Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
File: Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json)
Hash identifier: Kzkl/M2hp/qAJapKHKADwSmm9kLhQBvHRdxi/GGN8R0=
Subject key identifier: 53:A7:57:B1:D0:0C:DE:44:F7:23:E8:C2:2A:E8:C8:86:8D:02:32:93
Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Certificate serial: 01A0D5DD7CE8EF8ED463812B8AE868BD7350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
Manifest number: 1A00
Signing time: Fri 25 Sep 2026 00:00:57 +0000
Manifest this update: Fri 25 Sep 2026 00:00:57 +0000
Manifest next update: Sat 26 Sep 2026 00:00:57 +0000
Files and hashes: 1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: Y+sDPtMAJTHmt+hgoEC/UWJcUKw26CEF1kRqNZHwinU=)
2: PlQCAe4FWjUSCOsaxJlS8rOMgYU.roa (hash: Ds9oHPXZ9drh6bet4k02ulHrCJ7yWBpxx33onOLcAs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:7c:e8:ef:8e:d4:63:81:2b:8a:e8:68:bd:73:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Validity
Not Before: Sep 25 00:00:57 2026 GMT
Not After : Sep 26 00:00:57 2026 GMT
Subject: CN=53a757b1d00cde44f723e8c22ae8c8868d023293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:9f:26:96:48:ad:9d:f1:65:29:55:04:9b:
1e:da:4e:3f:4e:82:b0:56:3f:b7:c6:4e:5b:ec:d8:
4a:e5:f8:2b:9a:e6:99:15:f7:46:75:ef:07:83:9c:
98:4e:3e:d9:fc:e1:fa:a9:83:23:b0:30:21:a0:d3:
9d:71:aa:ad:69:d2:1d:7a:7a:f7:a4:2d:62:0a:e6:
95:63:03:01:59:68:ab:f4:64:8c:c5:6b:4f:29:5e:
47:07:ba:36:0b:18:26:b2:44:10:8a:75:09:5a:c1:
b9:5f:45:2f:9b:c9:b4:51:5b:0f:3a:35:30:e1:b0:
a7:81:3a:87:89:b0:6b:36:91:1a:6b:48:70:3d:1e:
f6:c4:6d:cd:b7:62:9b:ab:07:68:0a:34:c3:59:b0:
21:2f:24:fe:ca:1b:05:54:65:c3:5f:85:ef:a0:7d:
12:5d:44:04:cb:b5:40:18:1e:d0:4a:c6:c9:91:fc:
38:3a:4e:29:2e:2b:2f:26:9a:f6:4a:27:85:86:65:
ee:c0:ff:23:5f:4f:80:0e:d3:5f:36:01:f9:2c:44:
85:cc:0c:8b:2b:0e:4f:4a:e9:6d:25:6b:37:f3:93:
cd:1b:81:2a:e0:34:5e:d6:e9:1c:02:9b:29:50:cd:
5b:cf:ae:ca:40:c1:80:05:21:5c:51:d9:7b:01:b7:
8b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A7:57:B1:D0:0C:DE:44:F7:23:E8:C2:2A:E8:C8:86:8D:02:32:93
X509v3 Authority Key Identifier:
keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:db:05:64:6b:d4:77:16:53:84:2e:b9:12:7d:fd:b6:28:c3:
d2:9a:76:74:fe:b0:00:46:81:c1:0f:80:46:a4:38:44:1e:77:
09:b3:1c:4e:09:3c:f1:b6:ad:79:4e:a1:9e:a4:57:29:60:60:
89:81:2c:cb:de:5c:81:86:bc:e0:87:3b:11:2c:49:e9:be:71:
71:5e:68:a2:e8:6f:b3:91:04:6a:94:01:17:28:17:7a:27:6c:
ee:82:71:d3:8a:88:56:38:c3:3c:db:94:28:a6:85:ee:7a:47:
55:1e:a0:43:a2:e5:04:37:da:1e:01:77:8e:e1:74:64:42:b3:
67:ac:d9:bb:18:a1:37:04:33:64:bd:b1:40:9a:a7:4a:b7:9c:
07:71:e1:df:9a:40:11:1a:61:1e:26:cb:eb:8f:ca:d5:42:f7:
7f:d1:f1:e1:62:0e:85:48:25:e4:0b:e9:e1:28:44:51:50:0b:
e2:68:8c:4e:b9:fa:43:b8:48:07:b3:90:5e:6c:03:5d:8e:68:
04:7c:33:16:ef:bd:f2:24:6c:1c:40:a4:88:6d:cc:da:71:43:
44:13:98:f6:60:7a:5b:6c:84:00:15:8e:b2:a9:40:71:e1:ca:
75:f0:59:c9:81:f1:c1:05:00:bd:59:f1:60:08:de:04:4a:8e:
38:4a:ff:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:26:11 2026 by rpki-client