Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
File: Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json)
Hash identifier: BcDmdVf2hNSDj+y4Q2MV/Q0pEpciy5f3bOpKzpA4wVM=
Subject key identifier: F5:0C:EE:B6:15:89:68:C4:E6:25:6F:59:96:C6:76:DF:4C:2C:C7:4A
Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Certificate serial: 01A0D9BA5AB03C562D9BDC10AC3B5A2FF0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
Manifest number: 1A02
Signing time: Fri 25 Sep 2026 18:01:03 +0000
Manifest this update: Fri 25 Sep 2026 18:01:03 +0000
Manifest next update: Sat 26 Sep 2026 18:01:03 +0000
Files and hashes: 1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: zgCw8NOHbwfla/svf56FyOIgRzEl+VejT99SnuEEkgI=)
2: PlQCAe4FWjUSCOsaxJlS8rOMgYU.roa (hash: Ds9oHPXZ9drh6bet4k02ulHrCJ7yWBpxx33onOLcAs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:5a:b0:3c:56:2d:9b:dc:10:ac:3b:5a:2f:f0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Validity
Not Before: Sep 25 18:01:03 2026 GMT
Not After : Sep 26 18:01:03 2026 GMT
Subject: CN=f50ceeb6158968c4e6256f5996c676df4c2cc74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:aa:f1:eb:e8:97:1c:08:2b:cb:85:1a:71:
c1:9a:98:42:90:1b:2c:0e:58:47:14:83:6e:85:a9:
68:a2:0f:49:c0:69:38:1e:ef:15:23:a4:6d:f3:47:
83:b2:6d:08:4e:e2:ae:43:18:c0:37:63:44:9c:af:
17:29:ca:15:1c:01:84:21:c7:56:ce:ed:c1:ae:79:
c7:9f:58:c9:8e:00:71:53:18:74:7d:37:65:df:91:
ab:62:f9:b8:cf:9d:96:36:92:0a:32:cc:f6:cb:7a:
d8:88:d2:16:af:fe:69:04:d1:77:a8:1a:31:bd:89:
14:ca:b3:63:27:2b:f6:8a:cb:7f:27:ac:5b:db:00:
26:4c:5a:dd:ac:e5:62:44:c5:8b:fc:46:5d:ed:23:
0d:56:41:b5:13:b2:18:19:b1:89:da:83:b7:e2:9d:
27:12:5e:89:30:6f:7b:13:71:cd:d8:11:85:af:1a:
9f:0a:09:9f:91:35:dd:ef:c0:45:26:df:b9:c0:91:
fc:60:cd:30:95:a0:4e:db:a4:37:6d:81:8f:8f:80:
89:8a:ed:d1:1c:5c:54:ea:28:a6:b3:6d:00:9b:40:
91:44:be:a3:e8:cb:47:7f:79:35:f3:40:e5:49:24:
05:b2:9e:ac:74:c7:6d:2b:a8:1c:57:04:a0:d3:6a:
35:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0C:EE:B6:15:89:68:C4:E6:25:6F:59:96:C6:76:DF:4C:2C:C7:4A
X509v3 Authority Key Identifier:
keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:19:51:f7:ec:8a:b8:5e:83:fe:ae:2b:65:b8:fa:c9:fa:2d:
51:f9:a9:5d:1a:17:2d:d6:a6:3a:c8:84:5b:1e:18:e1:17:c5:
05:da:ca:07:f7:a6:d2:3d:3a:03:3b:32:90:06:12:2d:42:68:
df:f0:00:55:bb:e4:b9:dd:3f:48:9c:97:a5:96:24:a0:32:8e:
de:8f:ee:1c:14:50:fb:e3:d4:7c:92:c9:a1:6f:3a:80:7a:91:
fc:a1:77:a5:8b:c3:4d:b8:09:08:8a:17:ee:ee:8f:08:31:f2:
0e:e2:0b:00:3f:de:6f:92:2e:8d:71:87:b6:81:14:18:e7:c3:
79:90:1c:74:0e:2a:a4:c4:9f:56:26:d9:a3:43:5e:b6:81:b6:
2b:2f:4d:70:81:fc:3f:6a:21:8b:8a:f7:61:75:11:4e:2e:2a:
02:98:e0:76:ba:d0:40:56:11:ad:85:ed:52:ab:ab:37:f6:bb:
a1:30:67:0a:0a:85:a9:40:03:1d:41:d0:1e:ed:4c:16:d4:ad:
00:28:1d:60:36:78:20:92:96:76:28:ac:f3:3d:66:db:2b:ed:
5a:7e:cd:99:53:23:5a:52:ed:b4:39:86:c1:0a:fa:fd:17:77:
c3:58:61:95:3f:33:58:86:f6:2f:b5:c2:01:18:c8:35:eb:b8:
09:40:79:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZulqwPFYtm9wQrDtaL/DWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1Y2Y2YWQ5Y2JlOWY3YjI4NjNlMGNlYzM2YzE1M2M1ZDA3
MzZhZTIwHhcNMjYwOTI1MTgwMTAzWhcNMjYwOTI2MTgwMTAzWjAzMTEwLwYDVQQD
EyhmNTBjZWViNjE1ODk2OGM0ZTYyNTZmNTk5NmM2NzZkZjRjMmNjNzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaaq8evolxwIK8uFGnHBmphCkBss
DlhHFINuhaloog9JwGk4Hu8VI6Rt80eDsm0ITuKuQxjAN2NEnK8XKcoVHAGEIcdW
zu3BrnnHn1jJjgBxUxh0fTdl35GrYvm4z52WNpIKMsz2y3rYiNIWr/5pBNF3qBox
vYkUyrNjJyv2ist/J6xb2wAmTFrdrOViRMWL/EZd7SMNVkG1E7IYGbGJ2oO34p0n
El6JMG97E3HN2BGFrxqfCgmfkTXd78BFJt+5wJH8YM0wlaBO26Q3bYGPj4CJiu3R
HFxU6iims20Am0CRRL6j6MtHf3k180DlSSQFsp6sdMdtK6gcVwSg02o10wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUM7rYViWjE5iVvWZbGdt9MLMdKMB8GA1UdIwQY
MBaAFAXPatnL6feyhj4M7DbBU8XQc2riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80YmVjM2ItNGY1Ny00OGQ2LWJkY2Yt
NzQ4YWYxZjg0MDBlLzEvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80YmVjM2ItNGY1Ny00OGQ2LWJkY2YtNzQ4YWYxZjg0MDBl
LzEvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRlR9+yK
uF6D/q4rZbj6yfotUfmpXRoXLdamOsiEWx4Y4RfFBdrKB/em0j06AzsykAYSLUJo
3/AAVbvkud0/SJyXpZYkoDKO3o/uHBRQ++PUfJLJoW86gHqR/KF3pYvDTbgJCIoX
7u6PCDHyDuILAD/eb5IujXGHtoEUGOfDeZAcdA4qpMSfVibZo0NetoG2Ky9NcIH8
P2ohi4r3YXURTi4qApjgdrrQQFYRrYXtUqurN/a7oTBnCgqFqUADHUHQHu1MFtSt
ACgdYDZ4IJKWdiis8z1m2yvtWn7NmVMjWlLttDmGwQr6/Rd3w1hhlT8zWIb2L7XC
ARjINeu4CUB5EA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:02:40 2026 by rpki-client