Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
File: BCTBFlgYpDL3l8jd9LUwex5a73Q.mft (raw, json)
Hash identifier: Q5U698DnNuZDBoUtk8n9dudcdE5cqu/sGkfUzmGBFwk=
Subject key identifier: EA:47:D4:4A:13:BE:34:6E:69:4D:86:A2:0D:57:A2:67:FB:98:3E:15
Authority key identifier: 04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
Certificate issuer: /CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Certificate serial: 019D382E52A83575F1F3EB3C24A8208FF1C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:52 +0000
Manifest this update: Sun 29 Mar 2026 06:00:52 +0000
Manifest next update: Mon 30 Mar 2026 06:00:52 +0000
Files and hashes: 1: BCTBFlgYpDL3l8jd9LUwex5a73Q.crl (hash: ICq6i1C3wqMwHKft8Rdzh0YjTEpjfaogFJiTza1l4ig=)
2: L5QyDq4nzLcpQLfWU1prA656nOQ.roa (hash: hEvHaOQM6citq23iRIkG5Vhd08rav1O71/Vw2lS4G94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:52:a8:35:75:f1:f3:eb:3c:24:a8:20:8f:f1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Validity
Not Before: Mar 29 06:00:52 2026 GMT
Not After : Mar 30 06:00:52 2026 GMT
Subject: CN=ea47d44a13be346e694d86a20d57a267fb983e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:17:a6:2f:6e:00:3e:c5:e7:c5:3d:b2:17:f4:
af:3e:b0:7d:c1:3f:47:81:28:88:4a:39:75:8c:7e:
f7:f8:9a:bc:8e:b3:9b:b1:a5:e1:a2:ca:5f:b2:57:
d4:98:bd:1c:cc:ff:70:0e:5b:3f:48:a0:0e:90:be:
90:72:ca:96:9e:af:44:b7:5f:0b:ad:2e:5b:52:fe:
f8:4c:e5:48:1e:ac:b1:37:2b:df:e8:d9:f9:24:1b:
e2:7b:81:62:98:0c:b8:fe:01:5f:cf:cb:f3:5c:29:
b3:43:a1:af:6a:4f:e5:0d:73:32:d8:c2:5f:26:f4:
b3:a2:de:e8:04:7e:a8:87:61:7f:8c:72:b2:d9:7a:
5e:2d:26:71:23:6b:b2:47:b7:c5:9c:70:d7:e8:15:
c6:b3:ca:b1:72:24:21:ff:e9:57:56:71:0d:54:38:
b5:cc:db:d9:13:53:cf:bc:11:00:3a:eb:8e:f4:d3:
03:cd:6c:78:f3:71:33:ba:89:4f:f1:81:e1:5f:3e:
5d:45:3d:05:37:bb:2d:be:ea:0c:69:a7:65:67:83:
f7:a8:11:d9:05:85:40:f0:31:c8:54:25:f7:1e:e9:
7c:24:97:14:b7:49:c0:c7:76:14:f2:30:84:d0:d9:
88:66:fc:06:76:cc:4b:01:43:72:f8:da:96:ca:f7:
e3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:47:D4:4A:13:BE:34:6E:69:4D:86:A2:0D:57:A2:67:FB:98:3E:15
X509v3 Authority Key Identifier:
keyid:04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:14:c3:0e:b0:2a:7a:c7:76:90:bc:84:e6:ea:1f:d8:f5:80:
93:43:8c:a5:eb:83:ac:05:d8:bc:9e:64:69:7a:4f:d7:a8:3a:
fa:7c:f7:a3:1d:89:dd:e3:69:e3:9d:03:c5:11:21:45:21:41:
61:2b:80:3c:19:12:2f:bb:37:2f:c4:1a:c2:23:61:e0:c9:9a:
15:21:86:18:2a:2e:2d:0a:e4:6c:2a:e7:91:5d:d1:64:dc:a1:
65:db:28:19:de:c5:7e:68:aa:76:95:9a:0f:26:5f:39:24:0a:
0b:11:f7:c1:f1:fc:ea:70:c2:36:e3:fc:3f:21:5f:d4:79:ff:
09:23:a9:39:ba:74:67:3b:17:c2:52:79:a1:5c:b0:b6:0a:b8:
61:38:16:2d:82:b1:1e:db:33:4c:f5:6b:20:0f:d9:34:e1:55:
c3:c1:bf:96:36:78:a0:5f:c4:2d:41:48:a3:16:d7:01:2e:27:
0c:cd:03:13:78:fa:6b:82:15:4f:7e:19:d5:66:1f:27:bc:7d:
f5:5a:f3:de:ab:4a:c0:8c:fc:6b:33:66:ef:31:d6:9a:a7:8b:
b1:62:50:23:db:79:f3:30:93:c7:a3:3a:3f:f8:f3:57:06:f9:
59:81:37:37:a4:ec:93:24:98:21:c8:40:8c:cd:f3:53:7e:a0:
0a:44:1c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:21 2026 by rpki-client