Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: EI2ZZqSjldHt+cCMsEwqpg8LzLCDy9l110M0za/uPKY=
Subject key identifier: 84:68:C5:0C:14:4B:1A:A2:13:BF:28:B2:9B:1D:06:47:3D:97:00:9D
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 01A1494EE065D45A0BEBE17E02855B2C6949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 1AAF
Signing time: Sat 17 Oct 2026 10:01:08 +0000
Manifest this update: Sat 17 Oct 2026 10:01:08 +0000
Manifest next update: Sun 18 Oct 2026 10:01:08 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: 8g0Pi/1H3vzsJMLHgvmnME+ULzr1lr1C7hkpZKMPda4=)
2: hTRFy4b-NXgfqT3Ys05VYgTqhdI.roa (hash: lHDz7JkYdQE2h8WEtCFRCNw6+mNU93VaarKaLbHW5uI=)
3: hyfFakadnytXl4p0xrQCeFJgUhU.roa (hash: OoK7VERj3Hnh56OBMYeBHkMVOjO2QMd8/KNIimfFc/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:4e:e0:65:d4:5a:0b:eb:e1:7e:02:85:5b:2c:69:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Oct 17 10:01:08 2026 GMT
Not After : Oct 18 10:01:08 2026 GMT
Subject: CN=8468c50c144b1aa213bf28b29b1d06473d97009d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f6:dc:1a:92:c2:be:8b:63:aa:61:5c:85:eb:
1a:9d:d4:86:d2:8c:2c:6c:eb:53:1e:1a:af:ce:c8:
bf:74:65:a5:5d:14:f7:ac:3c:36:77:9f:0d:11:dc:
df:0d:48:d6:8e:e1:81:68:9f:a5:65:c4:7c:3b:45:
2c:91:5b:ac:97:df:39:99:1f:3f:0d:b8:ee:c5:02:
5d:a4:6f:6d:47:3f:f2:cf:cd:e1:51:e6:ae:f8:36:
bd:16:a7:6d:9a:68:9a:07:32:63:8e:94:e5:c2:cf:
aa:a0:b6:f2:14:e7:1e:17:d7:04:4f:ab:30:0a:26:
67:e9:b3:34:ec:84:72:a8:6f:2b:36:7c:67:76:03:
06:79:38:db:0e:12:ac:ea:16:d1:91:08:fc:e1:fc:
0e:e4:8c:25:2c:a0:71:7f:ef:a0:db:43:c1:23:c8:
d6:71:92:4d:2d:f2:3b:d4:08:32:b1:47:87:8f:98:
d1:04:67:77:54:ec:b5:a2:36:80:c8:85:a8:5f:9e:
01:eb:8a:27:9b:17:ca:09:6b:eb:2e:0d:ef:7c:5e:
7b:1f:f2:c0:d3:a9:56:0e:e9:84:50:df:bc:60:c4:
41:55:d4:98:03:b4:7c:81:37:43:ef:8b:ff:71:2c:
22:f4:a8:db:a1:8f:62:ab:0a:8a:56:24:c0:a8:61:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:68:C5:0C:14:4B:1A:A2:13:BF:28:B2:9B:1D:06:47:3D:97:00:9D
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6e:57:56:9f:5f:95:20:db:73:10:5e:36:ec:c1:d6:9e:e7:
30:d7:9d:ad:50:ec:99:cb:a8:d4:9b:38:27:11:ca:cd:8c:6d:
ba:ab:8e:59:a2:fc:fc:49:28:32:a0:34:98:ff:47:f5:4d:c0:
5f:73:de:3e:49:4f:4f:da:42:12:ad:13:ef:d2:a0:6c:60:2a:
a2:5f:fe:92:4b:27:d4:13:02:cc:33:52:fe:a7:86:31:dc:76:
c9:81:09:9f:75:1b:7d:de:5b:25:16:3c:63:c7:04:3e:47:5a:
72:ff:10:78:8c:fb:45:44:e3:04:87:53:d1:d3:cb:aa:e9:14:
17:0b:ac:be:1a:d9:35:4e:bf:64:a2:89:80:5f:e4:ff:c0:85:
76:9e:29:e6:9a:ae:7f:c2:a3:21:00:7c:fe:f8:c3:2c:a8:0e:
b7:0b:5c:ec:fa:05:d6:b1:ad:9a:39:a9:67:98:e1:da:10:f7:
85:5e:0c:e0:d9:19:33:85:73:83:96:5f:3d:46:03:9e:68:52:
46:9f:8a:34:f9:37:3c:6e:8e:83:0d:b2:af:2d:b8:d9:c2:33:
47:f2:23:5f:a4:cd:71:ca:1d:9b:07:28:1b:4e:cc:25:f2:f0:
f4:d2:e9:71:0a:07:18:6d:87:e2:aa:a7:b4:3a:33:91:b7:f3:
e1:57:3b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 17:51:30 2026 by rpki-client