Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.mft
File: BJiZEEpGYR3dHTmg13fAsPKVI5E.mft (raw, json)
Hash identifier: 01leQwXA5jgW+PYjCdAHgEk+4XUVbbBprWh2dUc1kSs=
Subject key identifier: 8D:6B:82:3B:B5:BA:76:6B:98:A7:65:8E:40:2D:50:BD:C1:BF:18:50
Authority key identifier: 04:98:99:10:4A:46:61:1D:DD:1D:39:A0:D7:77:C0:B0:F2:95:23:91
Certificate issuer: /CN=049899104a46611ddd1d39a0d777c0b0f2952391
Certificate serial: 019E1CEBF435AC6706307D98E2F484C1DC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJiZEEpGYR3dHTmg13fAsPKVI5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.mft
Manifest number: DB
Signing time: Tue 12 May 2026 16:01:25 +0000
Manifest this update: Tue 12 May 2026 16:01:25 +0000
Manifest next update: Wed 13 May 2026 16:01:25 +0000
Files and hashes: 1: 2zN7sfIWv-oSO5uGa8ar6NZHBVA.roa (hash: MFUYWCWRk/ai31Pux7AKFgKjp1b/iCtRQ7q1/0WV8mE=)
2: BJiZEEpGYR3dHTmg13fAsPKVI5E.crl (hash: ESXG9941TwyZhM0uEyHKRlGGU0VtTZfUS1wGqA8AKWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJiZEEpGYR3dHTmg13fAsPKVI5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:f4:35:ac:67:06:30:7d:98:e2:f4:84:c1:dc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049899104a46611ddd1d39a0d777c0b0f2952391
Validity
Not Before: May 12 16:01:25 2026 GMT
Not After : May 13 16:01:25 2026 GMT
Subject: CN=8d6b823bb5ba766b98a7658e402d50bdc1bf1850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:ae:08:ee:20:eb:d2:95:90:a9:7c:f1:dc:
22:af:d3:3c:fd:12:6b:63:93:0b:40:ba:29:f2:d1:
6a:0c:58:5c:0b:a3:a5:4b:5b:90:93:00:45:dc:12:
de:82:9a:69:87:7d:96:49:c5:08:8a:ad:39:4d:60:
ac:41:9b:ba:5f:ba:79:31:c5:76:26:48:a6:7f:7f:
1e:d5:57:34:8d:d7:de:9b:a9:64:05:c8:d1:18:a4:
4d:a8:91:87:8d:81:db:14:6e:a2:ea:19:18:cc:4c:
e6:97:83:01:07:8e:ba:25:93:ed:2b:31:2d:de:79:
ff:c4:df:92:75:c8:77:f6:fa:15:17:44:d4:43:0d:
82:a9:cc:61:a7:59:29:74:61:e6:7c:12:42:0c:00:
d6:eb:42:f2:3d:88:cf:87:26:bd:0b:02:aa:90:9b:
df:f0:e0:c5:70:20:81:55:eb:aa:45:63:77:bf:f1:
2e:a5:a8:0b:09:83:48:59:8e:c9:cc:66:80:0a:85:
ae:0a:0d:da:5b:54:8f:07:b6:b9:c4:e6:49:c5:b3:
07:e2:87:f8:8d:9e:0c:17:53:ec:1d:55:12:8d:2e:
c0:41:96:f8:6c:f0:fd:34:29:69:5b:06:d0:88:af:
ca:21:79:43:15:89:a8:24:0a:18:7b:a0:d9:f3:e2:
97:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6B:82:3B:B5:BA:76:6B:98:A7:65:8E:40:2D:50:BD:C1:BF:18:50
X509v3 Authority Key Identifier:
keyid:04:98:99:10:4A:46:61:1D:DD:1D:39:A0:D7:77:C0:B0:F2:95:23:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJiZEEpGYR3dHTmg13fAsPKVI5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6c:5e:4b:e2:bf:68:0a:c6:d7:41:55:fc:d5:9b:25:aa:bc:
d2:87:2d:3c:86:a2:fd:3f:fc:83:5d:a0:24:9c:58:91:9b:b2:
d5:4f:cf:4c:5a:ed:21:e2:f3:45:8c:e8:a8:24:f2:f0:36:37:
52:3b:85:56:30:d6:cf:b2:8a:74:31:2c:13:aa:8e:31:c0:d5:
ea:25:03:cc:00:37:ea:0e:66:e9:e0:c3:0c:dc:75:5e:af:33:
89:c5:85:43:58:07:56:2a:cd:ba:9c:87:f1:6f:d0:68:27:fb:
5b:10:d6:91:fa:40:f7:fc:bc:e5:50:ae:46:13:00:4f:4c:b8:
2a:a2:80:62:98:5a:cf:6d:a4:4e:8c:ab:03:0a:b9:99:79:39:
e5:3b:f3:74:a2:b5:43:67:86:61:7d:14:65:41:84:3c:9b:07:
0a:92:3d:32:9c:ce:aa:65:91:02:a1:a8:e5:f1:86:00:55:3d:
1e:b6:ba:a6:73:a0:b0:18:82:ef:95:9f:44:0e:fa:7a:bf:ac:
6e:1e:22:db:9b:f0:b0:ea:e1:78:b0:52:6d:64:36:27:d5:f6:
d6:96:22:74:66:24:80:34:d2:87:40:fd:c1:61:0b:30:36:42:
e0:cb:7e:be:67:d9:4d:f0:41:e1:40:b7:94:7a:6a:9e:36:1b:
ce:14:a8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:52 2026 by rpki-client