Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: oFOFD5n2oCTXiuat19Ws/m5qpJcPScuFSk/mX07HB1k=
Subject key identifier: 84:CD:BC:FC:E7:78:EB:77:B2:75:87:91:CA:D8:E0:74:9E:C8:7B:35
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 019F90FE7608E99C0662A0FDF6751A3E27E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 19CB
Signing time: Thu 23 Jul 2026 22:00:23 +0000
Manifest this update: Thu 23 Jul 2026 22:00:23 +0000
Manifest next update: Fri 24 Jul 2026 22:00:23 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: XJry/JyUA+YJl5VTxwfWQYRyiR9AwR3YnK6YXlMJyhU=)
2: hTRFy4b-NXgfqT3Ys05VYgTqhdI.roa (hash: lHDz7JkYdQE2h8WEtCFRCNw6+mNU93VaarKaLbHW5uI=)
3: hyfFakadnytXl4p0xrQCeFJgUhU.roa (hash: OoK7VERj3Hnh56OBMYeBHkMVOjO2QMd8/KNIimfFc/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:76:08:e9:9c:06:62:a0:fd:f6:75:1a:3e:27:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Jul 23 22:00:23 2026 GMT
Not After : Jul 24 22:00:23 2026 GMT
Subject: CN=84cdbcfce778eb77b2758791cad8e0749ec87b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:cf:70:80:e5:78:df:b2:3b:ac:0e:08:88:
a6:eb:d3:cb:2d:26:98:59:da:2a:ca:a6:ad:6e:17:
fe:72:56:9f:b3:9b:38:c6:0b:b7:51:1b:93:0c:e3:
6c:10:ea:dc:63:85:d5:68:93:bc:f3:1e:9f:7e:24:
21:9c:09:d1:07:a0:dd:ab:94:33:7e:3e:26:c9:00:
c6:40:a8:f1:50:8b:52:4b:65:f9:ba:9b:72:f2:f2:
22:b9:e9:38:75:ca:28:8c:cb:a1:83:e3:1c:2a:fa:
e5:da:0a:56:fb:df:dd:38:55:a4:3c:ad:dd:1a:41:
c0:1e:ae:5f:2c:ee:83:b5:a9:8f:51:85:38:e9:45:
1b:06:fb:74:53:7b:85:2e:24:cd:51:c0:67:1e:fb:
8f:6c:b7:bf:4b:6b:dd:ef:75:f1:61:c3:16:24:36:
6d:b1:e6:09:94:a6:c9:40:f5:b0:93:73:4d:32:41:
36:6e:bc:fb:4a:79:90:22:4b:cb:cf:b0:ae:bb:68:
da:b1:84:c1:02:c3:0f:74:0b:f3:86:0b:61:10:52:
98:82:ac:8a:9a:e9:c3:64:1a:33:41:fb:2f:4c:6c:
be:5f:0c:cd:4b:92:8a:f7:ad:b4:02:68:19:1c:1a:
5f:65:83:39:e7:77:f4:12:c8:ea:b6:11:09:46:9e:
f3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CD:BC:FC:E7:78:EB:77:B2:75:87:91:CA:D8:E0:74:9E:C8:7B:35
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b8:74:d7:2a:3a:64:ca:57:70:69:f6:90:09:bf:72:47:c1:
e6:a9:f6:56:97:37:3e:9b:04:ca:02:42:99:d7:bc:37:06:df:
01:cf:57:b0:d2:da:62:43:85:23:64:be:4e:c1:d3:72:78:e0:
96:04:f3:17:43:66:e2:45:c5:83:20:22:ca:96:f4:5e:e4:5d:
ad:d4:63:5b:77:42:1c:f2:e5:6d:2f:81:84:9d:8a:68:f3:0b:
57:74:5b:ac:03:79:fb:5a:e4:7b:ef:e9:18:3a:3c:cf:42:66:
26:80:00:3b:fc:4c:69:fe:04:3b:87:d4:f5:b2:58:a3:19:bb:
99:68:4a:b4:1c:75:fc:da:4f:33:4f:6c:d0:22:88:21:00:5c:
6b:63:76:7f:e8:6d:bb:a5:f8:16:16:83:04:ad:29:af:1b:73:
16:ce:3d:0f:45:3c:ba:d7:be:4e:25:81:ca:7f:ed:ac:e5:c3:
c8:b0:f1:1c:87:83:e4:d2:65:10:2f:1f:97:80:ee:34:74:81:
20:02:9c:c6:ba:ee:66:0e:fa:3d:d9:4f:5d:fc:e4:2a:c5:15:
99:33:07:51:45:7e:7a:c4:44:f6:46:8c:d7:8d:03:66:4d:c0:
0b:d8:a5:73:03:63:fe:3f:93:bf:78:ee:85:43:91:46:c8:75:
e6:f9:2c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:53:23 2026 by rpki-client