Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
File: BCTBFlgYpDL3l8jd9LUwex5a73Q.mft (raw, json)
Hash identifier: tn6xQtcH/zQVOcSzOq0lsWjYVBLlxT/9eeAqamyszdM=
Subject key identifier: 03:DE:A5:07:88:C4:85:4E:0E:BF:CB:78:2E:A9:E3:7B:6F:61:60:A2
Authority key identifier: 04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
Certificate issuer: /CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Certificate serial: 019D26CD4F61F8D58487DAFA9A8AA655D1F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:01:22 +0000
Manifest this update: Wed 25 Mar 2026 21:01:22 +0000
Manifest next update: Thu 26 Mar 2026 21:01:22 +0000
Files and hashes: 1: BCTBFlgYpDL3l8jd9LUwex5a73Q.crl (hash: qjVTG+yDkbJko+2viPadyqPkLX5NLupI7PpDsi6e6CI=)
2: L5QyDq4nzLcpQLfWU1prA656nOQ.roa (hash: hEvHaOQM6citq23iRIkG5Vhd08rav1O71/Vw2lS4G94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:4f:61:f8:d5:84:87:da:fa:9a:8a:a6:55:d1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Validity
Not Before: Mar 25 21:01:22 2026 GMT
Not After : Mar 26 21:01:22 2026 GMT
Subject: CN=03dea50788c4854e0ebfcb782ea9e37b6f6160a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:39:37:0a:9f:69:a9:95:9a:28:0b:58:97:a7:
c9:3f:c8:73:58:a1:fd:90:f7:47:40:21:c6:8f:bb:
d5:71:97:54:2f:91:bf:e8:a1:3a:e6:ad:2f:7d:8a:
a8:d1:cc:2a:1e:d1:69:f8:c6:d0:dd:94:58:5d:49:
5b:aa:93:d0:5f:1d:8a:b5:6c:59:bb:a8:88:1f:01:
05:42:69:82:3e:fb:02:71:62:32:38:8a:12:0c:ca:
4b:87:ea:b5:af:f7:11:e0:15:61:87:d2:9b:cd:47:
e5:56:34:ad:48:98:89:65:28:28:15:1c:b4:7d:3b:
b7:a0:d8:51:af:08:27:a4:5e:ce:6d:83:1c:a5:6b:
cc:cd:c5:61:80:d4:3c:73:27:66:af:2f:7f:ba:e7:
ee:93:38:a3:60:62:f1:af:d2:0e:21:d1:2a:2e:1e:
bd:ff:a7:45:59:58:91:16:23:39:83:9b:5e:f3:55:
2a:b7:84:8d:52:37:9e:bf:1b:ba:3c:10:f7:6b:20:
e1:04:e3:1a:32:4f:67:34:2d:9d:73:73:0c:96:71:
76:21:0c:58:9c:20:3e:5e:97:11:94:b8:35:cc:bb:
87:5f:85:44:3e:43:d6:96:d1:2d:ff:27:b8:69:1f:
9b:03:8e:89:4d:c6:2d:e5:e6:62:55:6f:53:4f:0d:
5c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DE:A5:07:88:C4:85:4E:0E:BF:CB:78:2E:A9:E3:7B:6F:61:60:A2
X509v3 Authority Key Identifier:
keyid:04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:30:7e:1d:e2:85:8b:d1:11:8d:eb:c0:92:f5:db:ca:c2:12:
98:79:3d:40:55:bd:f8:df:09:20:37:d9:43:58:18:c2:88:93:
d8:cb:4e:3f:6d:2f:cb:91:28:ef:8b:36:e8:c6:60:ca:be:f7:
3b:82:45:cb:45:59:2d:cf:f5:19:70:d5:43:b1:bb:ae:32:e8:
f5:cb:d2:07:3f:15:a5:c0:92:85:71:73:98:4e:1e:81:10:d4:
8c:8e:7d:a5:d1:f7:79:08:0b:e9:60:32:40:fa:d4:5d:bb:94:
f7:c9:4d:bf:64:1e:45:d9:a3:b9:91:b9:4d:78:a2:0c:46:0e:
93:e4:6d:4e:d7:b7:79:b7:0b:76:e8:41:c5:07:6e:81:b9:4e:
76:4b:14:b4:be:53:6e:75:eb:41:c4:0a:5a:70:db:7d:26:f0:
b6:43:41:8b:e6:4c:0c:65:f8:64:5a:0a:93:89:c3:e6:b2:6a:
16:b9:4d:66:c5:db:06:95:08:4f:68:f4:21:d4:b4:4b:f2:26:
3a:23:d6:0e:9c:00:f5:05:dc:5d:b4:8b:04:1b:d3:1b:be:1d:
24:ae:36:a2:f7:b3:3b:a9:84:d6:bc:60:1d:90:f6:9b:b0:26:
1f:70:43:bb:17:1d:6f:77:57:fa:ba:d2:1c:29:75:c2:65:ff:
4b:3a:fe:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:42 2026 by rpki-client