Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: 2Utwr8mWhPWYGF4YmqiCMQz7Tf9OH59DuAO0IyhTG38=
Subject key identifier: A3:AA:11:5B:D9:6A:7A:A2:72:02:90:B7:12:A8:9E:9E:F6:2C:FB:3C
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 019D27041D98F5766B9BCEA71C874F2251A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 22:01:14 +0000
Manifest this update: Wed 25 Mar 2026 22:01:14 +0000
Manifest next update: Thu 26 Mar 2026 22:01:14 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: 3qpS4ZEr7NNYhe841SmWS2WvqtVcrA0SyJiKYz9p8hk=)
2: hTRFy4b-NXgfqT3Ys05VYgTqhdI.roa (hash: lHDz7JkYdQE2h8WEtCFRCNw6+mNU93VaarKaLbHW5uI=)
3: hyfFakadnytXl4p0xrQCeFJgUhU.roa (hash: OoK7VERj3Hnh56OBMYeBHkMVOjO2QMd8/KNIimfFc/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:1d:98:f5:76:6b:9b:ce:a7:1c:87:4f:22:51:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Mar 25 22:01:14 2026 GMT
Not After : Mar 26 22:01:14 2026 GMT
Subject: CN=a3aa115bd96a7aa2720290b712a89e9ef62cfb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:50:d3:9b:f5:6a:dd:2e:01:06:cc:a9:45:
f3:18:de:f2:ea:21:6d:b9:da:39:ad:66:e4:3e:e7:
4e:39:87:89:c0:83:6f:d2:ce:f6:01:98:d2:62:8c:
38:90:ce:97:fc:95:14:34:1f:bc:bc:79:55:bb:a7:
f9:6f:07:a6:5c:ae:b9:75:87:dc:34:78:67:09:e5:
a3:62:93:b9:8e:d2:94:ed:65:df:dd:07:bf:52:b9:
3b:c2:55:d2:24:2b:73:05:1c:f1:a6:b2:90:4a:02:
39:29:ec:06:1b:d4:3d:1e:2c:05:ec:6b:35:0f:2d:
f6:87:ca:b0:3b:30:65:33:14:c9:54:6c:f3:41:41:
09:28:5a:b6:60:63:9a:ac:6f:0c:4a:6e:a9:ba:05:
99:7c:fd:bf:1d:d3:fe:30:6e:0c:1d:06:97:dd:c4:
36:26:93:6d:89:c9:e8:f7:98:9f:94:68:6b:f2:a3:
7a:66:7c:5a:79:2e:0a:fb:eb:bb:9c:24:41:5b:bf:
80:88:93:78:d8:b4:cf:24:17:2c:37:8b:6b:3a:d5:
e2:92:aa:79:be:b2:b0:0f:d3:49:98:83:69:6b:b3:
57:12:5d:ac:4b:50:67:0a:fb:1a:11:b2:9d:e8:55:
69:82:58:ed:0f:da:ad:79:3a:5b:c8:38:41:fc:75:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AA:11:5B:D9:6A:7A:A2:72:02:90:B7:12:A8:9E:9E:F6:2C:FB:3C
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9f:81:3a:c2:79:f6:14:f8:88:4e:be:eb:38:d3:96:81:99:
93:ac:24:51:88:9f:ed:f4:38:a6:50:3a:51:7d:db:f9:7a:35:
17:39:81:23:99:76:67:08:63:f6:70:b1:40:00:11:d4:71:7a:
d3:59:65:37:14:dd:b7:06:04:cb:73:ff:7a:9a:be:39:a1:59:
53:57:f1:77:ce:40:24:09:d9:cb:99:74:ab:41:ee:99:ed:15:
63:bc:42:5c:29:1c:f0:a9:81:52:7c:06:f4:0e:b8:a2:37:57:
56:62:38:ce:a6:8e:50:f3:9b:1c:a3:7d:68:da:d1:7b:34:b7:
c5:27:71:16:4a:9e:10:22:30:27:2d:b5:c8:6d:e4:c3:76:02:
6a:24:b2:cd:8e:d7:59:13:66:a1:95:a1:b5:56:9a:4e:73:97:
d6:f6:60:30:26:e9:27:b1:d0:2a:9c:2e:fe:2f:a2:90:79:b5:
2b:bd:ad:23:1d:9f:ca:ca:b5:08:bf:47:9a:60:0f:aa:94:1c:
a5:18:1c:a6:26:a7:6d:54:49:94:fe:18:49:2f:6c:79:1e:d9:
fe:ec:1a:71:ad:60:a7:23:72:6e:8b:d6:b0:7e:7f:3f:f7:fd:
14:0f:76:37:79:06:69:fe:a2:57:75:80:5c:7e:90:ba:5f:f0:
d7:c5:e4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:25 2026 by rpki-client