Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: JhuwhDqMc/8V8EFfiQ6lwRKJPqdJbPgcpSe4QQ4V8po=
Subject key identifier: C4:30:DC:61:5B:BC:F7:66:1A:A2:39:C0:77:FC:F8:70:F1:AA:93:93
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 019E1C471132A149081FBBC465192D9B351E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 13:01:19 +0000
Manifest this update: Tue 12 May 2026 13:01:19 +0000
Manifest next update: Wed 13 May 2026 13:01:19 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: ZSJibqYu7O5IyS5wl8JyJeBV8U/QYJJ2lcYsDfsJUM8=)
2: hTRFy4b-NXgfqT3Ys05VYgTqhdI.roa (hash: lHDz7JkYdQE2h8WEtCFRCNw6+mNU93VaarKaLbHW5uI=)
3: hyfFakadnytXl4p0xrQCeFJgUhU.roa (hash: OoK7VERj3Hnh56OBMYeBHkMVOjO2QMd8/KNIimfFc/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:11:32:a1:49:08:1f:bb:c4:65:19:2d:9b:35:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: May 12 13:01:19 2026 GMT
Not After : May 13 13:01:19 2026 GMT
Subject: CN=c430dc615bbcf7661aa239c077fcf870f1aa9393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:5a:87:37:e8:97:a4:e6:93:d8:0a:11:12:
b7:18:c7:3f:75:61:d0:76:9a:7b:61:c9:e5:17:0c:
f1:a4:3f:35:6f:c3:76:19:9d:d5:6a:06:4c:eb:11:
06:ce:c3:5c:c5:77:aa:10:88:2d:04:ba:a0:38:76:
ae:1f:d8:b6:93:ec:ca:cc:28:18:01:27:35:2d:18:
1e:f6:1f:5a:e9:5b:0a:96:58:ee:90:a8:7e:95:4d:
1f:c5:1a:fc:ae:9a:30:e3:71:82:98:85:48:b6:94:
70:b9:6b:35:57:86:13:48:6c:81:17:3c:fd:e7:67:
81:d0:d7:7a:bb:e7:53:9f:3e:29:aa:bb:6a:00:78:
a8:1a:4e:54:1c:bd:4f:a4:f3:6b:c6:7b:22:9d:31:
b1:d8:28:e5:09:58:d3:0a:59:1f:38:c3:b3:c2:67:
f3:bf:4a:9d:e7:04:b1:0e:82:12:47:f6:d5:29:9c:
c4:7d:52:52:97:3b:f4:ee:b8:4d:c6:81:c1:c3:77:
80:58:2b:0a:f3:ef:13:e7:5f:52:c3:06:2f:a8:00:
60:d4:01:6f:b3:cb:25:7b:d7:ff:2a:d3:23:c6:2b:
c8:47:51:d0:01:82:89:60:59:22:f4:99:b8:e4:91:
0d:0d:5f:1b:ff:47:a7:8a:ac:48:07:15:d8:4a:9e:
e3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:30:DC:61:5B:BC:F7:66:1A:A2:39:C0:77:FC:F8:70:F1:AA:93:93
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:79:4d:49:89:2c:56:ab:53:fc:76:07:d9:2e:7a:e0:18:6f:
00:a2:b0:43:24:c0:5b:ca:b3:bc:52:76:a2:24:66:ee:92:d9:
34:d1:ac:77:89:0b:83:8d:ad:79:95:99:66:c2:47:2e:b0:72:
a2:4b:db:7e:f5:00:bd:f9:57:1d:2e:84:3e:8e:ae:6c:a6:d3:
26:c8:21:81:f0:67:73:2f:0e:37:86:91:be:07:7b:23:65:21:
6c:bd:a1:93:2b:0e:8f:10:cd:fe:16:8d:8d:64:f3:73:c7:52:
04:3e:a4:c6:21:f1:36:0b:4f:87:a3:c2:63:d5:c0:86:96:ae:
f6:fa:4e:29:98:9e:eb:9d:f6:5d:f9:84:59:01:35:1d:de:8b:
9b:ec:63:48:0b:7d:e5:3d:09:8d:79:e4:64:ca:81:f4:72:7c:
9f:4c:04:33:45:e2:95:a9:cf:76:e3:c1:92:ad:7d:4c:be:9e:
23:0e:dd:6d:73:8b:e0:98:f8:e5:c3:87:4c:40:d9:8b:0d:94:
bd:52:08:88:60:9e:ad:23:f3:a7:da:5c:25:c4:ad:61:c0:0e:
d9:fb:30:fa:bd:52:bb:ee:6c:0b:7c:77:04:6c:e6:87:b9:4b:
b3:48:e0:62:25:f2:8e:6a:9d:73:ef:74:f9:00:f4:0d:cd:45:
d9:45:ef:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:42 2026 by rpki-client