Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
File: BCTBFlgYpDL3l8jd9LUwex5a73Q.mft (raw, json)
Hash identifier: yrvZQjjLYQcPXdLiCi4fn1cLr4bqhtA4Q5SxIkqICCc=
Subject key identifier: 22:45:36:91:C4:B0:E2:76:A5:02:D5:53:18:EB:CB:A4:83:91:0C:DC
Authority key identifier: 04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
Certificate issuer: /CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Certificate serial: 019E1C0FC3DF7C7553BC9EA8AE45A4C2DD47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 12:00:55 +0000
Manifest this update: Tue 12 May 2026 12:00:55 +0000
Manifest next update: Wed 13 May 2026 12:00:55 +0000
Files and hashes: 1: BCTBFlgYpDL3l8jd9LUwex5a73Q.crl (hash: S5ZZS5eUdDCdlYKxHu8m3F0XnuV4LqZ5E0Q/E8xgS8I=)
2: L5QyDq4nzLcpQLfWU1prA656nOQ.roa (hash: hEvHaOQM6citq23iRIkG5Vhd08rav1O71/Vw2lS4G94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:c3:df:7c:75:53:bc:9e:a8:ae:45:a4:c2:dd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Validity
Not Before: May 12 12:00:55 2026 GMT
Not After : May 13 12:00:55 2026 GMT
Subject: CN=22453691c4b0e276a502d55318ebcba483910cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c8:da:3a:53:79:82:e5:0d:7f:2c:92:f9:b0:
45:2b:3f:94:7c:fa:b7:01:f5:e2:50:a9:6f:e7:36:
77:f3:cc:6b:a3:25:e2:a5:ff:53:07:21:4e:41:87:
2b:3b:95:a7:8d:c2:1c:10:23:63:f3:91:0d:52:4b:
25:27:7e:ba:d9:be:d3:da:2a:23:d8:6b:ad:be:9a:
73:2c:a9:ba:d4:7b:61:3c:a5:9e:0e:fa:f6:ce:19:
99:58:bc:ea:56:ed:d2:13:ff:a4:b5:87:c0:14:57:
bf:7b:eb:73:b2:2a:63:cc:c2:fb:c0:fb:c9:e0:86:
f9:76:ec:23:e7:b5:ed:d8:e9:75:17:48:07:e9:d8:
d4:44:26:89:cf:fe:21:36:2e:1f:58:16:2f:92:2f:
8a:b1:5e:c6:c3:10:d9:3c:e5:65:95:37:83:17:28:
a3:0a:f2:f3:2a:db:ce:42:25:b8:d5:55:1a:55:dd:
20:5f:07:8a:56:19:11:4b:a1:15:b6:97:f1:3a:66:
c7:27:29:3f:d4:47:6a:0a:cc:d2:60:b8:2c:54:5d:
a2:61:44:5d:32:a2:23:37:9e:4c:db:74:50:d8:b9:
34:4f:a2:ee:84:9b:76:7a:93:66:16:a4:8a:d8:1e:
c8:44:77:28:e9:1b:7d:ae:cc:70:9f:2d:a0:60:f8:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:45:36:91:C4:B0:E2:76:A5:02:D5:53:18:EB:CB:A4:83:91:0C:DC
X509v3 Authority Key Identifier:
keyid:04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5d:57:ed:e0:fd:43:d9:68:ed:4e:10:99:41:ae:a7:98:4b:
f7:c6:ce:ed:3d:60:38:75:87:98:33:ad:69:87:1f:98:a9:f7:
11:8b:d6:b7:8f:d3:51:72:90:0b:5a:78:d1:8a:5c:ec:4d:6b:
28:97:9b:42:e9:85:13:74:62:3a:d5:c4:a0:ba:6e:65:21:03:
66:99:20:05:ab:24:11:38:3b:bd:8a:8c:30:bd:2b:ae:84:e2:
e4:f1:64:9d:b0:75:da:9f:f4:c4:7c:c4:82:8f:b6:67:cf:a9:
4b:ad:45:49:f5:74:b4:01:53:2e:09:e9:42:d3:06:57:36:57:
34:ad:8d:c4:b5:b3:d0:c8:ce:cd:75:ae:bd:fd:ca:eb:e4:4b:
47:81:7a:33:21:3e:64:46:72:30:6d:62:eb:ff:62:f8:71:b6:
6f:ad:a1:63:32:6f:af:c3:3b:1d:17:d3:91:8d:9f:cf:f1:a9:
68:69:1e:f4:09:9f:e2:c5:77:49:2d:76:ba:4f:b8:23:2a:53:
d4:6c:9b:79:ff:31:f9:12:ef:0a:4b:bd:29:a2:b8:6d:6d:6d:
cc:37:c3:a7:a6:9f:72:b7:76:ec:c8:12:a8:a2:75:d8:a2:8c:
70:db:33:9a:ea:15:f9:3d:2a:da:8c:2a:c6:41:d9:5d:ce:b7:
16:43:a3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:40 2026 by rpki-client