Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
File: BCTBFlgYpDL3l8jd9LUwex5a73Q.mft (raw, json)
Hash identifier: aD9i6qoXMQfxKlrEk32Jf7f1q+gnCI1hmpLK770PSzo=
Subject key identifier: 79:B3:34:BE:A7:CF:99:DE:AA:42:2B:98:F9:9E:C0:88:6A:2A:D7:C9
Authority key identifier: 04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
Certificate issuer: /CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Certificate serial: 01A089E80F32744BAA46BEF5FCAA13E5BE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 06:01:21 +0000
Manifest this update: Thu 10 Sep 2026 06:01:21 +0000
Manifest next update: Fri 11 Sep 2026 06:01:21 +0000
Files and hashes: 1: BCTBFlgYpDL3l8jd9LUwex5a73Q.crl (hash: KmAwYya8BxR+XuQzfU9Emzq2xGSf7N325iC72cTj0ho=)
2: L5QyDq4nzLcpQLfWU1prA656nOQ.roa (hash: hEvHaOQM6citq23iRIkG5Vhd08rav1O71/Vw2lS4G94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e8:0f:32:74:4b:aa:46:be:f5:fc:aa:13:e5:be:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Validity
Not Before: Sep 10 06:01:21 2026 GMT
Not After : Sep 11 06:01:21 2026 GMT
Subject: CN=79b334bea7cf99deaa422b98f99ec0886a2ad7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f1:ff:4d:8a:d8:59:d9:aa:c0:68:07:c7:7a:
88:ee:a0:95:04:b5:7e:81:6c:09:52:b2:b9:e9:5c:
3d:3e:48:62:fa:43:3d:b3:fb:ab:3f:54:d2:97:17:
09:77:2b:24:98:67:43:61:81:6a:e5:27:08:8e:a3:
c3:a6:fa:fa:d5:c6:20:95:29:1c:6c:3d:7e:c7:39:
93:cb:a4:15:9f:b4:75:a0:eb:00:ed:84:61:91:fe:
31:0b:bf:2d:b3:88:6d:82:99:2c:1d:1d:8b:db:0a:
2e:90:3b:70:9d:1b:21:f8:de:03:ae:63:a5:37:82:
13:6f:29:56:b8:eb:ab:30:ef:bc:44:bf:18:23:fe:
a0:0f:07:a9:bc:93:da:47:f0:1c:12:ea:43:a2:a4:
44:d0:c0:5a:b4:bd:3d:51:d7:bb:fc:d1:cd:6b:1b:
6f:d0:74:d4:95:d8:99:8c:d0:dd:35:1b:8d:31:84:
47:d3:36:51:d3:26:53:c9:04:95:46:4e:03:f5:4b:
e9:50:c2:0f:37:e7:b1:8e:8e:0f:c2:e1:ef:2a:ec:
ca:75:66:92:09:f2:11:32:73:1b:a2:66:d2:9a:52:
90:fc:2b:71:47:cd:c2:26:ef:6e:58:9f:02:69:82:
fa:5c:58:c2:0b:43:0c:00:62:96:f3:11:16:45:b3:
f4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B3:34:BE:A7:CF:99:DE:AA:42:2B:98:F9:9E:C0:88:6A:2A:D7:C9
X509v3 Authority Key Identifier:
keyid:04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:6b:25:8b:ef:46:19:cb:b4:30:08:0c:a2:b1:69:d9:c5:ac:
d6:19:47:95:ce:b7:91:53:52:0d:92:55:b0:bc:ff:1e:0a:c8:
0a:d6:a6:0e:9a:31:14:13:2a:e6:37:b3:cb:af:40:27:e2:3b:
9f:8f:7d:0d:40:95:3d:d6:e9:4e:08:3a:2e:a4:8e:cc:84:8e:
a8:aa:61:12:5b:59:ca:02:c9:60:55:2a:fc:f8:9b:5d:88:8b:
48:19:f3:92:e0:d8:52:8b:55:2b:c1:6b:13:55:23:68:cd:a0:
30:89:ee:e4:74:47:de:c6:52:5b:c3:67:e4:79:53:4f:81:de:
9f:34:b4:f4:d3:cc:b3:b6:e4:c1:d9:38:de:f3:f1:78:c7:0c:
e6:9f:73:a4:fd:e1:8b:91:c5:dc:c6:07:54:70:1b:bc:09:f7:
9e:23:26:f6:e1:1a:fe:f2:99:a1:01:be:60:aa:d7:85:e9:eb:
e9:cc:27:05:3a:5c:1c:59:22:f0:8d:b1:43:4f:81:8f:08:45:
34:5a:34:80:74:13:cc:d4:f7:11:7a:6b:50:a9:1e:ba:54:b4:
4c:17:55:02:16:25:57:54:27:31:aa:c8:82:e8:28:a1:c7:ff:
34:76:4b:d6:08:4e:f1:43:d7:33:28:e6:65:a9:4a:15:42:53:
45:95:38:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:58:12 2026 by rpki-client