Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: +X0IOLcp6bmNlrgWW9xSctPUot5H8rsuhGlHE9I1AS0=
Subject key identifier: C3:3B:AF:22:C7:3E:BD:89:4B:E8:45:40:3D:8F:A0:DB:EC:FC:A2:DC
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 019E2F96E54E77096D8F9E50F4A761E20F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 1914
Signing time: Sat 16 May 2026 07:01:18 +0000
Manifest this update: Sat 16 May 2026 07:01:18 +0000
Manifest next update: Sun 17 May 2026 07:01:18 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: BqECT3BOekcgJi7lWPLQQnxIhUMnEsOl/MYXgdr6Njs=)
2: hTRFy4b-NXgfqT3Ys05VYgTqhdI.roa (hash: lHDz7JkYdQE2h8WEtCFRCNw6+mNU93VaarKaLbHW5uI=)
3: hyfFakadnytXl4p0xrQCeFJgUhU.roa (hash: OoK7VERj3Hnh56OBMYeBHkMVOjO2QMd8/KNIimfFc/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:e5:4e:77:09:6d:8f:9e:50:f4:a7:61:e2:0f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: May 16 07:01:18 2026 GMT
Not After : May 17 07:01:18 2026 GMT
Subject: CN=c33baf22c73ebd894be845403d8fa0dbecfca2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:2f:83:7b:d8:85:7b:e2:f5:08:6d:a2:89:
a8:ad:be:7c:48:2a:1c:3d:c5:bc:0e:d1:b2:69:94:
4a:4e:1c:42:95:01:80:98:ea:c2:4f:c1:df:3a:8c:
66:80:6e:0a:7e:66:67:70:4d:5d:ca:5c:35:65:02:
d6:85:30:58:86:4b:e2:14:a6:a4:4c:6e:8b:f8:54:
cc:b7:02:ab:71:b4:c3:d9:b4:25:f7:d8:a4:1e:bd:
ce:c4:40:64:0a:97:1b:cb:6b:f3:3e:ea:72:a3:16:
98:4f:56:80:b4:5a:c0:64:82:8a:1c:11:cc:2c:9f:
ae:f7:41:ac:87:f4:ef:0e:90:e3:c3:e7:58:0b:59:
cf:8e:c5:e4:b6:33:99:88:1d:7c:df:dc:e9:52:d1:
7b:71:a5:1e:d7:23:10:47:11:61:13:c0:1d:b0:7d:
5d:af:d2:b2:b8:62:fd:d6:df:1d:42:74:97:05:b3:
01:02:75:4d:f1:87:6f:8a:03:43:b8:49:e6:fc:58:
1a:00:dd:5a:28:14:09:02:a8:f4:db:71:79:9e:09:
74:39:98:0f:27:fc:0b:b6:2a:5a:1b:5c:b8:2e:b2:
1c:ab:1e:58:35:50:4f:d1:19:0f:20:b8:13:fd:01:
cd:8e:d1:b1:ae:94:7d:79:94:f1:bd:3c:9d:d7:86:
12:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3B:AF:22:C7:3E:BD:89:4B:E8:45:40:3D:8F:A0:DB:EC:FC:A2:DC
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:de:1a:b1:30:c2:17:6a:2f:73:4b:00:52:62:6c:33:a2:7d:
ba:6b:b7:1b:d8:90:2c:70:0e:f2:e0:d4:ed:08:11:ba:fa:93:
72:99:6d:b9:64:68:0e:42:19:ac:07:be:c2:56:6b:14:1e:2e:
c0:7c:5c:db:18:ac:cc:55:c9:4d:8f:06:bf:dd:ec:e0:b5:f9:
9a:d7:b3:a6:a3:1b:fd:d9:5a:c6:4e:c1:cc:04:a4:94:a3:6d:
d1:77:db:d8:39:67:c5:55:8d:fb:28:0f:29:17:17:0c:72:7e:
98:8f:f1:1a:ee:34:20:05:92:aa:58:e7:c6:41:64:db:a5:f8:
65:50:73:ad:b5:8d:6a:ee:0f:da:60:37:fb:67:b7:b0:0f:4b:
c1:1b:c7:48:82:95:a3:a9:e4:9f:95:1d:60:0b:2b:d9:01:f7:
a7:50:17:a3:13:5d:22:8c:b0:f0:6c:e5:29:7f:e8:1a:c2:02:
b6:21:77:18:62:03:28:2f:ab:e6:41:20:ba:36:e7:37:8c:8a:
1f:4d:35:14:ca:3e:a0:6b:89:79:62:99:91:37:97:41:92:d9:
69:57:31:7a:0a:54:bf:02:ef:34:f4:80:05:bf:d9:51:89:a2:
c4:69:b4:27:67:cf:5a:4b:24:02:42:d4:f1:9d:10:0d:18:ff:
a5:e1:d4:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vluVOdwltj55Q9Kdh4g8zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MmFjMzgyNjg5Njg3YjYwZmNlNWNlOWRiODg3YjIxZDY4
YTZhYmMwHhcNMjYwNTE2MDcwMTE4WhcNMjYwNTE3MDcwMTE4WjAzMTEwLwYDVQQD
EyhjMzNiYWYyMmM3M2ViZDg5NGJlODQ1NDAzZDhmYTBkYmVjZmNhMmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTIvg3vYhXvi9Qhtoomorb58SCoc
PcW8DtGyaZRKThxClQGAmOrCT8HfOoxmgG4KfmZncE1dylw1ZQLWhTBYhkviFKak
TG6L+FTMtwKrcbTD2bQl99ikHr3OxEBkCpcby2vzPupyoxaYT1aAtFrAZIKKHBHM
LJ+u90Gsh/TvDpDjw+dYC1nPjsXktjOZiB1839zpUtF7caUe1yMQRxFhE8AdsH1d
r9KyuGL91t8dQnSXBbMBAnVN8YdvigNDuEnm/FgaAN1aKBQJAqj023F5ngl0OZgP
J/wLtipaG1y4LrIcqx5YNVBP0RkPILgT/QHNjtGxrpR9eZTxvTyd14YS2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMM7ryLHPr2JS+hFQD2PoNvs/KLcMB8GA1UdIwQY
MBaAFAQqw4Joloe2D85c6duIeyHWimq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUt
NzBiYzY2ODkzZTVjLzEvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUtNzBiYzY2ODkzZTVj
LzEvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA94asTDC
F2ovc0sAUmJsM6J9umu3G9iQLHAO8uDU7QgRuvqTcpltuWRoDkIZrAe+wlZrFB4u
wHxc2xiszFXJTY8Gv93s4LX5mtezpqMb/dlaxk7BzASklKNt0Xfb2DlnxVWN+ygP
KRcXDHJ+mI/xGu40IAWSqljnxkFk26X4ZVBzrbWNau4P2mA3+2e3sA9LwRvHSIKV
o6nkn5UdYAsr2QH3p1AXoxNdIoyw8GzlKX/oGsICtiF3GGIDKC+r5kEgujbnN4yK
H001FMo+oGuJeWKZkTeXQZLZaVcxegpUvwLvNPSABb/ZUYmixGm0J2fPWkskAkLU
8Z0QDRj/peHUtw==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:34 2026 by rpki-client