Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
File: Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json)
Hash identifier: joyXDRdRDL3aeNUMOEzjCX/J3fp7q7q3cOafdNyBwek=
Subject key identifier: BB:53:B7:EF:93:2E:48:A3:D7:5B:DA:68:6B:BC:A8:C7:2C:45:8B:80
Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Certificate serial: 019D38D2AFC409021170D7DEC26BEBE79D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 09:00:24 +0000
Manifest this update: Sun 29 Mar 2026 09:00:24 +0000
Manifest next update: Mon 30 Mar 2026 09:00:24 +0000
Files and hashes: 1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: +8pQIuxYp+wOfzMCkn69xiPOVnsKhelKVJzAq7pZV84=)
2: PlQCAe4FWjUSCOsaxJlS8rOMgYU.roa (hash: Ds9oHPXZ9drh6bet4k02ulHrCJ7yWBpxx33onOLcAs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:af:c4:09:02:11:70:d7:de:c2:6b:eb:e7:9d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Validity
Not Before: Mar 29 09:00:24 2026 GMT
Not After : Mar 30 09:00:24 2026 GMT
Subject: CN=bb53b7ef932e48a3d75bda686bbca8c72c458b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a4:28:b6:19:be:00:34:42:c3:56:6f:5f:c1:
49:4c:ed:f5:88:0e:7b:ef:fe:5a:9b:65:50:c5:89:
2f:43:19:51:fa:b0:9d:80:3d:29:0c:c3:47:12:2b:
91:5d:54:c4:32:04:62:97:98:6b:a4:a6:73:58:d2:
28:71:f7:90:74:72:e5:78:09:ae:40:0e:58:e8:cd:
53:e8:58:70:ac:c2:b8:9a:4e:45:79:5f:db:bb:ed:
fa:77:e7:e8:6a:df:93:0c:df:5f:a4:07:b3:98:d0:
2a:48:9f:24:1b:62:cb:99:8a:10:c2:09:67:2c:80:
a0:53:75:bc:0e:b2:14:35:10:bd:46:e0:43:44:de:
2b:1a:7c:6e:7d:9c:b8:ed:05:e7:1d:03:b8:84:38:
59:a4:ca:c6:d3:ea:a9:0e:d5:bb:da:35:3f:ca:20:
76:c6:7d:71:ed:c7:f9:bb:69:20:41:6e:54:bf:53:
5b:bf:93:20:3f:9f:72:45:6a:21:eb:b4:20:ab:2c:
95:fa:ba:77:0d:6d:d5:0a:f4:66:38:e1:a4:03:01:
3c:1c:15:96:71:5f:fd:99:8a:22:30:72:95:e6:56:
88:28:ee:14:53:75:32:5f:14:7d:7a:6f:ba:f2:66:
f6:fd:40:94:fd:c2:0e:eb:26:bc:72:07:c1:1e:05:
3a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:53:B7:EF:93:2E:48:A3:D7:5B:DA:68:6B:BC:A8:C7:2C:45:8B:80
X509v3 Authority Key Identifier:
keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:66:0d:06:ef:76:9a:fe:37:f0:ee:bb:2d:25:ab:30:91:1c:
d5:3d:a2:6a:fb:d2:33:18:9d:96:81:c9:bf:cd:7e:a7:4b:50:
e2:a6:ec:8b:c1:27:aa:c6:a2:9d:05:df:fd:ba:4e:2f:85:a7:
84:81:59:4c:61:67:05:85:b5:52:3b:24:e2:a8:05:dc:6a:fb:
ac:6e:a3:72:8c:0c:c3:b5:5c:b8:99:10:ca:d3:13:a2:25:e8:
26:df:e6:1a:75:f0:08:e2:1c:ef:ba:3d:52:92:2a:9e:96:fb:
f2:b0:7b:4b:97:53:7b:93:c9:5c:39:d2:10:1b:2c:dc:03:d5:
91:b9:82:6c:95:03:60:21:09:46:f3:63:e4:f5:a3:61:59:85:
5d:86:d0:76:93:5c:d7:42:5f:d9:d5:ee:29:99:60:36:8b:6c:
e1:30:c0:48:61:74:26:8a:d1:f4:01:df:8f:7f:73:b5:ac:78:
55:be:fe:9c:75:dd:2c:35:21:e5:61:88:22:44:46:e3:6a:17:
13:c2:a0:71:2e:40:14:b0:1b:95:6a:3a:4e:62:29:06:13:a8:
b6:28:cc:cf:51:79:db:89:7d:49:11:c4:45:c4:60:e0:da:70:
20:ea:95:98:6c:95:66:58:e9:cf:3c:9f:82:2f:9b:26:2c:1b:
d0:f1:7a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:26 2026 by rpki-client