Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: S6xHHudcYn1XuczKzXRKNJ7bzYpcjWycsaI2JFHIidE=
Subject key identifier: E2:B4:42:32:98:7F:C6:7B:26:E9:82:DF:FB:FC:7E:DC:05:03:4A:B9
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 01A00100FD3A579C3FBF4B8602188C865385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 1A05
Signing time: Fri 14 Aug 2026 16:00:37 +0000
Manifest this update: Fri 14 Aug 2026 16:00:37 +0000
Manifest next update: Sat 15 Aug 2026 16:00:37 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: WMp/IgA3PNCwwDMl/vx9phDdrAtiEO6N71XSZqsE5Nw=)
2: hTRFy4b-NXgfqT3Ys05VYgTqhdI.roa (hash: lHDz7JkYdQE2h8WEtCFRCNw6+mNU93VaarKaLbHW5uI=)
3: hyfFakadnytXl4p0xrQCeFJgUhU.roa (hash: OoK7VERj3Hnh56OBMYeBHkMVOjO2QMd8/KNIimfFc/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:00:fd:3a:57:9c:3f:bf:4b:86:02:18:8c:86:53:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Aug 14 16:00:37 2026 GMT
Not After : Aug 15 16:00:37 2026 GMT
Subject: CN=e2b44232987fc67b26e982dffbfc7edc05034ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e4:f6:b4:aa:ba:d9:95:ce:6c:ef:21:c0:78:
88:7e:0c:75:c9:88:3a:5b:f2:fd:f0:05:75:0b:e4:
30:db:f8:52:bf:fe:5d:6a:4b:66:cc:2c:97:ec:51:
f6:ea:cc:00:7b:d8:07:ae:6f:c3:53:83:4d:56:f0:
50:f5:0f:3b:86:44:a1:74:5c:37:dd:49:11:01:5c:
b2:93:05:61:79:53:ef:f9:54:f0:f4:94:70:71:9e:
61:48:f3:5b:95:83:c1:4a:02:2f:ff:96:46:85:6a:
e9:70:b1:f5:b2:11:08:3f:1b:35:2c:5e:9b:5a:53:
a9:07:a5:a1:12:fd:9b:a2:aa:f3:73:fe:98:c1:2c:
79:e6:d1:dc:1d:29:49:c0:17:cc:28:50:3c:15:e7:
69:df:bb:60:8a:83:52:bb:aa:38:80:66:f7:77:bc:
13:02:35:a4:a2:61:ff:7e:7b:25:bc:f2:b3:63:76:
9c:33:1b:9c:82:b9:22:a1:f6:cf:46:5b:19:e5:6a:
81:ff:aa:e7:6b:d1:03:4d:e5:58:73:f7:4e:3b:48:
5b:1f:9e:00:12:6f:32:6a:53:09:7b:b2:92:4a:37:
a8:10:22:ba:4e:a7:1a:78:1d:cc:4a:92:4a:b9:41:
d6:48:a9:90:6e:06:1b:ee:6c:52:77:fc:c0:cb:e6:
63:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B4:42:32:98:7F:C6:7B:26:E9:82:DF:FB:FC:7E:DC:05:03:4A:B9
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:cf:4d:13:73:bd:97:e8:76:87:e5:4f:41:cd:dc:65:a0:c2:
f2:86:a0:6e:90:47:94:30:7d:b3:df:56:ae:23:fc:05:12:d4:
be:0a:23:ce:8b:fb:43:30:e6:0e:cf:8a:5e:ef:1c:d3:06:d5:
cc:bb:c7:69:4d:f6:92:c3:4c:b8:f0:62:b9:d9:8f:fd:79:00:
73:58:45:44:27:7b:98:b4:3e:1e:04:27:40:b8:8b:1a:43:95:
d4:e0:9c:32:d4:8e:f7:99:c0:f2:b3:bf:4f:80:53:53:f5:d5:
78:38:29:98:63:bc:b0:fb:b4:97:01:b7:57:e8:74:e8:04:91:
71:38:6b:1e:6d:4d:26:0f:d7:d1:2f:98:70:f6:ab:5e:de:ef:
08:47:ec:e5:0b:45:c0:fd:e2:10:ea:57:81:55:9b:e7:88:27:
c8:6c:b9:1c:ff:b4:79:1e:d1:e9:d3:3e:22:54:e0:92:d6:63:
8e:69:8c:54:cb:4c:e9:14:f2:c1:16:0e:15:9f:a3:ee:ab:09:
e3:d2:a8:89:f6:1b:a0:6c:8b:02:8c:a3:ec:e5:35:39:e3:51:
0b:ab:9a:f3:35:b6:a2:b3:b3:03:6e:e4:4b:16:f2:2a:1d:85:
19:38:b2:77:6f:5d:29:74:5c:5f:60:89:3b:7a:ad:26:db:23:
f7:b6:98:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAP06V5w/v0uGAhiMhlOFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MmFjMzgyNjg5Njg3YjYwZmNlNWNlOWRiODg3YjIxZDY4
YTZhYmMwHhcNMjYwODE0MTYwMDM3WhcNMjYwODE1MTYwMDM3WjAzMTEwLwYDVQQD
EyhlMmI0NDIzMjk4N2ZjNjdiMjZlOTgyZGZmYmZjN2VkYzA1MDM0YWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eT2tKq62ZXObO8hwHiIfgx1yYg6
W/L98AV1C+Qw2/hSv/5daktmzCyX7FH26swAe9gHrm/DU4NNVvBQ9Q87hkShdFw3
3UkRAVyykwVheVPv+VTw9JRwcZ5hSPNblYPBSgIv/5ZGhWrpcLH1shEIPxs1LF6b
WlOpB6WhEv2boqrzc/6YwSx55tHcHSlJwBfMKFA8Fedp37tgioNSu6o4gGb3d7wT
AjWkomH/fnslvPKzY3acMxucgrkiofbPRlsZ5WqB/6rna9EDTeVYc/dOO0hbH54A
Em8yalMJe7KSSjeoECK6TqcaeB3MSpJKuUHWSKmQbgYb7mxSd/zAy+ZjhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOK0QjKYf8Z7JumC3/v8ftwFA0q5MB8GA1UdIwQY
MBaAFAQqw4Joloe2D85c6duIeyHWimq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUt
NzBiYzY2ODkzZTVjLzEvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUtNzBiYzY2ODkzZTVj
LzEvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAic9NE3O9
l+h2h+VPQc3cZaDC8oagbpBHlDB9s99WriP8BRLUvgojzov7QzDmDs+KXu8c0wbV
zLvHaU32ksNMuPBiudmP/XkAc1hFRCd7mLQ+HgQnQLiLGkOV1OCcMtSO95nA8rO/
T4BTU/XVeDgpmGO8sPu0lwG3V+h06ASRcThrHm1NJg/X0S+YcParXt7vCEfs5QtF
wP3iEOpXgVWb54gnyGy5HP+0eR7R6dM+IlTgktZjjmmMVMtM6RTywRYOFZ+j7qsJ
49KoifYboGyLAoyj7OU1OeNRC6ua8zW2orOzA27kSxbyKh2FGTiyd29dKXRcX2CJ
O3qtJtsj97aYZg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:40:07 2026 by rpki-client