Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
File: BcgcgJdDfNF58xkYPAKC6mzRylE.mft (raw, json)
Hash identifier: vpIeOynduBo2JmB45rzH3zgaNdD5wTKQHp5JYIkDP/g=
Subject key identifier: 10:04:06:90:AD:95:34:56:43:96:55:91:C9:86:12:85:1E:DB:FD:E8
Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
Certificate issuer: /CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Certificate serial: 019E30E05262A805497467098B6379FD1A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
Manifest number: 08CE
Signing time: Sat 16 May 2026 13:01:07 +0000
Manifest this update: Sat 16 May 2026 13:01:07 +0000
Manifest next update: Sun 17 May 2026 13:01:07 +0000
Files and hashes: 1: BcgcgJdDfNF58xkYPAKC6mzRylE.crl (hash: L5b83KHQn58hAZggg8hH0qxew0K9WoLj7LbO3eGNV7A=)
2: U-i1oEyBuqeV6jZfreY9KrH4m50.roa (hash: L5IQFtrjgg9i37LgVDvIKbkJPMhrCXGXXL5UYx1rh/c=)
3: XUDIgk_5z10h164Tz-e9tCKiPaQ.roa (hash: jI1OJJCcnL0UAf8SALv1ORGopOdQFzAzsNBmfQqbk2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:52:62:a8:05:49:74:67:09:8b:63:79:fd:1a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Validity
Not Before: May 16 13:01:07 2026 GMT
Not After : May 17 13:01:07 2026 GMT
Subject: CN=10040690ad95345643965591c98612851edbfde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:6a:6d:87:e3:8c:66:18:4c:9f:5a:47:6f:
de:5f:66:db:fc:85:c2:e9:b8:8f:af:49:f0:46:d1:
9f:dd:6b:fe:eb:26:d7:57:c0:29:c2:0e:25:20:53:
79:09:e0:45:e5:2c:1a:1c:7a:ab:dd:01:92:ea:dc:
2c:b6:c5:a6:8f:c6:75:76:52:17:fe:28:aa:4e:9e:
65:d6:b0:69:5e:c5:55:da:75:3c:45:b0:f9:cb:4f:
33:fd:8c:00:33:f3:28:c7:17:fa:af:b1:68:c3:2c:
34:5e:19:bc:d7:9c:41:7c:bf:d7:2e:37:fc:9b:a0:
82:a0:22:d1:51:d0:d6:68:c3:4a:74:6d:d9:3e:f1:
f0:ce:cf:d1:7d:3a:87:2f:a4:e2:58:73:d4:eb:c9:
58:2e:9e:5b:7a:6a:64:b7:17:7a:fc:cb:b3:40:9c:
0c:ec:62:8c:fb:ff:46:54:8e:3c:f1:fe:7d:b3:fe:
ba:a4:21:fd:a9:be:8d:0a:9e:0f:e9:19:b9:0a:1b:
a7:00:cc:00:3d:e5:a5:e8:03:1a:e8:fc:98:40:94:
7d:81:fc:1c:69:b0:64:d3:fb:3c:89:81:7e:73:b6:
87:cf:12:d5:f5:3c:c3:a1:1a:d4:bb:f1:94:12:f5:
48:d9:16:38:cb:e6:16:73:ea:b9:32:1c:a2:44:35:
12:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:04:06:90:AD:95:34:56:43:96:55:91:C9:86:12:85:1E:DB:FD:E8
X509v3 Authority Key Identifier:
keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:60:fe:1b:88:ad:b0:e8:25:11:f0:52:af:bf:7a:bf:4f:76:
32:be:23:0f:5b:70:50:3d:7d:ce:6c:4a:71:04:29:ec:2a:17:
1a:bb:52:48:ca:c6:d9:d6:7a:86:40:76:54:88:f5:4b:7d:51:
80:40:d2:67:ce:3a:b5:3a:d8:2e:c7:92:e8:46:aa:bb:ec:71:
e7:8b:83:f1:bf:88:82:d3:2f:ee:bf:35:b3:c2:22:08:ac:07:
f6:47:9c:5b:77:81:a7:3b:c5:1a:92:40:c9:ad:f7:6c:ad:67:
70:8b:b6:d3:f3:92:2a:d4:17:b5:9a:89:15:f4:28:1b:ab:46:
bc:f3:b3:59:b5:f9:f0:cc:8d:4b:e7:cd:80:d3:fe:9f:b1:08:
9a:fa:ef:38:16:26:99:10:1b:55:7b:a1:e3:da:90:6c:0c:66:
79:49:01:ff:21:0b:1e:e4:62:3e:98:ba:4b:db:d2:dd:ce:7b:
48:82:da:8e:0d:bc:83:47:5d:55:34:67:b4:3c:b9:74:36:e3:
4c:c1:18:1f:69:d4:45:64:b6:cd:9a:02:30:bc:1b:a7:a9:2c:
29:ac:8f:d8:17:e5:5c:50:7a:f8:45:ea:2e:47:9b:c9:df:73:
56:89:a1:a8:00:df:3a:2d:98:8c:c8:4d:b4:ad:6c:d3:39:87:
69:9f:02:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:24 2026 by rpki-client