Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
File: BcCcQdI4lrLVQoGCYj-I-mdubJA.mft (raw, json)
Hash identifier: YzLdTHUJ+pKglE9wMseJy7TKksK8MZmK/e9GOGxGESI=
Subject key identifier: A5:F6:2A:B1:93:38:DE:32:16:0F:2B:6A:F6:D2:56:8C:82:1E:70:93
Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
Certificate issuer: /CN=05c09c41d23896b2d5428182623f88fa676e6c90
Certificate serial: 019D265EC8C00498A489F47264FA715EAC35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 19:00:39 +0000
Manifest this update: Wed 25 Mar 2026 19:00:39 +0000
Manifest next update: Thu 26 Mar 2026 19:00:39 +0000
Files and hashes: 1: BcCcQdI4lrLVQoGCYj-I-mdubJA.crl (hash: 6w8mpOvb2kEbKLlkRKQBF0SDvRPhnrew9u4BcmJMrOs=)
2: a32MUCBEBD7yImaxmD5xprVyEpU.asa (hash: LEIQqHPZ7Deh8zzcjOaSyrr8jOCT4jyKKlMIZpGKUJc=)
3: hSa-jL7A0Cvb7swNmNrYjsj_n70.roa (hash: TUV2Alqz5JkF7MwZ8HViCcGRzdJK6kTlEyLaHmA8NLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:c8:c0:04:98:a4:89:f4:72:64:fa:71:5e:ac:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90
Validity
Not Before: Mar 25 19:00:39 2026 GMT
Not After : Mar 26 19:00:39 2026 GMT
Subject: CN=a5f62ab19338de32160f2b6af6d2568c821e7093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:00:c7:3a:e8:f5:a7:82:28:eb:0b:41:0e:
e2:5e:e2:f3:ab:16:7f:17:b6:be:ca:ee:50:e5:35:
ce:a9:f9:16:6a:4a:05:83:4a:0d:ac:58:68:16:6f:
c3:5b:d2:6a:b9:ae:b7:9d:00:2c:c3:b1:98:51:d8:
3c:32:09:02:f0:84:ff:bf:99:43:fb:ca:ec:44:92:
5d:4d:7c:3c:f5:68:c1:b2:87:85:80:c8:cb:6c:07:
69:a1:16:0a:2f:6b:6f:aa:3b:5e:6f:46:25:4b:3c:
3f:c0:89:b1:a5:d3:ce:27:d6:37:0d:55:4c:dc:a8:
16:b8:31:19:40:d8:a1:00:fb:c1:e6:57:d5:46:6f:
1e:62:5e:f9:9e:f8:a2:bd:06:f0:8d:cb:8e:24:61:
e5:b7:c7:5a:45:6e:19:44:81:4f:06:40:f4:d9:07:
cd:4f:02:32:df:02:a4:02:23:7f:82:4e:4a:1a:bd:
76:3b:8f:60:24:be:94:eb:7e:b7:48:80:90:39:8e:
51:08:3c:85:40:90:5d:8c:c7:da:ee:76:8d:6b:3f:
4c:34:01:9d:00:52:30:b6:24:fc:b4:78:b5:01:82:
c4:da:07:34:fe:04:8b:27:7d:fb:56:d1:ab:82:78:
24:3f:8a:6d:da:5d:9b:7e:c0:ca:88:34:73:44:7a:
b7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F6:2A:B1:93:38:DE:32:16:0F:2B:6A:F6:D2:56:8C:82:1E:70:93
X509v3 Authority Key Identifier:
keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:eb:ca:a2:d5:0d:ca:cf:24:ef:2f:ca:cc:f0:f9:c1:dc:97:
6b:42:e4:29:70:01:a3:2a:fa:e4:f5:ca:88:fd:36:39:fd:72:
33:6c:f3:4d:98:70:13:a0:9d:26:c6:17:24:e7:dd:56:7c:bd:
14:65:3c:be:02:e4:e6:ad:1a:81:89:50:3e:33:1b:36:18:21:
f6:62:23:1f:be:e0:1b:90:b8:b1:a2:70:7e:a0:22:cc:83:c3:
4b:59:92:59:58:cb:a1:dd:9b:62:10:27:e0:1e:a8:b6:ab:df:
66:3a:38:fc:29:84:19:7d:9c:00:35:4e:5a:50:ef:df:95:03:
f2:44:a1:fe:95:02:9e:cf:ed:0b:1e:8e:ee:67:c1:0f:b4:f9:
0a:64:0d:d7:48:1f:1d:44:a9:8c:c1:12:86:42:8c:4e:a8:59:
e0:93:b7:78:24:7f:c1:63:66:86:37:ba:b4:33:0c:f3:48:bc:
5b:9b:a5:5d:19:58:86:66:07:15:db:5a:7b:c4:14:c3:d5:13:
5c:e4:dd:09:b5:ce:7e:05:fa:2d:25:ce:81:06:8b:a1:0d:9f:
5c:d8:8b:74:9c:3c:37:a9:f1:99:e8:22:b6:d6:62:f7:0c:13:
74:0f:ca:f4:04:06:38:d3:72:d1:92:d1:a5:13:0f:44:fc:8f:
dc:7a:d8:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXsjABJikifRyZPpxXqw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YzA5YzQxZDIzODk2YjJkNTQyODE4MjYyM2Y4OGZhNjc2
ZTZjOTAwHhcNMjYwMzI1MTkwMDM5WhcNMjYwMzI2MTkwMDM5WjAzMTEwLwYDVQQD
EyhhNWY2MmFiMTkzMzhkZTMyMTYwZjJiNmFmNmQyNTY4YzgyMWU3MDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLQAxzro9aeCKOsLQQ7iXuLzqxZ/
F7a+yu5Q5TXOqfkWakoFg0oNrFhoFm/DW9Jqua63nQAsw7GYUdg8MgkC8IT/v5lD
+8rsRJJdTXw89WjBsoeFgMjLbAdpoRYKL2tvqjteb0YlSzw/wImxpdPOJ9Y3DVVM
3KgWuDEZQNihAPvB5lfVRm8eYl75nviivQbwjcuOJGHlt8daRW4ZRIFPBkD02QfN
TwIy3wKkAiN/gk5KGr12O49gJL6U6363SICQOY5RCDyFQJBdjMfa7naNaz9MNAGd
AFIwtiT8tHi1AYLE2gc0/gSLJ337VtGrgngkP4pt2l2bfsDKiDRzRHq3awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKX2KrGTON4yFg8ravbSVoyCHnCTMB8GA1UdIwQY
MBaAFAXAnEHSOJay1UKBgmI/iPpnbmyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85NGU1ZmQtZTAzMy00YTVlLWFlZmMt
YjMzNDQwYWFhYjcyLzEvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85NGU1ZmQtZTAzMy00YTVlLWFlZmMtYjMzNDQwYWFhYjcy
LzEvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAluvKotUN
ys8k7y/KzPD5wdyXa0LkKXABoyr65PXKiP02Of1yM2zzTZhwE6CdJsYXJOfdVny9
FGU8vgLk5q0agYlQPjMbNhgh9mIjH77gG5C4saJwfqAizIPDS1mSWVjLod2bYhAn
4B6otqvfZjo4/CmEGX2cADVOWlDv35UD8kSh/pUCns/tCx6O7mfBD7T5CmQN10gf
HUSpjMEShkKMTqhZ4JO3eCR/wWNmhje6tDMM80i8W5ulXRlYhmYHFdtae8QUw9UT
XOTdCbXOfgX6LSXOgQaLoQ2fXNiLdJw8N6nxmegittZi9wwTdA/K9AQGONNy0ZLR
pRMPRPyP3HrYMA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:11:43 2026 by rpki-client