Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
File: bcXjzvXaXn_fw2TF1aBALTpnhtw.mft (raw, json)
Hash identifier: H5gqfs7jLxlfVac1ywAdj+bGi+xGh9jnQEozMXIjhPY=
Subject key identifier: 79:4C:F8:70:AC:50:87:E0:F1:6D:23:06:FB:16:F1:8F:77:92:39:15
Authority key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
Certificate issuer: /CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Certificate serial: 019D38656E40EB758E67A57048CD962FB915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
Manifest number: 112A
Signing time: Sun 29 Mar 2026 07:01:04 +0000
Manifest this update: Sun 29 Mar 2026 07:01:04 +0000
Manifest next update: Mon 30 Mar 2026 07:01:04 +0000
Files and hashes: 1: KTh_wFZKz8V5Fp_N5BMzfuwBa2E.roa (hash: Y4+66kr490+tAfYv+Li1KCX6wSQ4d0GvtrjYF/+CHtM=)
2: bcXjzvXaXn_fw2TF1aBALTpnhtw.crl (hash: dSEmIuebYu2f/fPfogoFEBQ9YCPz2oo30W3Poffo5jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6e:40:eb:75:8e:67:a5:70:48:cd:96:2f:b9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Validity
Not Before: Mar 29 07:01:04 2026 GMT
Not After : Mar 30 07:01:04 2026 GMT
Subject: CN=794cf870ac5087e0f16d2306fb16f18f77923915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:06:64:72:47:d5:94:b3:38:47:13:71:26:
96:d7:75:30:e1:e8:c8:79:f6:6f:bf:dc:02:83:c0:
03:15:26:2f:49:00:9f:53:85:93:1d:e2:24:80:92:
6d:fb:8f:40:44:f7:74:4c:84:61:2f:45:0c:79:cf:
dc:b9:6f:2e:c3:1d:56:6c:2f:97:96:a2:2b:bf:87:
69:bf:dc:06:9a:82:72:e4:e9:85:0e:4c:c8:cc:d4:
bc:96:2e:c1:52:9f:ee:a9:ce:b5:69:c7:f6:da:1b:
02:2d:a5:41:32:ed:10:22:5e:e4:3b:88:2b:42:ce:
62:b4:c9:25:00:73:7f:92:b2:41:07:07:ab:39:57:
fc:46:b9:dd:b9:b8:5d:8a:73:44:3f:41:f1:8d:5c:
d3:5c:fb:11:9b:9f:95:bb:19:ff:0b:7c:cf:0b:86:
d0:36:00:67:c9:e6:3c:77:54:e7:2e:07:ad:b9:31:
c1:20:2c:29:a5:1c:d6:39:31:a0:20:30:e1:52:40:
1a:16:07:e9:a4:61:de:7f:10:8e:18:17:29:03:d9:
a5:29:98:ee:22:e7:72:2d:11:5c:77:6b:aa:c2:9f:
5c:2d:f0:c9:6e:02:0a:dd:0c:0e:05:d8:d7:1b:43:
d3:4f:12:a6:6c:fa:18:d3:fd:00:a0:2b:40:b7:f8:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4C:F8:70:AC:50:87:E0:F1:6D:23:06:FB:16:F1:8F:77:92:39:15
X509v3 Authority Key Identifier:
keyid:6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a9:08:82:b8:4f:bd:74:1f:9b:fe:0b:ad:44:6d:2d:b2:e3:
b1:a3:a8:6f:17:50:85:29:a8:ed:14:29:6a:9c:7b:c0:bf:0a:
06:b4:a9:06:cb:43:32:06:ab:a6:a8:7e:04:ca:86:59:7f:cc:
c0:87:a3:75:d3:72:61:39:30:ea:1b:f0:ac:07:db:17:ea:21:
69:52:6e:fa:11:b4:f8:40:17:f7:fd:1e:04:2e:b3:e6:b8:dd:
69:e2:13:e6:79:6a:78:6b:43:c6:48:5c:b1:8e:15:94:e7:9b:
37:09:e6:13:37:8e:c0:f4:07:f6:07:4e:b1:cc:e0:5f:b1:6f:
f0:5a:5c:82:7b:ef:f5:14:dc:aa:6c:43:3b:7f:9c:ee:7f:f7:
6b:a4:47:2d:35:25:61:70:f0:25:21:11:e2:6e:56:93:46:81:
e0:03:db:f1:26:bc:40:f0:32:3a:b6:d1:85:70:b6:d5:d8:81:
d3:10:95:f1:48:5a:90:25:f7:89:16:c8:f2:18:fa:03:fc:2f:
13:8e:17:2d:b3:1d:11:12:42:e1:4a:fd:1f:e9:7a:03:37:ef:
03:4a:9c:c6:62:52:ce:aa:3a:ed:3d:e3:6d:21:3d:b8:50:91:
7f:e2:1c:e9:8c:7f:8c:74:5f:ac:1c:ce:91:89:98:67:07:73:
21:bc:6d:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZW5A63WOZ6VwSM2WL7kVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYzVlM2NlZjVkYTVlN2ZkZmMzNjRjNWQ1YTA0MDJkM2E2
Nzg2ZGMwHhcNMjYwMzI5MDcwMTA0WhcNMjYwMzMwMDcwMTA0WjAzMTEwLwYDVQQD
Eyg3OTRjZjg3MGFjNTA4N2UwZjE2ZDIzMDZmYjE2ZjE4Zjc3OTIzOTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfUGZHJH1ZSzOEcTcSaW13Uw4ejI
efZvv9wCg8ADFSYvSQCfU4WTHeIkgJJt+49ARPd0TIRhL0UMec/cuW8uwx1WbC+X
lqIrv4dpv9wGmoJy5OmFDkzIzNS8li7BUp/uqc61acf22hsCLaVBMu0QIl7kO4gr
Qs5itMklAHN/krJBBwerOVf8RrndubhdinNEP0HxjVzTXPsRm5+Vuxn/C3zPC4bQ
NgBnyeY8d1TnLgetuTHBICwppRzWOTGgIDDhUkAaFgfppGHefxCOGBcpA9mlKZju
IudyLRFcd2uqwp9cLfDJbgIK3QwOBdjXG0PTTxKmbPoY0/0AoCtAt/g0UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlM+HCsUIfg8W0jBvsW8Y93kjkVMB8GA1UdIwQY
MBaAFG3F48712l5/38NkxdWgQC06Z4bcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jYzc3YTYtMmIwZS00Y2RkLTg4MjYt
Y2RjYzk2NjA3YjlhLzEvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9jYzc3YTYtMmIwZS00Y2RkLTg4MjYtY2RjYzk2NjA3Yjlh
LzEvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6kIgrhP
vXQfm/4LrURtLbLjsaOobxdQhSmo7RQpapx7wL8KBrSpBstDMgarpqh+BMqGWX/M
wIejddNyYTkw6hvwrAfbF+ohaVJu+hG0+EAX9/0eBC6z5rjdaeIT5nlqeGtDxkhc
sY4VlOebNwnmEzeOwPQH9gdOsczgX7Fv8Fpcgnvv9RTcqmxDO3+c7n/3a6RHLTUl
YXDwJSER4m5Wk0aB4APb8Sa8QPAyOrbRhXC21diB0xCV8UhakCX3iRbI8hj6A/wv
E44XLbMdERJC4Ur9H+l6AzfvA0qcxmJSzqo67T3jbSE9uFCRf+Ic6Yx/jHRfrBzO
kYmYZwdzIbxtSA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:54 2026 by rpki-client