Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File: BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier: 3hCALLOvcf+PMI5LZEoPiGl44PHTQRqexFO420whWZc=
Subject key identifier: 1A:33:C9:E4:26:FE:5C:C9:29:1D:7C:5B:ED:9F:4A:61:19:68:8F:BF
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial: 019E1BD953182B1D2692FCC645EB1FA6CFC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number: 1845
Signing time: Tue 12 May 2026 11:01:27 +0000
Manifest this update: Tue 12 May 2026 11:01:27 +0000
Manifest next update: Wed 13 May 2026 11:01:27 +0000
Files and hashes: 1: 1HpVkB_jbLhmzmxBwUx9bssht30.roa (hash: zCHbybFcXq0qDlNR99yqu6g+oFdwplvbb6MafSX5AMs=)
2: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: +DZ1/2e9j+ZVZtuE+8E7p/7owIXrrRfuamheTAdMt80=)
3: TgYSgtEo4dSznEstSh4wl1Lb_yg.roa (hash: nniijit4FyrPMtz8C+vav/OxG7xVfSAPSwIGynyNP+Q=)
4: XXDxWPYvJwQEEoD1ZkxghR4ET40.roa (hash: kPDCqZ/ABCjh6D3pWOnBRlSEdw9IBPT/5sVK336dTdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:53:18:2b:1d:26:92:fc:c6:45:eb:1f:a6:cf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
Validity
Not Before: May 12 11:01:27 2026 GMT
Not After : May 13 11:01:27 2026 GMT
Subject: CN=1a33c9e426fe5cc9291d7c5bed9f4a6119688fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:98:cb:b4:6f:82:b7:e5:7e:2c:9e:2e:99:
a9:64:28:bc:6f:39:3a:cd:f2:cc:68:14:b1:20:b2:
d7:ee:ea:9b:b0:aa:2a:c8:95:84:d4:0f:28:ef:86:
9f:5c:bb:20:31:04:7c:6f:cf:6f:a7:12:5e:db:4b:
c6:46:49:b6:61:56:7b:e9:21:35:24:0d:81:97:cf:
2a:fb:4d:34:87:0e:98:b4:08:52:77:6e:75:e8:bb:
37:dc:f0:a2:c9:2e:f2:39:0d:88:07:e0:5f:f7:8f:
c0:1f:a8:78:f2:9f:7d:95:7e:4f:60:ea:94:84:87:
4d:3e:ca:db:f2:03:33:3f:45:0a:f9:5c:28:2d:78:
dc:16:02:4f:78:6e:5e:b7:1b:23:fc:b0:ea:25:c5:
dd:a5:8c:d1:34:94:d0:ca:c3:95:a2:23:64:ec:0a:
28:75:1d:d1:a8:03:f9:77:08:c6:9e:70:ba:e3:8e:
05:c0:eb:c6:bc:66:8a:f1:71:35:f7:7f:6a:b2:cb:
b9:c7:cf:e3:be:66:43:ea:ff:25:cc:8b:c3:78:05:
82:72:2a:02:d1:ae:d5:82:46:76:cd:c0:00:d2:16:
08:77:b4:4e:6f:bf:b3:40:de:8c:a8:dc:d4:52:5b:
25:96:99:30:f2:42:8d:cd:45:c7:38:bc:5a:58:63:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:33:C9:E4:26:FE:5C:C9:29:1D:7C:5B:ED:9F:4A:61:19:68:8F:BF
X509v3 Authority Key Identifier:
keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:85:f5:77:27:d8:80:77:a5:a8:9f:bc:c3:c9:60:1d:01:e6:
04:1e:71:f6:27:a5:e7:e3:f3:17:1a:76:55:84:79:33:3c:5f:
66:b3:94:5c:11:31:ac:57:56:39:93:13:5f:01:a3:bd:57:8a:
53:0f:41:90:4f:7d:b7:8c:17:12:df:94:fd:a2:02:11:02:03:
79:95:da:1a:a2:4d:ae:d1:a6:c6:a5:88:e4:c9:26:a2:fd:bf:
09:15:d1:01:52:14:3f:a4:17:c2:7b:e3:45:1f:ac:c3:7c:ff:
2e:65:24:7f:3a:5d:7e:ff:e2:51:dc:65:19:37:74:04:8b:cb:
df:c3:3a:5d:b2:db:58:62:da:2b:99:50:b0:20:37:27:c3:e0:
bf:91:d6:eb:34:9a:b8:4e:d2:57:6d:a6:05:ad:0e:0a:d6:c5:
b0:10:d0:13:ab:61:45:9c:a4:3b:08:9e:66:81:90:04:aa:e2:
f1:bb:90:ce:a9:32:9e:7d:a7:fb:b6:51:54:a4:c0:c7:b0:e2:
b7:9e:8b:63:19:ea:d4:69:dd:a0:5c:de:e9:f5:49:4c:e1:8f:
d6:0e:81:36:b3:e3:b6:da:f6:71:11:fc:68:03:55:ab:1e:e4:
26:66:94:02:b5:ad:38:63:1a:72:ee:4c:6c:de:5c:da:ff:18:
88:71:e5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:46 2026 by rpki-client