Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
File: BcojF2aaRo1QmoqhkGvvp1v5wgE.mft (raw, json)
Hash identifier: eEwX9JR7RZxtSWkLcWmbKY7VKhdkMhqx0AmnUjxVxN0=
Subject key identifier: 49:E2:62:3E:10:B9:03:07:9B:58:6D:5C:A0:26:59:7A:55:1E:E8:DD
Authority key identifier: 05:CA:23:17:66:9A:46:8D:50:9A:8A:A1:90:6B:EF:A7:5B:F9:C2:01
Certificate issuer: /CN=05ca2317669a468d509a8aa1906befa75bf9c201
Certificate serial: 01A00101E379EA93918F08701382A0FF6F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
Manifest number: 1138
Signing time: Fri 14 Aug 2026 16:01:35 +0000
Manifest this update: Fri 14 Aug 2026 16:01:35 +0000
Manifest next update: Sat 15 Aug 2026 16:01:35 +0000
Files and hashes: 1: BcojF2aaRo1QmoqhkGvvp1v5wgE.crl (hash: xRE2w26slsIH83zmAVBUOhJJNBc54UHrBsNRD2PiVD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:e3:79:ea:93:91:8f:08:70:13:82:a0:ff:6f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ca2317669a468d509a8aa1906befa75bf9c201
Validity
Not Before: Aug 14 16:01:35 2026 GMT
Not After : Aug 15 16:01:35 2026 GMT
Subject: CN=49e2623e10b903079b586d5ca026597a551ee8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:97:60:3a:b8:7a:ca:cb:c7:25:6e:c2:4b:
0e:0a:71:5f:54:a7:78:0d:4c:04:55:f1:8b:c9:94:
dd:a7:e5:f6:df:65:3a:2c:66:d0:38:85:04:8d:f5:
e8:a6:76:29:ae:74:40:76:2b:7d:b2:24:e9:dc:03:
d3:1f:92:e5:67:9e:8e:e9:a8:7e:62:a4:14:b3:3c:
f4:e5:87:ac:84:93:fc:ca:09:4a:b1:e5:05:f1:16:
9d:19:97:84:68:5a:b6:a9:c2:f6:19:a3:d1:31:a2:
b1:fb:7b:2b:e8:68:ad:d4:5f:2f:5c:85:97:c2:08:
4f:02:6a:1b:c8:32:cc:77:57:09:ee:f4:ee:6e:ca:
f4:17:3f:fb:0c:04:6d:d9:a0:b5:dd:5a:ef:5b:1c:
9f:38:0e:07:be:de:ff:1c:ad:97:c3:9b:b6:8e:57:
48:67:86:60:c2:44:21:0d:01:66:e0:13:94:eb:ed:
15:1d:2b:1e:8c:1c:87:e9:04:07:7b:66:c6:92:82:
49:56:fa:5c:0e:69:81:6a:05:ac:f1:ec:ba:29:6b:
09:2c:89:d5:9a:45:e4:f7:3e:9c:75:c2:6f:d6:56:
ef:9f:ef:a0:52:38:b3:ab:e8:ee:88:fb:c5:6e:41:
7c:71:15:ed:30:00:47:40:5a:2a:6e:37:42:bc:8e:
87:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E2:62:3E:10:B9:03:07:9B:58:6D:5C:A0:26:59:7A:55:1E:E8:DD
X509v3 Authority Key Identifier:
keyid:05:CA:23:17:66:9A:46:8D:50:9A:8A:A1:90:6B:EF:A7:5B:F9:C2:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3b:21:8f:f5:d4:dc:35:ff:2d:30:b4:65:0a:ce:a7:94:53:
3a:15:45:3d:c1:c7:dd:07:d5:50:45:40:da:1f:9a:6b:54:bd:
64:ad:f7:6e:96:f1:df:b5:21:ee:7f:e8:df:3e:6a:5f:6b:18:
c9:70:d5:c8:bc:a6:b4:b7:94:f8:5d:5c:fa:24:1b:ca:65:4b:
b4:79:49:a7:3a:a5:85:85:9d:cd:b6:27:8b:56:cb:56:6b:ef:
8d:2a:31:6c:f0:65:93:c8:7c:56:d2:61:01:39:9e:73:a3:06:
d4:0f:23:d4:91:bd:82:fe:fc:5c:bf:d5:31:b4:d0:ff:93:e9:
2d:bd:1f:cb:89:69:f5:3d:87:9b:79:ab:75:ae:35:c2:44:cc:
e3:fc:73:e5:ca:0b:d3:23:6f:0e:f9:ce:1b:e8:88:21:5d:b6:
ef:84:f1:47:81:96:1e:4a:e0:ee:b9:2a:db:5f:1c:c0:51:6d:
0f:27:48:cc:04:26:9d:c7:d6:66:85:91:8a:67:2f:68:80:40:
17:35:d3:97:06:fa:02:50:e4:6e:8a:47:86:c6:29:0e:64:18:
50:66:12:e4:52:b0:29:e2:65:c5:8d:29:db:f9:9f:85:21:0d:
ac:e4:8a:42:80:81:d3:aa:6b:ab:8c:68:6e:1f:5c:94:3f:6f:
2a:90:6a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:43 2026 by rpki-client