Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
File: Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json)
Hash identifier: 2z0AKJUT+MLUqNYweITCjGlWm7dgoblPH+eKrOppPGw=
Subject key identifier: F6:61:57:8F:6B:DA:AB:F1:69:B0:EB:94:C1:D9:50:15:DF:22:EA:83
Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Certificate serial: 019D2B4E937EAB1700A816EC1A3DC394403C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 18:01:02 +0000
Manifest this update: Thu 26 Mar 2026 18:01:02 +0000
Manifest next update: Fri 27 Mar 2026 18:01:02 +0000
Files and hashes: 1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: iaFEgq43GC7LDnIG50NSIg9lFzHLtHSeNB7SzTxEVw8=)
2: PlQCAe4FWjUSCOsaxJlS8rOMgYU.roa (hash: Ds9oHPXZ9drh6bet4k02ulHrCJ7yWBpxx33onOLcAs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:93:7e:ab:17:00:a8:16:ec:1a:3d:c3:94:40:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Validity
Not Before: Mar 26 18:01:02 2026 GMT
Not After : Mar 27 18:01:02 2026 GMT
Subject: CN=f661578f6bdaabf169b0eb94c1d95015df22ea83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9a:33:b8:1a:36:92:e8:91:84:f0:19:e6:3f:
d8:06:da:7c:34:3d:bf:bd:d9:5f:e4:28:97:b9:22:
93:2c:ff:9f:46:47:e2:8c:08:8e:7f:a5:cb:e3:d6:
d8:34:5f:6f:92:53:9a:0f:97:6a:0c:99:57:4c:8f:
75:24:e4:be:10:d8:e9:29:3b:ce:42:42:a2:4c:00:
52:71:b9:d7:f0:ec:cb:2e:1c:02:00:a8:33:f2:23:
7c:de:0c:ae:cf:50:c3:55:43:e2:c5:5c:76:b6:7e:
e0:be:bf:c3:b6:16:7d:c3:7c:de:66:fe:52:92:01:
11:3b:43:96:58:7f:46:da:12:37:ed:3f:c2:5a:60:
35:6f:e1:8b:bc:f4:cd:ca:12:ed:93:66:f9:4d:3f:
5e:70:c5:70:af:bc:83:45:44:73:55:15:5f:81:37:
28:47:1b:58:5e:60:df:a8:a6:bd:cb:dd:42:cb:fd:
7c:ee:b8:2f:fa:3f:64:d2:8b:68:a9:0c:84:ba:bc:
7b:62:78:b7:0a:4f:36:d8:a7:18:f2:55:4d:8b:b5:
77:a6:a7:15:ba:39:ae:64:06:fb:a5:62:cc:32:28:
40:d5:ce:a7:47:88:c5:f1:85:74:c1:fc:69:5c:59:
8e:87:67:c6:de:da:d0:5d:0a:f6:0f:b9:f0:72:e5:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:61:57:8F:6B:DA:AB:F1:69:B0:EB:94:C1:D9:50:15:DF:22:EA:83
X509v3 Authority Key Identifier:
keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:26:d6:87:2a:be:33:ca:6b:5a:8e:31:a3:4e:ce:6f:e9:e1:
5a:77:69:eb:79:35:e9:62:d8:f6:c2:f0:ee:c2:4e:57:f2:d7:
40:f2:98:8e:91:16:2c:9d:1b:fc:35:92:bc:b5:a7:c2:ab:17:
5e:a7:ee:c3:8d:38:6c:37:bb:94:a8:7e:16:ae:b2:8c:0f:e9:
02:2c:28:f1:ac:43:ec:b8:73:c8:cd:55:7d:2c:90:47:e1:8f:
ff:fa:0e:0c:49:54:e5:61:d1:c6:83:eb:80:a2:7b:e0:5a:ea:
af:47:0f:a2:b6:d0:6b:d0:46:a4:d6:71:4f:a4:10:44:e5:a7:
1f:01:62:a3:5d:53:0b:db:70:95:7a:73:8c:d9:48:1d:1b:46:
f1:63:65:0c:5b:98:c6:cb:43:2f:1f:d1:91:ce:3a:79:4b:d1:
89:5f:cb:b1:aa:5d:ae:c7:83:87:66:9e:f2:73:cc:c1:85:b4:
4e:e5:91:1a:d9:52:22:ab:23:1c:3f:87:08:4a:ed:29:ae:79:
0a:71:ee:ae:d0:a9:44:53:44:11:8f:68:30:ba:0d:4a:3a:47:
22:06:bd:ec:09:ac:79:5d:67:b6:4c:de:ec:d5:07:a5:ec:83:
86:e9:ba:cc:b6:ea:23:83:b7:07:55:07:41:5a:53:51:e5:00:
6c:a0:8a:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rTpN+qxcAqBbsGj3DlEA8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1Y2Y2YWQ5Y2JlOWY3YjI4NjNlMGNlYzM2YzE1M2M1ZDA3
MzZhZTIwHhcNMjYwMzI2MTgwMTAyWhcNMjYwMzI3MTgwMTAyWjAzMTEwLwYDVQQD
EyhmNjYxNTc4ZjZiZGFhYmYxNjliMGViOTRjMWQ5NTAxNWRmMjJlYTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pozuBo2kuiRhPAZ5j/YBtp8ND2/
vdlf5CiXuSKTLP+fRkfijAiOf6XL49bYNF9vklOaD5dqDJlXTI91JOS+ENjpKTvO
QkKiTABScbnX8OzLLhwCAKgz8iN83gyuz1DDVUPixVx2tn7gvr/DthZ9w3zeZv5S
kgERO0OWWH9G2hI37T/CWmA1b+GLvPTNyhLtk2b5TT9ecMVwr7yDRURzVRVfgTco
RxtYXmDfqKa9y91Cy/187rgv+j9k0otoqQyEurx7Yni3Ck822KcY8lVNi7V3pqcV
ujmuZAb7pWLMMihA1c6nR4jF8YV0wfxpXFmOh2fG3trQXQr2D7nwcuVjMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZhV49r2qvxabDrlMHZUBXfIuqDMB8GA1UdIwQY
MBaAFAXPatnL6feyhj4M7DbBU8XQc2riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80YmVjM2ItNGY1Ny00OGQ2LWJkY2Yt
NzQ4YWYxZjg0MDBlLzEvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80YmVjM2ItNGY1Ny00OGQ2LWJkY2YtNzQ4YWYxZjg0MDBl
LzEvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCbWhyq+
M8prWo4xo07Ob+nhWndp63k16WLY9sLw7sJOV/LXQPKYjpEWLJ0b/DWSvLWnwqsX
Xqfuw404bDe7lKh+Fq6yjA/pAiwo8axD7LhzyM1VfSyQR+GP//oODElU5WHRxoPr
gKJ74Frqr0cPorbQa9BGpNZxT6QQROWnHwFio11TC9twlXpzjNlIHRtG8WNlDFuY
xstDLx/Rkc46eUvRiV/LsapdrseDh2ae8nPMwYW0TuWRGtlSIqsjHD+HCErtKa55
CnHurtCpRFNEEY9oMLoNSjpHIga97AmseV1ntkze7NUHpeyDhum6zLbqI4O3B1UH
QVpTUeUAbKCKzQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:09:15 2026 by rpki-client