
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
File: Bcij-qGLbXF6ovdiIYG62L5bVaM.mft (raw, json)
Hash identifier: kV7n9l3k45jqIYrlqux906dGsUH96B/FdlK04n1A94U=
Subject key identifier: 5D:77:A3:1C:93:FD:D6:56:0D:A7:51:B5:51:53:9A:CD:D2:BB:27:4D
Authority key identifier: 05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3
Certificate issuer: /CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
Certificate serial: 019D2A3BCEF1F1583D0ACCC5D72CD047DAEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 13:00:55 +0000
Manifest this update: Thu 26 Mar 2026 13:00:55 +0000
Manifest next update: Fri 27 Mar 2026 13:00:55 +0000
Files and hashes: 1: 8XBb8f006dAeg3l4fnfnzsnEQsA.roa (hash: N8WQzeOeKm6GPZPjDggc/GsTVLgLPn7sKtNoO/OiHAw=)
2: Bcij-qGLbXF6ovdiIYG62L5bVaM.crl (hash: vm9Zyc0ooBbME227O6jiAKJBI8oOQDqsjM8mKvUNQgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:ce:f1:f1:58:3d:0a:cc:c5:d7:2c:d0:47:da:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
Validity
Not Before: Mar 26 13:00:55 2026 GMT
Not After : Mar 27 13:00:55 2026 GMT
Subject: CN=5d77a31c93fdd6560da751b551539acdd2bb274d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:1e:86:0a:aa:9f:28:7d:0c:12:9c:7f:44:
80:ef:2c:53:40:0c:40:16:87:cf:ba:f3:c8:f0:18:
92:49:19:07:61:52:e6:2e:fb:8e:7a:4d:92:fc:13:
a5:b1:8b:84:ed:2d:f2:d6:b3:42:34:e8:b1:ff:e3:
c4:78:77:55:96:b9:e3:43:05:54:59:ec:b7:e3:24:
54:12:66:02:96:06:3c:6d:81:a2:00:27:e0:06:fc:
5e:41:28:70:5b:4e:d0:76:f0:11:d8:4b:c7:f8:8a:
51:f8:0c:74:bc:1a:bb:8b:fe:24:1a:e1:07:db:17:
13:db:28:d1:fe:0a:70:0c:c0:17:89:03:6c:04:72:
95:80:27:5a:a2:6d:b7:81:41:6c:e2:58:4b:c9:f1:
d6:45:a3:86:e6:0b:57:8b:32:d9:70:50:cc:40:56:
ad:50:dc:aa:1c:9c:d1:11:b0:bd:9d:81:09:f8:b2:
0d:23:e2:23:af:4b:3c:b6:3d:f6:f4:bc:42:98:15:
45:13:58:e6:06:7e:b5:30:86:1d:ba:d7:5e:5c:70:
01:30:8b:a2:d7:65:fd:d4:ac:f4:64:78:37:34:22:
02:94:ef:35:af:a7:66:d0:78:6d:9b:f3:eb:85:90:
d6:e1:14:d6:0b:56:43:a1:40:90:0f:f8:0a:7e:10:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:77:A3:1C:93:FD:D6:56:0D:A7:51:B5:51:53:9A:CD:D2:BB:27:4D
X509v3 Authority Key Identifier:
keyid:05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:17:63:4b:3e:45:99:7a:20:8d:33:db:bf:0c:70:75:ec:2b:
8e:1f:e4:db:a7:8a:9d:15:fe:2b:89:72:95:b4:f3:3a:0c:46:
6c:a6:c1:d2:1e:8b:55:ea:b5:99:7a:d9:dd:44:72:b5:c0:e6:
65:8a:0d:77:fa:0f:26:12:16:28:0f:bb:d0:72:2a:dd:65:1f:
cf:92:3b:10:c0:5a:b4:e3:88:7e:d0:3b:14:58:69:1a:b5:62:
fc:1b:e2:28:60:df:82:5d:ec:57:cb:ad:99:02:2b:a8:a2:31:
3a:ae:69:a0:ec:42:34:6e:11:37:9b:77:52:69:a2:26:85:3d:
85:d1:7e:a1:bc:fe:9a:c3:66:10:88:e7:68:9d:a2:b7:3c:66:
3f:4a:82:3d:de:22:57:5b:d7:96:be:23:13:56:a3:57:20:3f:
aa:68:9a:f2:79:8a:d7:b1:cb:95:70:b7:77:f8:ef:37:e7:69:
31:46:44:4a:b2:bb:10:e6:62:76:4d:95:21:4e:e6:36:8f:f4:
21:9d:c8:c1:38:49:9d:d1:6a:28:69:0d:1d:ff:70:94:e1:52:
ee:4a:bb:68:8f:84:a8:58:51:33:49:9d:c8:66:9e:7f:b8:0e:
95:b2:83:b2:68:ab:2e:89:ed:0e:1b:44:20:5d:15:95:a0:89:
95:b7:78:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO87x8Vg9CszF1yzQR9rqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YzhhM2ZhYTE4YjZkNzE3YWEyZjc2MjIxODFiYWQ4YmU1
YjU1YTMwHhcNMjYwMzI2MTMwMDU1WhcNMjYwMzI3MTMwMDU1WjAzMTEwLwYDVQQD
Eyg1ZDc3YTMxYzkzZmRkNjU2MGRhNzUxYjU1MTUzOWFjZGQyYmIyNzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjwehgqqnyh9DBKcf0SA7yxTQAxA
FofPuvPI8BiSSRkHYVLmLvuOek2S/BOlsYuE7S3y1rNCNOix/+PEeHdVlrnjQwVU
Wey34yRUEmYClgY8bYGiACfgBvxeQShwW07QdvAR2EvH+IpR+Ax0vBq7i/4kGuEH
2xcT2yjR/gpwDMAXiQNsBHKVgCdaom23gUFs4lhLyfHWRaOG5gtXizLZcFDMQFat
UNyqHJzREbC9nYEJ+LINI+Ijr0s8tj329LxCmBVFE1jmBn61MIYdutdeXHABMIui
12X91Kz0ZHg3NCIClO81r6dm0Hhtm/PrhZDW4RTWC1ZDoUCQD/gKfhB2MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF13oxyT/dZWDadRtVFTms3SuydNMB8GA1UdIwQY
MBaAFAXIo/qhi21xeqL3YiGButi+W1WjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmNpai1xR0xiWEY2b3ZkaUlZRzYyTDViVmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8wZGE4ZjctZmUyMi00MmZiLWEzMjkt
N2Q0NWE5ZmM0ZmZjLzEvQmNpai1xR0xiWEY2b3ZkaUlZRzYyTDViVmFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8wZGE4ZjctZmUyMi00MmZiLWEzMjktN2Q0NWE5ZmM0ZmZj
LzEvQmNpai1xR0xiWEY2b3ZkaUlZRzYyTDViVmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghdjSz5F
mXogjTPbvwxwdewrjh/k26eKnRX+K4lylbTzOgxGbKbB0h6LVeq1mXrZ3URytcDm
ZYoNd/oPJhIWKA+70HIq3WUfz5I7EMBatOOIftA7FFhpGrVi/BviKGDfgl3sV8ut
mQIrqKIxOq5poOxCNG4RN5t3UmmiJoU9hdF+obz+msNmEIjnaJ2itzxmP0qCPd4i
V1vXlr4jE1ajVyA/qmia8nmK17HLlXC3d/jvN+dpMUZESrK7EOZidk2VIU7mNo/0
IZ3IwThJndFqKGkNHf9wlOFS7kq7aI+EqFhRM0mdyGaef7gOlbKDsmirLontDhtE
IF0VlaCJlbd4gA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:32:21 2026 by rpki-client