Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: 3fXBQjH4ShkOqyephjDpUP/DOxo2DIwStWOJrLcchY0=
Subject key identifier: 18:38:53:3F:F0:6E:2D:73:80:1A:C0:1C:24:71:46:B4:70:95:9C:AA
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 019F1942F885EA4B8E4AD0DE32A4DB6E7479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 198D
Signing time: Tue 30 Jun 2026 16:00:47 +0000
Manifest this update: Tue 30 Jun 2026 16:00:47 +0000
Manifest next update: Wed 01 Jul 2026 16:00:47 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: 1puJXoAMPSlpupKUO4Fx67vWuGVSiq3dRsykTsLbp6M=)
2: hTRFy4b-NXgfqT3Ys05VYgTqhdI.roa (hash: lHDz7JkYdQE2h8WEtCFRCNw6+mNU93VaarKaLbHW5uI=)
3: hyfFakadnytXl4p0xrQCeFJgUhU.roa (hash: OoK7VERj3Hnh56OBMYeBHkMVOjO2QMd8/KNIimfFc/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:42:f8:85:ea:4b:8e:4a:d0:de:32:a4:db:6e:74:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Jun 30 16:00:47 2026 GMT
Not After : Jul 1 16:00:47 2026 GMT
Subject: CN=1838533ff06e2d73801ac01c247146b470959caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:00:9f:a0:b0:9e:cf:aa:7e:01:3e:0b:90:ed:
4a:c9:5d:27:80:8d:cd:a2:3d:62:e2:2c:cd:d1:dd:
6f:53:32:01:d5:05:a6:e8:5a:f7:03:03:c9:ee:49:
be:83:a4:a3:e1:69:18:98:f4:9b:8f:03:4a:e2:8b:
ca:4e:d8:e4:27:ba:07:ef:5a:f4:ce:4c:af:4e:2d:
23:10:84:a4:36:56:27:28:53:10:d4:71:1b:c9:ca:
32:4b:bc:f1:19:7b:bd:e1:10:01:38:11:48:1a:2d:
d2:09:7a:e3:ef:f0:47:98:39:39:76:82:b1:38:f1:
76:47:eb:94:4f:fd:53:eb:01:12:86:7a:03:3d:0f:
4d:2e:12:6a:75:b9:b6:86:39:6d:92:bb:81:e8:fb:
be:05:a8:44:9b:dd:0f:ff:8c:ed:ff:de:39:69:73:
76:da:02:11:21:f4:76:4b:4d:ee:a0:1a:4a:cf:25:
42:7d:17:b6:22:cf:41:57:e9:c0:d3:5b:9b:09:8c:
40:b5:38:fe:b4:9f:4b:42:6f:28:47:43:17:74:e1:
a2:5b:3e:bf:e8:dc:5c:59:f7:ae:46:46:c0:94:4a:
bd:4d:70:6b:89:85:35:ff:cb:f3:62:63:0d:62:6c:
cb:96:26:f7:0b:d4:e4:a7:39:69:e3:10:09:59:72:
d2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:38:53:3F:F0:6E:2D:73:80:1A:C0:1C:24:71:46:B4:70:95:9C:AA
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8d:47:7a:37:b6:01:e1:92:30:76:76:1d:c5:fe:83:8b:74:
3e:70:a9:f3:a5:99:e3:94:3c:e3:39:76:5f:64:a5:dc:fe:99:
54:16:f5:fb:5f:da:85:aa:c2:7c:ab:d1:57:53:a9:ab:38:8d:
8e:02:fe:05:e2:b2:b5:15:9e:46:7b:c4:a3:74:1e:f6:d3:5e:
c1:94:31:f8:3b:90:7b:39:4d:ff:23:9c:a3:95:b0:a8:45:e7:
1d:0c:b5:12:c5:32:ec:d5:55:ea:cc:de:09:23:e7:13:4f:66:
cd:52:87:9c:89:aa:22:43:ab:6d:ef:e3:6c:03:b5:73:28:49:
3d:f0:b8:c2:7c:3f:83:09:85:0f:fd:37:cb:c6:51:c8:a4:d9:
09:56:46:4c:f6:fa:48:a3:df:73:ef:7a:1c:44:5f:12:5f:f2:
d0:bc:c1:cd:f0:c7:65:d7:a2:53:ab:a0:37:35:ec:8f:82:ef:
1a:e8:7a:84:d3:bf:1e:2a:db:3d:e7:15:66:6a:75:e4:ce:ae:
b2:37:60:ef:ed:49:8d:74:cc:15:c4:4b:94:34:ee:51:28:9f:
53:04:9c:78:fd:31:4a:b5:58:2a:af:e6:b2:1e:5d:8a:74:32:
a6:85:65:5b:ab:b0:3e:59:d5:65:97:86:03:82:d9:ad:22:df:
32:86:52:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:21 2026 by rpki-client