D4:B4:45
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 019E1DFE34EE192475E60A2C23E04D80D91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 184C
Signing time: Tue 12 May 2026 21:00:59 +0000
Manifest this update: Tue 12 May 2026 21:00:59 +0000
Manifest next update: Wed 13 May 2026 21:00:59 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: iWzCueyTh6YigFl/f+YDSHFDY1eCex07hsbnCq7VIeU=)
2: MzCZNjdBmMG-S9j61yIRLE51zQU.roa (hash: /f1l2aBevU/UCCB1M8fW5aBOaUCeB8ylNLs+oJQ9huU=)
3: uAumN_d_Q_yun5QzcR-UbXWPBU8.roa (hash: YEbqonGNno7TcnGdoHF66lGtgeHYIPwdSCSN8qlpAMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:34:ee:19:24:75:e6:0a:2c:23:e0:4d:80:d9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: May 12 21:00:59 2026 GMT
Not After : May 13 21:00:59 2026 GMT
Subject: CN=12719772bbcdc31b3c48751420707e8b9bd4b445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:04:63:c3:73:d1:d1:be:ca:f9:cf:d4:50:f0:
38:0a:06:74:14:a3:2c:b7:12:e4:1a:97:b1:00:20:
6b:e1:b0:9a:68:8b:8b:01:34:56:4e:e4:df:f4:45:
4b:7f:48:02:17:de:56:fd:5c:15:04:d5:b8:4d:17:
53:48:1a:f9:2e:37:63:a4:02:0e:c7:d6:e7:c3:a6:
01:c5:ff:a2:29:87:a2:72:87:c8:2a:e9:b2:74:9c:
a7:12:1c:5a:4d:61:b2:22:2d:89:16:15:93:44:0e:
c6:66:8b:b0:63:de:dc:d7:31:4d:de:aa:2b:08:93:
e1:5c:9d:dd:30:9a:b9:b3:8d:5a:ae:d3:62:8d:f7:
3b:62:20:2d:39:75:61:96:dd:ff:ae:37:c2:61:ef:
52:19:71:5c:0b:13:f8:b9:f7:fc:a6:cd:49:35:c0:
66:2c:60:b2:17:00:61:95:80:4a:d0:c5:96:7e:7c:
ec:7c:4d:e0:e8:f0:b0:14:55:5e:e7:69:3b:d2:23:
f3:bd:f5:43:f7:92:44:3b:9b:fb:91:9a:5c:b4:5a:
13:7e:22:e6:6b:f4:26:07:81:d7:5d:a9:1f:14:61:
61:3e:8d:5e:84:55:f7:88:7e:bb:7b:7a:3f:83:d8:
ea:3b:61:84:7f:1e:1e:f3:be:dd:e4:67:50:15:d8:
a0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:71:97:72:BB:CD:C3:1B:3C:48:75:14:20:70:7E:8B:9B:D4:B4:45
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e6:c9:36:68:35:41:1a:1b:33:26:0b:6b:87:58:ff:77:e7:
d0:d1:06:cd:a7:c4:e3:db:03:d5:6f:9e:32:a2:24:f0:67:38:
37:c6:9f:1c:d5:cb:e8:d7:1c:6f:78:a5:a4:07:69:47:94:ac:
07:63:af:3b:d6:39:5a:4d:9a:46:d8:03:2e:54:65:c9:bf:49:
d9:4f:3e:45:ac:2b:66:ec:a1:ea:30:a5:19:70:3e:f2:d4:0d:
20:59:ba:8e:c5:f5:e0:0c:75:ef:1d:cf:e2:19:29:21:21:58:
9c:56:4c:b8:e2:88:67:50:1d:e4:cd:87:0e:61:11:21:71:d8:
20:c4:3f:2f:fa:9e:86:16:bf:fb:fa:eb:d2:9a:60:1d:6d:67:
a8:7d:bb:09:03:b6:dc:20:b0:a6:4f:38:18:48:c8:ee:f6:d2:
ec:af:8d:db:55:28:18:49:0a:5f:f1:c4:60:df:94:80:29:3b:
10:2a:be:0a:b8:8f:da:42:9e:7b:ff:bd:e1:52:2b:db:3a:7b:
eb:15:f0:1f:8a:5a:02:ab:3d:06:32:fb:d0:cd:0c:9d:ea:4f:
45:15:35:a3:41:06:67:8b:ee:d3:7c:e8:17:c8:70:0c:74:e7:
ab:e6:73:d4:9a:fe:31:b3:3a:c8:13:56:f2:7f:5d:69:ca:88:
85:2c:60:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:00 2026 by rpki-client