Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
File: BcgcgJdDfNF58xkYPAKC6mzRylE.mft (raw, json)
Hash identifier: VCcq+qtGQewWfJoD6ut5BTzUg1dAQXlqZWVUVf5CIqs=
Subject key identifier: 0B:20:40:69:A3:DC:6A:A8:6B:D2:E7:E3:61:AF:93:59:B9:14:3C:F3
Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
Certificate issuer: /CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Certificate serial: 019D37C066B7A5C5D4220B42C7793365BDA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
Manifest number: 084D
Signing time: Sun 29 Mar 2026 04:00:49 +0000
Manifest this update: Sun 29 Mar 2026 04:00:49 +0000
Manifest next update: Mon 30 Mar 2026 04:00:49 +0000
Files and hashes: 1: BcgcgJdDfNF58xkYPAKC6mzRylE.crl (hash: DKIbkb0uO/fVTOtSOtpy/Rvp8Ql4afl9SPDpqxjxvlg=)
2: U-i1oEyBuqeV6jZfreY9KrH4m50.roa (hash: L5IQFtrjgg9i37LgVDvIKbkJPMhrCXGXXL5UYx1rh/c=)
3: XUDIgk_5z10h164Tz-e9tCKiPaQ.roa (hash: jI1OJJCcnL0UAf8SALv1ORGopOdQFzAzsNBmfQqbk2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:66:b7:a5:c5:d4:22:0b:42:c7:79:33:65:bd:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Validity
Not Before: Mar 29 04:00:49 2026 GMT
Not After : Mar 30 04:00:49 2026 GMT
Subject: CN=0b204069a3dc6aa86bd2e7e361af9359b9143cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:63:85:2e:76:10:bd:d2:ec:81:2f:4c:31:
2b:fd:a7:93:f4:df:7a:b1:5e:23:a1:6f:44:c0:22:
72:7b:aa:60:6b:59:8c:e6:d5:d5:e5:6e:f2:91:a4:
a8:ee:30:0e:01:1b:ee:0f:b3:d8:9d:58:3e:7b:3e:
d3:47:61:9c:9a:e4:8a:8c:7f:23:1a:70:ba:20:8a:
05:58:99:f8:94:ab:ba:af:7d:93:84:ab:cb:50:59:
be:66:6b:ba:07:68:f1:0b:c1:2b:73:3a:ab:26:db:
d6:a5:d2:21:7b:3e:68:e1:f6:cc:0a:37:06:a8:c1:
2e:d1:53:8f:20:ad:e1:9b:f1:64:db:14:97:fb:97:
4a:ee:23:9b:a9:e4:af:b1:4a:cf:a4:44:13:8c:ec:
a4:50:44:37:5b:14:d3:34:e7:62:b2:49:d5:7f:cd:
63:59:b2:59:54:b0:27:38:01:42:b0:21:40:2c:d9:
53:7b:7e:6f:76:38:7f:95:89:f0:e1:ed:48:11:0a:
2b:c5:79:34:83:84:d8:3b:90:32:a3:02:70:49:75:
f5:6d:bb:b1:05:2f:34:72:6c:61:3b:ff:cd:3d:39:
3a:7b:52:4b:dc:73:20:fc:57:41:f7:5a:0f:90:5e:
e9:4c:3b:9e:90:c5:ee:cc:13:13:91:4a:80:07:b6:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:20:40:69:A3:DC:6A:A8:6B:D2:E7:E3:61:AF:93:59:B9:14:3C:F3
X509v3 Authority Key Identifier:
keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e9:d3:37:eb:20:ba:14:97:5a:9b:fd:b7:fe:8b:16:7a:8d:
17:eb:f8:14:26:87:70:02:00:3c:9c:54:53:ca:42:07:9e:b0:
e8:4e:30:db:ac:d6:c8:59:25:fa:9a:fa:11:c2:5f:26:ed:be:
6d:a8:17:66:fe:02:9b:fa:02:fc:f4:d5:d7:42:40:1c:16:81:
69:d5:94:fa:84:1f:16:a8:2d:88:2a:9d:ef:0e:41:37:aa:25:
53:f1:8b:12:82:d6:c9:1d:4a:de:90:a4:3b:c0:f8:b2:4e:9a:
95:9e:6f:43:f2:cb:30:88:77:38:ea:48:86:0b:20:ac:02:2a:
8c:62:54:00:c6:04:e6:8e:af:3b:ee:9c:65:b9:7b:04:84:10:
09:e0:28:b2:5a:6b:f0:d9:52:68:3b:1d:30:bd:f7:83:18:fc:
55:36:4f:1e:71:58:af:d0:85:da:2e:b9:6d:74:c5:aa:60:c3:
fe:c4:f6:99:51:28:00:25:5b:07:b5:c0:0b:17:4a:9c:d1:f8:
94:11:30:c3:8c:e8:55:d4:c0:3e:d9:a3:30:cf:0c:ae:c1:bc:
14:53:75:db:72:a0:47:a3:57:e2:90:3e:97:a2:ff:ca:59:f4:
f9:66:60:25:7c:16:51:46:ce:6e:53:75:82:57:95:f3:f1:fc:
18:51:39:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:29 2026 by rpki-client