Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
File: BcCcQdI4lrLVQoGCYj-I-mdubJA.mft (raw, json)
Hash identifier: BLBpYQ/F9bxu3dqYrZRHS7c1WEo3nQnNBFG2HWHAmPg=
Subject key identifier: E7:3B:E2:A0:DF:1B:07:51:30:C0:45:46:41:28:66:58:9B:7F:4E:8F
Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
Certificate issuer: /CN=05c09c41d23896b2d5428182623f88fa676e6c90
Certificate serial: 01A0CEFF8D3945D2456AB9683DF9B7F19EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 16:00:49 +0000
Manifest this update: Wed 23 Sep 2026 16:00:49 +0000
Manifest next update: Thu 24 Sep 2026 16:00:49 +0000
Files and hashes: 1: BcCcQdI4lrLVQoGCYj-I-mdubJA.crl (hash: NRCW1ht8V6oPTan6+ccgdRq8SGZ9wfTrEaO5Iq+9to8=)
2: a32MUCBEBD7yImaxmD5xprVyEpU.asa (hash: LEIQqHPZ7Deh8zzcjOaSyrr8jOCT4jyKKlMIZpGKUJc=)
3: hSa-jL7A0Cvb7swNmNrYjsj_n70.roa (hash: TUV2Alqz5JkF7MwZ8HViCcGRzdJK6kTlEyLaHmA8NLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:8d:39:45:d2:45:6a:b9:68:3d:f9:b7:f1:9e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90
Validity
Not Before: Sep 23 16:00:49 2026 GMT
Not After : Sep 24 16:00:49 2026 GMT
Subject: CN=e73be2a0df1b075130c04546412866589b7f4e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e6:38:a1:8b:00:a8:20:e9:73:1b:ec:59:cd:
50:fd:3a:61:d3:11:46:87:5d:96:50:9f:22:1c:7e:
bc:e4:73:7d:c6:b8:ff:06:9e:ea:27:04:33:09:ee:
bd:5e:99:71:28:3f:82:6a:d4:63:82:70:fd:78:55:
61:8d:d7:29:8e:68:8e:87:cf:c1:1e:c2:0d:0f:ed:
16:14:fb:e9:43:41:f7:70:3e:a4:26:a4:80:da:a1:
80:03:94:86:2b:cd:33:b9:78:7c:59:d0:cd:62:48:
68:99:92:d4:85:d0:38:e8:c5:36:44:5b:5f:4f:ba:
c0:a7:f2:0a:a4:74:1a:25:8c:81:ad:bc:98:cc:11:
88:3a:2e:94:ae:a4:20:31:90:c2:4f:01:ac:3d:08:
71:8a:d3:88:bf:9e:b0:27:2c:b0:22:a0:50:a8:2f:
6f:32:77:cd:0c:6e:ef:5c:f9:71:12:9f:b1:7c:88:
51:2d:80:ae:0d:37:ef:e0:5c:b9:a2:99:59:06:0b:
fc:e6:5b:56:4f:1b:30:08:47:5a:02:61:e4:8d:93:
1f:72:51:71:02:a1:e9:77:68:83:be:64:83:ea:e5:
55:a5:ad:82:8e:b9:2d:56:bc:fe:8e:e1:68:29:7e:
38:7c:01:5a:90:37:4c:f1:df:d5:1f:a3:28:c2:fb:
ce:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3B:E2:A0:DF:1B:07:51:30:C0:45:46:41:28:66:58:9B:7F:4E:8F
X509v3 Authority Key Identifier:
keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:67:21:d5:23:13:2b:76:68:95:81:5b:72:89:5a:bb:78:1b:
f1:4b:15:69:c6:49:10:54:98:ad:64:1a:3c:dd:d5:a0:6a:4e:
23:b6:a0:15:27:3f:30:91:d5:ee:e8:79:43:a7:6b:fb:d1:71:
aa:32:34:5b:19:77:9d:82:55:17:27:ae:69:04:c5:8c:af:10:
4a:35:fe:9f:81:4e:a4:6c:09:a1:a7:88:fc:83:ef:94:d4:49:
e9:6b:26:8e:ab:07:d5:c0:4d:ad:cb:c9:98:a7:2e:08:22:cc:
47:a7:c0:91:6e:6c:75:a6:6f:a8:73:f3:26:3f:75:a1:36:1e:
f3:4d:9e:4a:a6:64:5c:e9:e7:63:a0:44:a2:fe:d1:10:ee:00:
d2:a9:c4:6f:f8:59:ef:26:19:f5:5c:73:c5:3f:b3:10:8b:66:
0e:f5:c4:91:e3:d5:c5:cd:c1:52:15:43:b3:b0:31:63:0c:50:
15:c5:5a:48:db:5f:44:be:99:b1:14:83:3c:59:4e:c2:27:be:
c5:a3:d7:49:dd:bd:45:5b:03:f9:bc:80:26:ca:6c:e0:7b:ef:
f8:14:09:35:05:6d:a8:a3:f2:ae:39:b8:6d:51:1c:31:f3:b4:
3b:f7:ee:95:ef:f6:23:a9:a0:66:a0:94:4a:ad:20:76:fd:f4:
eb:d0:63:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDO/405RdJFarloPfm38Z7iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YzA5YzQxZDIzODk2YjJkNTQyODE4MjYyM2Y4OGZhNjc2
ZTZjOTAwHhcNMjYwOTIzMTYwMDQ5WhcNMjYwOTI0MTYwMDQ5WjAzMTEwLwYDVQQD
EyhlNzNiZTJhMGRmMWIwNzUxMzBjMDQ1NDY0MTI4NjY1ODliN2Y0ZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOY4oYsAqCDpcxvsWc1Q/Tph0xFG
h12WUJ8iHH685HN9xrj/Bp7qJwQzCe69XplxKD+CatRjgnD9eFVhjdcpjmiOh8/B
HsIND+0WFPvpQ0H3cD6kJqSA2qGAA5SGK80zuXh8WdDNYkhomZLUhdA46MU2RFtf
T7rAp/IKpHQaJYyBrbyYzBGIOi6UrqQgMZDCTwGsPQhxitOIv56wJyywIqBQqC9v
MnfNDG7vXPlxEp+xfIhRLYCuDTfv4Fy5oplZBgv85ltWTxswCEdaAmHkjZMfclFx
AqHpd2iDvmSD6uVVpa2CjrktVrz+juFoKX44fAFakDdM8d/VH6MowvvOewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOc74qDfGwdRMMBFRkEoZlibf06PMB8GA1UdIwQY
MBaAFAXAnEHSOJay1UKBgmI/iPpnbmyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85NGU1ZmQtZTAzMy00YTVlLWFlZmMt
YjMzNDQwYWFhYjcyLzEvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85NGU1ZmQtZTAzMy00YTVlLWFlZmMtYjMzNDQwYWFhYjcy
LzEvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmch1SMT
K3ZolYFbcolau3gb8UsVacZJEFSYrWQaPN3VoGpOI7agFSc/MJHV7uh5Q6dr+9Fx
qjI0Wxl3nYJVFyeuaQTFjK8QSjX+n4FOpGwJoaeI/IPvlNRJ6WsmjqsH1cBNrcvJ
mKcuCCLMR6fAkW5sdaZvqHPzJj91oTYe802eSqZkXOnnY6BEov7REO4A0qnEb/hZ
7yYZ9VxzxT+zEItmDvXEkePVxc3BUhVDs7AxYwxQFcVaSNtfRL6ZsRSDPFlOwie+
xaPXSd29RVsD+byAJsps4Hvv+BQJNQVtqKPyrjm4bVEcMfO0O/fule/2I6mgZqCU
Sq0gdv3069BjhA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:21:10 2026 by rpki-client