Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
File: Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json)
Hash identifier: BO9piiIp/kwOnL1tYZLopVDfO6sMm3WD3Jh4nHlFSxs=
Subject key identifier: 71:0D:AC:2E:12:EE:9F:29:98:0C:D0:EA:77:AE:EF:C3:C6:88:5B:9C
Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Certificate serial: 019F916D81E223EFC44244B88B5BC34ACD8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
Manifest number: 1958
Signing time: Fri 24 Jul 2026 00:01:40 +0000
Manifest this update: Fri 24 Jul 2026 00:01:40 +0000
Manifest next update: Sat 25 Jul 2026 00:01:40 +0000
Files and hashes: 1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: EVqDZe5ZljR7F+7/ew5NK1vU2gan5vLn2V2k/fIoZaM=)
2: PlQCAe4FWjUSCOsaxJlS8rOMgYU.roa (hash: Ds9oHPXZ9drh6bet4k02ulHrCJ7yWBpxx33onOLcAs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:81:e2:23:ef:c4:42:44:b8:8b:5b:c3:4a:cd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Validity
Not Before: Jul 24 00:01:40 2026 GMT
Not After : Jul 25 00:01:40 2026 GMT
Subject: CN=710dac2e12ee9f29980cd0ea77aeefc3c6885b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4d:63:e8:ad:15:cd:b4:21:e3:ac:a2:a6:7b:
18:7d:87:07:b9:1e:0f:e4:51:a6:b4:d4:e5:60:bf:
db:91:fe:8a:b2:c1:09:cf:d1:92:0e:53:6c:c1:e4:
36:22:35:3d:55:cb:37:ef:67:00:4d:22:1a:df:7b:
51:99:e3:d2:61:65:3f:d4:55:cc:a7:a0:dc:3f:6e:
e5:d9:56:28:09:c3:e0:fc:fc:0d:e5:99:8b:4d:ad:
b8:ce:ca:ea:a4:6a:13:c0:7e:f2:15:8f:22:e4:1a:
73:61:2a:ee:d0:77:e8:7d:55:7e:b5:3f:41:e4:f6:
77:02:bd:92:96:47:1e:a9:d0:76:5e:35:7c:ef:f9:
3d:9e:aa:31:22:22:0b:42:73:a0:ff:90:1b:db:01:
a3:78:93:29:48:cd:46:a0:81:06:b2:31:49:81:88:
a5:19:ae:4c:78:0d:c9:31:a3:c9:73:ab:d1:98:eb:
88:9a:95:c6:5e:69:36:e2:71:b6:a8:f5:4b:0a:d8:
09:e0:9a:cf:17:2d:e0:64:04:b8:9e:73:b6:f0:72:
59:9e:2d:77:0a:67:56:36:4b:6d:94:22:47:c8:72:
f3:52:1c:68:2f:8b:01:06:71:2e:84:0b:f6:a6:ec:
d6:6e:9d:09:82:80:35:8a:0f:88:29:c5:36:7e:0f:
49:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0D:AC:2E:12:EE:9F:29:98:0C:D0:EA:77:AE:EF:C3:C6:88:5B:9C
X509v3 Authority Key Identifier:
keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:62:e8:7a:ec:68:ed:4e:68:d1:06:c7:67:77:92:d2:f0:58:
d2:dd:28:be:16:8a:92:3e:ff:21:26:dc:b7:58:53:dc:9a:a3:
c5:65:83:08:56:8e:e4:b2:43:9b:20:18:32:08:31:f1:51:ea:
dd:18:5e:7f:dc:10:95:e3:7b:3b:31:f8:79:33:e6:ba:42:9e:
c5:83:19:9b:df:14:f4:6a:ae:9b:a1:c7:3e:c6:50:50:ec:1d:
71:b6:06:a7:5b:6f:5e:48:1f:6f:bf:6a:04:8f:3b:44:af:ec:
fc:2a:39:c6:3c:07:40:60:dd:aa:c6:5e:4a:96:a4:bd:af:68:
6f:c5:9b:f7:ca:b9:5a:c8:94:35:2c:42:34:4b:36:41:4e:a5:
ed:16:37:b4:ad:1f:8c:1d:d6:46:aa:38:c9:03:88:cc:2f:63:
6d:af:46:10:44:2c:d5:09:b1:a2:df:f7:a3:84:93:fe:cd:6d:
57:b2:18:8d:60:de:ad:a0:32:8e:3d:b1:37:d8:6f:60:98:3b:
3a:1b:3d:32:ae:93:95:ac:ea:2e:06:f8:f5:c5:f3:7a:11:0a:
93:9b:da:39:53:f0:2b:73:91:bf:24:2b:d6:db:c7:a4:b7:5b:
f4:ad:e6:50:0a:15:d8:16:ac:85:67:b2:a3:3d:ce:98:b0:95:
88:9d:e8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:09:53 2026 by rpki-client