Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: PX5gDnQm4jSIU5fuolo2uKOWnzQZ7Olpg/Kbpbwmf6w=
Subject key identifier: 16:EA:68:7B:F8:66:21:4A:E4:5F:B4:61:0A:DE:20:61:4F:F3:C7:4B
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 01A0CFA41C3BA8B928A1908B8DE41B3235E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 1A70
Signing time: Wed 23 Sep 2026 19:00:33 +0000
Manifest this update: Wed 23 Sep 2026 19:00:33 +0000
Manifest next update: Thu 24 Sep 2026 19:00:33 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: pKaUOd3Y7o7AJ0EvKmcU4RoHIFGbhHQCUq/c82I9eUI=)
2: hTRFy4b-NXgfqT3Ys05VYgTqhdI.roa (hash: lHDz7JkYdQE2h8WEtCFRCNw6+mNU93VaarKaLbHW5uI=)
3: hyfFakadnytXl4p0xrQCeFJgUhU.roa (hash: OoK7VERj3Hnh56OBMYeBHkMVOjO2QMd8/KNIimfFc/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:1c:3b:a8:b9:28:a1:90:8b:8d:e4:1b:32:35:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Sep 23 19:00:33 2026 GMT
Not After : Sep 24 19:00:33 2026 GMT
Subject: CN=16ea687bf866214ae45fb4610ade20614ff3c74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:61:a2:41:e6:63:59:2d:85:06:59:b1:21:
3a:f9:10:7a:f9:55:39:7d:48:82:71:4a:3f:f8:6f:
00:50:eb:33:eb:3a:c9:f6:86:17:10:13:a5:00:fc:
29:44:cf:a8:94:86:f7:a6:e6:d6:bf:5f:39:d1:38:
95:9e:7b:39:f1:7a:0d:70:a7:ae:86:e1:34:b6:e9:
32:2d:80:b2:90:69:81:e4:da:dc:66:fc:8e:92:dc:
c0:36:cb:bb:b4:40:d2:15:73:94:c0:3a:3c:89:e7:
7c:fa:10:4e:8b:c0:27:0f:5e:8c:fb:4d:a1:8d:04:
a9:31:b3:5b:06:fe:4c:74:44:2c:33:1c:4c:99:7a:
d3:23:23:e3:76:63:15:cc:f0:00:e8:5c:b9:fe:4f:
0a:a7:8c:e7:4e:ec:e8:d7:6e:77:ad:c1:0f:2b:d4:
10:17:14:d5:35:5e:3d:5c:85:2a:72:35:e5:01:a6:
ea:86:a4:2c:81:f9:dd:e6:1a:a9:6c:d4:86:20:01:
0a:12:84:77:31:dc:d1:b1:3e:ed:c5:cd:9b:4d:97:
bb:eb:d5:02:3a:7a:cd:d3:eb:dd:63:1c:e3:39:23:
2c:f6:83:ab:45:3d:ab:67:81:8e:35:32:7d:85:a5:
fe:a4:19:fb:50:f7:a3:a6:ec:95:1a:c8:5a:34:5e:
78:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EA:68:7B:F8:66:21:4A:E4:5F:B4:61:0A:DE:20:61:4F:F3:C7:4B
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6b:df:20:6a:e5:3b:93:eb:c0:a2:ab:89:5b:02:8c:4c:fa:
be:7b:e9:72:e5:53:57:42:c6:59:15:c8:83:1c:3a:e3:03:27:
b4:9a:25:c1:5c:d5:5e:97:8e:d8:7f:09:38:84:34:c9:11:ae:
02:36:49:3e:eb:23:79:b4:f2:c5:df:c6:fe:9e:70:98:2d:b5:
66:e5:7b:7e:2a:11:8b:ba:e5:11:03:be:f0:85:99:ba:34:7c:
ed:fd:c4:50:02:a5:4d:4f:5b:43:61:95:4a:b3:9e:e3:3c:a5:
ca:4a:a6:54:e3:48:cd:3b:df:ab:8e:73:4b:08:ae:e0:cc:73:
a8:69:32:11:b1:48:60:45:15:78:fd:4e:f5:66:1d:09:72:4a:
ea:f6:b4:60:e6:b7:ff:d6:b2:43:36:f5:88:74:7e:f6:5c:21:
88:c3:3d:25:cf:e7:72:16:ba:52:76:5e:1a:5b:b3:e2:66:11:
c3:ef:f2:6f:41:a7:d6:6f:a3:c3:05:f8:88:cd:2a:3b:dd:c2:
06:8b:17:be:33:da:46:8d:dd:45:28:b0:29:80:a3:c4:1f:d0:
6c:af:2c:3a:ef:26:d3:0a:7e:d1:db:2a:47:7d:e7:f6:e0:42:
76:48:cd:48:af:03:01:7e:11:de:97:5a:ae:10:4a:55:2a:12:
58:25:fe:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:07:54 2026 by rpki-client