Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.mft
File: BJiZEEpGYR3dHTmg13fAsPKVI5E.mft (raw, json)
Hash identifier: JkWSyuoBAuvfaccwKsA8qUpFKJB0n1uvgMojS7cpNlI=
Subject key identifier: C9:F3:E3:A9:4E:08:75:50:48:83:53:35:33:81:5E:CB:6F:D6:D4:F8
Authority key identifier: 04:98:99:10:4A:46:61:1D:DD:1D:39:A0:D7:77:C0:B0:F2:95:23:91
Certificate issuer: /CN=049899104a46611ddd1d39a0d777c0b0f2952391
Certificate serial: 019D333ED9454EBFF4112DC979788A8BD563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJiZEEpGYR3dHTmg13fAsPKVI5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.mft
Manifest number: 62
Signing time: Sat 28 Mar 2026 07:00:49 +0000
Manifest this update: Sat 28 Mar 2026 07:00:49 +0000
Manifest next update: Sun 29 Mar 2026 07:00:49 +0000
Files and hashes: 1: 2zN7sfIWv-oSO5uGa8ar6NZHBVA.roa (hash: MFUYWCWRk/ai31Pux7AKFgKjp1b/iCtRQ7q1/0WV8mE=)
2: BJiZEEpGYR3dHTmg13fAsPKVI5E.crl (hash: oZr3mz8e/1m2T9uIn1r/x0v6u7X4E2bGgKTE1EEOXwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJiZEEpGYR3dHTmg13fAsPKVI5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:d9:45:4e:bf:f4:11:2d:c9:79:78:8a:8b:d5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049899104a46611ddd1d39a0d777c0b0f2952391
Validity
Not Before: Mar 28 07:00:49 2026 GMT
Not After : Mar 29 07:00:49 2026 GMT
Subject: CN=c9f3e3a94e0875504883533533815ecb6fd6d4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:4d:a7:08:55:e8:2e:85:56:5f:86:cf:48:
fb:4c:f2:95:14:ef:75:a8:1d:5d:e6:50:21:9d:9d:
cb:9d:bb:93:46:e2:4c:57:de:e2:bd:39:b3:e8:07:
fb:7f:1e:b5:6e:df:07:48:2b:f5:ed:15:b7:93:cf:
79:b1:39:c4:82:ad:a5:dd:d6:40:77:8e:39:ae:e0:
71:30:d1:ff:fb:c7:77:28:d4:fc:99:64:fd:81:32:
8c:8c:b2:90:6e:91:04:cb:e3:89:09:73:3f:ef:bd:
09:9b:ff:42:ef:0a:cc:ca:fa:d8:a2:4c:69:f9:04:
7a:fb:8c:28:14:07:68:bc:92:70:cf:9e:ef:b1:10:
cc:ed:b3:dc:15:fb:76:25:da:0d:c8:1b:f7:9d:88:
0d:27:9a:a6:ce:1f:6c:29:3e:21:c8:66:1a:82:52:
d8:7b:ca:7d:0d:bd:17:c3:98:90:70:2e:e4:1a:09:
d2:5f:e6:0b:bb:42:6f:cd:91:fd:6b:be:4c:ec:32:
25:09:31:48:b0:8e:c9:03:22:6e:85:c5:15:16:f4:
5f:8f:ab:ea:91:29:68:5e:3f:2e:9b:68:a3:f3:63:
01:f7:d8:5a:92:68:d4:69:14:42:22:57:0c:5b:de:
41:11:d4:21:5c:05:e8:ac:ac:4e:d0:c7:33:02:0f:
b4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F3:E3:A9:4E:08:75:50:48:83:53:35:33:81:5E:CB:6F:D6:D4:F8
X509v3 Authority Key Identifier:
keyid:04:98:99:10:4A:46:61:1D:DD:1D:39:A0:D7:77:C0:B0:F2:95:23:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJiZEEpGYR3dHTmg13fAsPKVI5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:7a:2d:d6:53:1c:af:c7:e3:f6:dc:09:78:3e:57:ea:32:ea:
5c:a8:c8:d8:34:09:f4:e6:5a:4f:41:fb:7e:28:06:cd:9a:b3:
1d:c3:15:44:15:cd:15:4c:66:52:64:e1:7d:c8:b7:6f:15:cb:
9f:2e:85:09:0d:ab:16:b7:96:b1:e8:cd:f3:3e:77:89:42:a2:
d5:78:97:bf:dc:5f:1f:91:66:fa:a4:4b:36:90:15:49:8f:e4:
ff:da:7d:40:67:0d:c0:b3:e4:10:a8:90:54:7b:1b:f8:b3:ab:
f5:a9:bb:8d:c2:8a:a7:00:8b:90:d2:04:e1:14:31:ec:59:c1:
3c:84:0d:ab:b8:9b:4f:e0:cb:57:ab:a7:9d:e0:79:61:6e:c0:
2e:b4:0f:c1:6c:70:0a:29:56:cf:94:e5:5c:d8:d4:b3:ed:97:
78:31:21:fa:32:53:a3:0f:e9:f1:65:d4:48:50:0f:82:cc:a5:
49:cf:6c:93:46:5e:8d:a9:b9:c0:cc:40:ae:34:db:c7:fb:55:
b8:aa:40:25:e3:c3:59:87:08:8a:e7:36:ad:52:33:90:1c:8c:
74:28:b7:26:1b:91:fa:83:3c:20:61:d0:79:d4:a5:3c:3a:9f:
d0:d2:b5:03:7f:36:65:6a:a2:7e:01:89:32:32:11:09:37:33:
7d:b7:a6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:50 2026 by rpki-client