Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
File: BcCcQdI4lrLVQoGCYj-I-mdubJA.mft (raw, json)
Hash identifier: eqEeaOpoTSXSq8FB4N/Jn6aUVQmcYLpGVMHHaFCNFiE=
Subject key identifier: 6A:72:1B:40:FD:1F:44:5B:2C:10:61:C7:41:6C:DE:51:8E:88:3A:F7
Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
Certificate issuer: /CN=05c09c41d23896b2d5428182623f88fa676e6c90
Certificate serial: 01A13CA531FBE83082ACC7E9DED2A1FAD6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
Manifest number: 1AA3
Signing time: Wed 14 Oct 2026 23:00:21 +0000
Manifest this update: Wed 14 Oct 2026 23:00:21 +0000
Manifest next update: Thu 15 Oct 2026 23:00:21 +0000
Files and hashes: 1: BcCcQdI4lrLVQoGCYj-I-mdubJA.crl (hash: L8F1dAg9XE9nR2+NoadmJ4YcTyHjzYOOutxZ+rJ5js4=)
2: GSs9YTYcBp0k_rMcJ6lExucgmq8.asa (hash: rU06J2Nsz3IWhCHO+giWwXNVWJAqC/xb5eigysyzeBo=)
3: hSa-jL7A0Cvb7swNmNrYjsj_n70.roa (hash: TUV2Alqz5JkF7MwZ8HViCcGRzdJK6kTlEyLaHmA8NLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:31:fb:e8:30:82:ac:c7:e9:de:d2:a1:fa:d6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90
Validity
Not Before: Oct 14 23:00:21 2026 GMT
Not After : Oct 15 23:00:21 2026 GMT
Subject: CN=6a721b40fd1f445b2c1061c7416cde518e883af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e0:f1:3a:5a:2b:8a:70:a9:63:25:1a:18:21:
7d:b0:38:58:b3:1f:5c:2f:ce:cc:5d:d6:24:71:34:
73:c1:b4:0f:71:2f:b2:0e:e9:20:05:4d:8c:9b:4e:
e4:ae:bc:97:84:38:b8:e7:d9:ca:82:70:6c:a9:fd:
26:c3:f7:ae:09:38:e5:16:df:2b:bc:9d:af:63:29:
42:fb:1f:12:bb:36:82:f0:c8:ab:ec:87:03:82:ca:
c6:84:57:b5:b4:3c:8f:97:4b:e1:d5:45:fb:c7:35:
a2:27:38:53:91:2f:28:7f:31:a3:9c:c8:18:fa:80:
89:1d:63:e2:49:36:9b:8a:d7:df:ec:44:fe:84:ba:
20:bb:a2:4b:71:20:f2:f3:c8:87:7b:e9:44:62:7a:
87:17:54:11:aa:d9:18:cf:5c:04:c4:37:60:fe:15:
78:9b:1b:5b:0c:88:ef:b9:21:bc:49:b4:83:0a:7b:
61:18:85:b7:54:32:78:a1:51:bb:fb:f1:1f:c0:3c:
34:44:1c:a5:86:d8:dc:11:ba:09:eb:cd:df:40:b4:
9f:fc:50:53:b4:d3:63:9f:c9:e2:41:81:93:66:81:
52:6c:12:49:a1:77:41:f9:4f:60:c1:29:d0:fe:80:
bd:fe:f1:c2:23:ad:f6:28:28:fa:2d:54:10:3c:26:
0a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:72:1B:40:FD:1F:44:5B:2C:10:61:C7:41:6C:DE:51:8E:88:3A:F7
X509v3 Authority Key Identifier:
keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e8:df:d6:7e:32:8b:ab:88:a4:41:f8:7b:18:8c:78:ff:b3:
e0:8c:0d:70:6e:31:f5:6f:85:20:65:e5:eb:cc:b1:74:36:81:
91:58:c1:43:b3:ca:c2:9a:77:4f:c5:e9:43:b4:70:e6:99:a2:
e7:f1:c0:0f:52:d7:38:9d:10:66:96:f5:97:dc:8f:12:95:4d:
9c:4b:77:fd:10:8a:5d:9e:80:84:d4:6c:9d:3a:ea:13:41:1b:
72:92:2a:e2:27:85:8b:96:6e:8b:3b:5e:21:4c:a4:ee:8f:62:
3a:e6:e9:5c:34:c8:4c:aa:ba:2e:74:2f:72:42:73:54:d2:27:
74:d0:1e:28:20:79:db:9a:a0:ba:3a:ee:82:a6:bc:f9:ba:eb:
01:a5:46:70:49:e3:4a:ff:d5:2c:9a:2b:b9:ec:dd:06:8c:0d:
3f:ac:af:fd:45:66:40:35:ba:a2:45:98:2a:a9:f1:d6:be:fa:
dc:4c:f4:67:c4:cc:e7:88:e0:06:7c:27:ff:c1:b1:87:27:6b:
c1:ed:2d:25:3e:ac:de:a1:59:54:f6:da:69:4a:9c:16:c0:1d:
68:68:47:7b:1e:64:9e:f3:4f:ad:1a:58:82:cb:09:83:45:61:
ad:3d:0b:01:90:72:be:ec:23:4a:08:e4:d6:c3:84:aa:90:c2:
b3:3a:bc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:26:35 2026 by rpki-client