Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File: BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier: q+/L/Uz/7+syTsERcJf96vYfcgZyHSkmJwpPIhC29uY=
Subject key identifier: AA:EC:B6:D1:4A:A7:3C:11:1B:77:76:39:11:33:06:1C:AD:4D:F9:2E
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial: 019D37F725DE76029B6896C3ACAAAC268AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number: 17CF
Signing time: Sun 29 Mar 2026 05:00:37 +0000
Manifest this update: Sun 29 Mar 2026 05:00:37 +0000
Manifest next update: Mon 30 Mar 2026 05:00:37 +0000
Files and hashes: 1: 1HpVkB_jbLhmzmxBwUx9bssht30.roa (hash: zCHbybFcXq0qDlNR99yqu6g+oFdwplvbb6MafSX5AMs=)
2: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: tYejbQ8zNosFeoBEpfjvxec8Ll5SYbjmrb/1cvUMnVE=)
3: TgYSgtEo4dSznEstSh4wl1Lb_yg.roa (hash: nniijit4FyrPMtz8C+vav/OxG7xVfSAPSwIGynyNP+Q=)
4: XXDxWPYvJwQEEoD1ZkxghR4ET40.roa (hash: kPDCqZ/ABCjh6D3pWOnBRlSEdw9IBPT/5sVK336dTdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:25:de:76:02:9b:68:96:c3:ac:aa:ac:26:8a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
Validity
Not Before: Mar 29 05:00:37 2026 GMT
Not After : Mar 30 05:00:37 2026 GMT
Subject: CN=aaecb6d14aa73c111b7776391133061cad4df92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:3d:a6:ef:f0:05:c2:68:d5:c0:79:47:2c:
b1:34:fd:b6:29:4f:fd:e8:10:c7:3f:d3:41:08:90:
cd:69:f8:90:94:57:b4:0a:dd:ad:8c:6c:43:10:cb:
6e:dc:d1:90:59:8d:8c:8e:85:e2:87:2e:88:33:c8:
21:6a:98:8e:88:39:f5:94:c6:ae:f7:b6:65:4b:88:
5b:02:36:ae:5e:12:d4:f0:12:3b:7a:b1:81:f2:6c:
7d:c9:1a:ac:8f:6d:df:89:33:26:22:97:45:ac:63:
9f:cf:03:cb:b7:d7:a3:21:1d:05:80:15:6a:79:e9:
b1:8e:93:06:16:49:35:89:c6:ee:2a:d4:2a:37:f1:
5b:aa:55:26:5a:cd:a9:4b:2c:ad:3c:96:13:2f:f9:
6a:bc:1e:ce:24:a7:72:55:40:76:60:f2:0a:db:55:
6f:99:af:22:92:cd:35:ca:8f:c3:c5:98:15:92:6f:
e7:21:ca:55:8c:16:06:95:db:48:33:5d:22:ff:f8:
05:fa:b9:f6:de:a0:01:af:94:ad:6d:cc:90:5c:21:
15:11:ed:30:2e:4d:74:62:a4:6e:3e:b0:b3:8b:fe:
11:bd:99:de:c3:20:5e:c2:35:c0:86:24:b1:92:12:
1a:92:70:16:93:b7:18:d4:ac:23:21:85:f5:5e:75:
6a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EC:B6:D1:4A:A7:3C:11:1B:77:76:39:11:33:06:1C:AD:4D:F9:2E
X509v3 Authority Key Identifier:
keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8a:b9:18:35:7e:e8:e7:b3:84:08:9d:f5:13:8e:2a:55:51:
ec:08:ff:01:c5:45:22:75:c7:b9:0e:fb:9e:14:98:80:61:d1:
e0:48:c5:57:c0:87:af:70:ee:11:49:c6:51:a7:af:0c:c8:ac:
f4:ba:11:69:92:4d:b1:54:47:e8:b9:19:e4:0b:0e:a7:71:01:
59:e5:58:c0:d1:d1:85:13:39:56:ba:5b:e7:61:e1:8f:b2:fc:
b6:9b:e9:14:91:01:2e:9a:3b:d7:46:43:35:a8:e0:58:eb:c4:
4d:ec:81:51:5c:50:2c:ab:eb:21:9a:c6:d3:ed:1c:8f:68:c5:
6e:fd:2a:03:34:e0:6a:2c:04:ca:63:f1:13:80:4d:34:91:d4:
81:83:f7:0c:fb:44:1d:29:87:4d:b5:49:95:ac:a7:82:27:6f:
0e:f3:9b:98:3a:ad:fe:47:73:be:a2:8e:ba:78:19:f3:fb:f7:
5c:46:02:d7:c2:0f:4f:a3:bf:f1:2a:ab:f3:e9:1f:5a:01:9e:
1a:83:01:4d:13:8a:35:d3:7b:41:52:b2:20:66:ed:2b:63:ba:
6c:55:aa:d9:e6:b4:84:c7:3f:b1:e4:30:cb:b4:7f:b2:5f:d7:
36:dc:9f:91:87:93:d4:ee:7f:ac:2a:53:fe:b6:87:84:07:03:
97:a0:aa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:57 2026 by rpki-client