Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
File: BcojF2aaRo1QmoqhkGvvp1v5wgE.mft (raw, json)
Hash identifier: 17+y/DiXB1luVHXyLEI/rcKVbJ5L999Y2oNQ8w2K5gc=
Subject key identifier: DA:BB:F6:2B:EB:D0:9A:62:87:4E:1E:EB:A5:F6:07:F8:CE:1D:2A:B9
Authority key identifier: 05:CA:23:17:66:9A:46:8D:50:9A:8A:A1:90:6B:EF:A7:5B:F9:C2:01
Certificate issuer: /CN=05ca2317669a468d509a8aa1906befa75bf9c201
Certificate serial: 01A0CFA3C2EB985A37BEF7253A73DF48317C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
Manifest number: 11A3
Signing time: Wed 23 Sep 2026 19:00:11 +0000
Manifest this update: Wed 23 Sep 2026 19:00:11 +0000
Manifest next update: Thu 24 Sep 2026 19:00:11 +0000
Files and hashes: 1: BcojF2aaRo1QmoqhkGvvp1v5wgE.crl (hash: 64v6V8+yVlIOBU2+EQuEa3YCZ6/Mgybr3Tw6n6D4xr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a3:c2:eb:98:5a:37:be:f7:25:3a:73:df:48:31:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ca2317669a468d509a8aa1906befa75bf9c201
Validity
Not Before: Sep 23 19:00:11 2026 GMT
Not After : Sep 24 19:00:11 2026 GMT
Subject: CN=dabbf62bebd09a62874e1eeba5f607f8ce1d2ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:b4:cd:a2:e6:fd:b5:99:8d:10:35:7c:8f:
1c:74:13:1b:f1:51:63:a8:26:9a:48:fe:45:b6:3f:
ab:bc:e7:86:50:bb:a9:3b:2e:a3:b3:01:f5:58:f6:
86:7b:f0:ec:e9:83:6c:d0:44:f6:60:cd:34:2a:f3:
04:63:6c:54:7e:70:a8:a7:d3:0e:f1:0f:ed:44:b2:
ab:cc:d4:30:8e:14:08:19:a3:d8:9b:99:07:2a:e9:
e9:06:3b:6c:1e:f1:d4:65:b8:51:6c:7d:e3:b4:06:
e1:1c:86:65:b9:52:79:45:9b:ca:ff:b5:ea:d5:fc:
bb:dc:35:42:a3:fd:ca:d8:4f:8d:81:78:c1:25:72:
f1:01:99:2b:6a:f7:a4:9e:9e:81:f7:00:1f:f4:e2:
de:62:73:64:65:ee:ed:c3:ad:13:d0:c3:4f:8e:86:
b1:91:15:52:db:2b:0a:d9:d8:32:ee:ff:f2:39:d5:
04:af:61:0f:8e:0a:f1:ad:01:58:7d:8c:03:53:22:
c7:e0:ec:7d:08:cb:b6:d1:6e:de:79:e0:86:b3:c9:
9a:7a:8e:2e:78:dc:0e:2d:bd:fc:d6:aa:ec:1a:07:
3c:0e:5b:ec:f9:b9:cf:91:98:62:cb:49:05:5a:ba:
17:d7:00:46:62:a2:29:c1:74:d7:dc:0a:0e:73:81:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BB:F6:2B:EB:D0:9A:62:87:4E:1E:EB:A5:F6:07:F8:CE:1D:2A:B9
X509v3 Authority Key Identifier:
keyid:05:CA:23:17:66:9A:46:8D:50:9A:8A:A1:90:6B:EF:A7:5B:F9:C2:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:52:14:12:88:bc:93:7c:f9:a7:98:cf:eb:58:9b:5a:ef:43:
fa:60:5b:92:78:41:11:d8:33:bb:6c:00:c2:01:dc:dc:ea:ce:
27:53:73:a8:c8:b3:5d:9a:38:17:e1:79:75:83:a3:a9:7f:9e:
1f:af:bf:04:c3:30:5a:04:cb:2d:ff:28:09:d6:ac:eb:c3:dc:
ef:b4:2c:95:2e:fe:f1:7f:1a:34:50:b3:2e:8a:cc:b0:0f:11:
ab:e5:70:7c:2e:b1:71:a4:24:64:c1:18:42:93:cd:5e:77:2f:
f9:c6:a3:a0:dc:fc:59:44:49:60:ed:80:7e:a9:ce:37:0e:53:
6b:fd:42:dc:66:93:f8:e0:19:9b:8b:b9:0c:99:4e:59:5e:25:
d1:d8:67:64:5d:6d:7d:bd:14:81:e0:01:92:2f:5b:64:4b:16:
c7:91:dd:d8:d6:19:df:ac:6a:27:67:35:fe:3e:18:35:71:73:
0f:58:5b:6f:19:83:0f:b5:8c:f9:51:d4:68:cb:90:10:0d:42:
52:6f:ed:9a:48:a4:fc:6e:c9:e6:57:05:d7:b0:00:ae:10:68:
51:fe:14:3c:27:8f:b7:01:dc:67:38:ed:93:6b:bb:58:d9:76:
f0:e0:cb:cb:ef:c8:98:8e:7c:8a:63:e0:3e:dd:f6:b7:be:bf:
98:39:5c:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPo8LrmFo3vvclOnPfSDF8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1Y2EyMzE3NjY5YTQ2OGQ1MDlhOGFhMTkwNmJlZmE3NWJm
OWMyMDEwHhcNMjYwOTIzMTkwMDExWhcNMjYwOTI0MTkwMDExWjAzMTEwLwYDVQQD
EyhkYWJiZjYyYmViZDA5YTYyODc0ZTFlZWJhNWY2MDdmOGNlMWQyYWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ+0zaLm/bWZjRA1fI8cdBMb8VFj
qCaaSP5Ftj+rvOeGULupOy6jswH1WPaGe/Ds6YNs0ET2YM00KvMEY2xUfnCop9MO
8Q/tRLKrzNQwjhQIGaPYm5kHKunpBjtsHvHUZbhRbH3jtAbhHIZluVJ5RZvK/7Xq
1fy73DVCo/3K2E+NgXjBJXLxAZkraveknp6B9wAf9OLeYnNkZe7tw60T0MNPjoax
kRVS2ysK2dgy7v/yOdUEr2EPjgrxrQFYfYwDUyLH4Ox9CMu20W7eeeCGs8maeo4u
eNwOLb381qrsGgc8Dlvs+bnPkZhiy0kFWroX1wBGYqIpwXTX3AoOc4FAJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNq79ivr0Jpih04e66X2B/jOHSq5MB8GA1UdIwQY
MBaAFAXKIxdmmkaNUJqKoZBr76db+cIBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmNvakYyYWFSbzFRbW9xaGtHdnZwMXY1d2dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iZGVjYWEtZDE0MS00NmIyLTlkNDAt
MTMzMWU2NTFjNzlmLzEvQmNvakYyYWFSbzFRbW9xaGtHdnZwMXY1d2dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iZGVjYWEtZDE0MS00NmIyLTlkNDAtMTMzMWU2NTFjNzlm
LzEvQmNvakYyYWFSbzFRbW9xaGtHdnZwMXY1d2dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlIUEoi8
k3z5p5jP61ibWu9D+mBbknhBEdgzu2wAwgHc3OrOJ1NzqMizXZo4F+F5dYOjqX+e
H6+/BMMwWgTLLf8oCdas68Pc77QslS7+8X8aNFCzLorMsA8Rq+VwfC6xcaQkZMEY
QpPNXncv+cajoNz8WURJYO2AfqnONw5Ta/1C3GaT+OAZm4u5DJlOWV4l0dhnZF1t
fb0UgeABki9bZEsWx5Hd2NYZ36xqJ2c1/j4YNXFzD1hbbxmDD7WM+VHUaMuQEA1C
Um/tmkik/G7J5lcF17AArhBoUf4UPCePtwHcZzjtk2u7WNl28ODLy+/ImI58imPg
Pt32t76/mDlcBA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:00:51 2026 by rpki-client