Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
File: BcojF2aaRo1QmoqhkGvvp1v5wgE.mft (raw, json)
Hash identifier: hHU1RzXeojXjgtS2TiLnVxByfIV+xuTvY5rstju9Fb4=
Subject key identifier: AC:D2:3B:0F:C3:F7:AB:BA:C2:FC:45:7E:7C:20:7F:2F:A2:89:DF:19
Authority key identifier: 05:CA:23:17:66:9A:46:8D:50:9A:8A:A1:90:6B:EF:A7:5B:F9:C2:01
Certificate issuer: /CN=05ca2317669a468d509a8aa1906befa75bf9c201
Certificate serial: 01A14082D207F62B3ECE41D9AC573A846AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
Manifest number: 11E3
Signing time: Thu 15 Oct 2026 17:01:17 +0000
Manifest this update: Thu 15 Oct 2026 17:01:17 +0000
Manifest next update: Fri 16 Oct 2026 17:01:17 +0000
Files and hashes: 1: BcojF2aaRo1QmoqhkGvvp1v5wgE.crl (hash: /HEtrEAUgno/tI68+cH6w8dSxQ/1JF51va+S7CZjPys=)
2: _Nt_jMCM0syV3YOypgtEhyWfleQ.roa (hash: WuW0pRT2Ay9tultoDSE8mYtKuVTzSPy9auWEqcscWzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:82:d2:07:f6:2b:3e:ce:41:d9:ac:57:3a:84:6a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ca2317669a468d509a8aa1906befa75bf9c201
Validity
Not Before: Oct 15 17:01:17 2026 GMT
Not After : Oct 16 17:01:17 2026 GMT
Subject: CN=acd23b0fc3f7abbac2fc457e7c207f2fa289df19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0f:ea:e6:2c:b0:07:12:46:b4:ea:2f:9e:91:
41:87:b0:3a:8e:14:5d:d1:ef:db:f1:0e:9a:f7:e3:
e0:7e:d6:c2:b8:a8:e4:d5:92:bd:b8:a9:da:11:ae:
8f:bf:a1:d2:9f:ac:2d:37:b6:3f:05:42:e6:93:93:
8e:e7:1e:f7:9c:c5:96:1a:66:df:77:d2:74:3f:ad:
17:84:b4:32:2b:7a:af:fb:81:33:40:7b:f4:df:2b:
ce:29:f0:3c:e1:67:f3:4f:0c:a5:0b:38:21:ff:0f:
35:ed:65:92:0d:94:29:5d:83:b3:87:0e:3d:4b:c8:
70:72:1e:c7:20:91:81:bb:81:04:6e:4a:95:7b:2b:
47:c2:ed:39:a0:2d:37:04:d2:87:f1:26:ef:7c:6d:
e5:5d:90:98:e4:f6:7b:4c:40:de:d3:6f:13:ef:4f:
0d:7f:55:ec:f6:f4:5e:9e:a7:5c:36:6d:00:c0:4d:
ae:de:b4:1e:12:d3:b3:21:ac:3d:5d:14:d6:11:69:
ff:c5:a3:07:4c:91:b0:f0:ad:4d:db:3a:ee:88:af:
77:43:37:35:43:3d:b4:c2:69:0a:76:33:18:e6:40:
b4:d8:03:c2:dd:d1:5c:36:ca:30:b7:2c:34:dc:0e:
30:5c:84:a7:42:f6:50:84:e3:58:ed:01:ac:8f:0d:
78:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D2:3B:0F:C3:F7:AB:BA:C2:FC:45:7E:7C:20:7F:2F:A2:89:DF:19
X509v3 Authority Key Identifier:
keyid:05:CA:23:17:66:9A:46:8D:50:9A:8A:A1:90:6B:EF:A7:5B:F9:C2:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:63:df:8d:70:fa:a9:5b:8e:19:b8:4b:12:f9:65:59:99:23:
d1:14:12:e6:64:73:72:91:4f:29:21:38:0c:4b:c3:a4:21:c7:
e8:2b:ea:64:8c:a0:ac:f2:32:12:f9:e8:6b:98:5d:fb:23:ea:
12:bb:ca:7f:59:3e:9f:b8:10:68:3c:04:81:86:9d:72:14:69:
ba:91:4f:6f:2a:4d:78:92:45:ee:17:c4:8e:b8:43:b3:33:0b:
59:2b:1f:6a:72:e3:ca:9c:cd:fa:9c:4e:f3:46:11:ef:55:1e:
7f:89:71:5c:56:a0:7f:3d:7c:06:96:19:f5:d3:9a:6e:43:e0:
fc:38:20:50:13:f1:d3:98:35:9a:69:9b:5c:72:76:80:52:e0:
05:f7:1c:7e:d7:dc:7b:82:27:dc:69:f2:c8:76:bb:35:b5:67:
18:c1:47:f7:52:3e:9f:06:72:88:40:7e:bf:c1:71:0d:0b:a7:
8f:58:74:f6:8e:11:cc:bd:71:39:e7:4e:78:2c:61:9a:92:7b:
3d:36:0b:2b:39:7d:3b:40:b3:15:90:6e:12:b5:8f:3c:2d:98:
37:fa:a7:b0:2b:34:97:8e:fe:70:d3:3a:9e:ec:8b:18:27:ef:
83:a1:15:8c:f4:10:f7:3d:c2:71:25:7d:bb:a7:7f:17:54:74:
79:79:c3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:45:08 2026 by rpki-client