Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File: BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier: WQzSncCJlct133M3i0gZL7hGCnMTfmMK8gV520sKyeU=
Subject key identifier: 1E:A1:58:3A:62:4E:90:18:38:EA:B9:DF:0B:A4:6E:17:E3:FC:35:40
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial: 01A0D3154C60616E18CB5BDA9C7544FC199C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number: 19AD
Signing time: Thu 24 Sep 2026 11:03:03 +0000
Manifest this update: Thu 24 Sep 2026 11:03:03 +0000
Manifest next update: Fri 25 Sep 2026 11:03:03 +0000
Files and hashes: 1: 1HpVkB_jbLhmzmxBwUx9bssht30.roa (hash: zCHbybFcXq0qDlNR99yqu6g+oFdwplvbb6MafSX5AMs=)
2: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: 9hc82qG/3+HaYCi7ETPQxX4R17pNfdvHuvI0sKbD0Kg=)
3: TgYSgtEo4dSznEstSh4wl1Lb_yg.roa (hash: nniijit4FyrPMtz8C+vav/OxG7xVfSAPSwIGynyNP+Q=)
4: XXDxWPYvJwQEEoD1ZkxghR4ET40.roa (hash: kPDCqZ/ABCjh6D3pWOnBRlSEdw9IBPT/5sVK336dTdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:4c:60:61:6e:18:cb:5b:da:9c:75:44:fc:19:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
Validity
Not Before: Sep 24 11:03:03 2026 GMT
Not After : Sep 25 11:03:03 2026 GMT
Subject: CN=1ea1583a624e901838eab9df0ba46e17e3fc3540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:8d:bf:42:a6:eb:ed:b4:1e:2c:0e:fc:18:
fc:8d:74:29:0b:74:83:d9:00:c0:00:52:fb:eb:16:
8d:61:54:d6:5f:57:27:ec:88:de:84:c4:7a:2d:5f:
20:6d:13:e9:b1:0b:e1:d2:8b:45:cb:b8:15:88:ab:
8c:ad:27:f6:4f:31:bd:8a:21:0c:3b:d5:bf:f5:fc:
45:ff:43:e0:20:bd:29:53:21:b0:62:bd:44:c2:49:
dd:c4:48:84:ad:92:46:6f:e0:48:b8:86:83:e0:cd:
3f:6d:04:1d:ba:e1:08:2e:ac:28:f6:09:a6:cc:dc:
4b:4b:9a:f5:7f:91:16:94:ea:9f:82:e3:67:dc:94:
2f:da:20:19:32:96:da:8c:68:75:8f:db:3b:b2:61:
de:5f:06:c9:e1:d2:6b:6d:63:ad:c0:7e:93:69:45:
55:40:1a:bd:ee:0f:93:eb:85:81:78:53:18:0b:a7:
69:13:ba:e4:a5:7b:23:e5:5f:44:f8:b2:19:ed:c2:
94:75:a5:8c:37:b7:8d:71:fd:e2:a3:92:e0:5f:a0:
7c:f2:c4:b5:9c:b9:9d:10:5f:c7:09:ef:14:b1:af:
c6:2e:82:86:5c:ab:1b:40:4c:1b:f9:73:ef:2f:a0:
41:ce:92:b8:63:2f:1c:be:41:71:f3:d5:6d:4d:65:
df:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A1:58:3A:62:4E:90:18:38:EA:B9:DF:0B:A4:6E:17:E3:FC:35:40
X509v3 Authority Key Identifier:
keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6f:e3:bf:af:9b:33:c9:e2:af:6f:5e:2c:18:36:29:c5:e0:
b7:2e:41:87:d4:a2:7d:27:25:b6:8a:e3:fb:8b:c9:e5:4d:b9:
4f:17:2b:b6:ad:16:2a:08:17:a4:93:45:95:3e:78:d9:06:88:
a3:ae:e3:fe:51:d6:1a:de:7d:66:59:2f:ff:2b:23:00:c9:6b:
cf:82:cd:73:d6:82:5e:2f:67:d5:47:0c:2d:d8:75:1f:d7:ef:
d9:c4:b8:dd:20:7d:39:44:58:11:5d:a0:3e:9d:60:0d:d1:a0:
dd:cd:36:05:f6:af:ca:60:93:30:90:58:95:03:05:82:d3:25:
ae:2e:65:c2:64:2d:6a:ef:13:52:3f:36:ae:87:19:9a:3c:45:
18:32:7e:2f:ef:2c:1b:44:90:89:b5:46:54:c3:f8:15:82:9e:
bc:84:43:ec:6e:48:7f:f1:26:f5:8c:d4:d6:87:c7:1b:50:ef:
16:2f:45:c9:68:03:64:66:28:9c:0b:36:5d:a0:f2:c3:8c:b2:
1f:c6:0e:c9:e3:6a:0a:09:10:be:ba:23:76:95:50:5a:cd:ef:
fd:e9:f1:73:d2:4b:7b:a3:41:55:d7:41:b8:cf:77:ac:55:5d:
fd:79:30:f5:fa:c8:7f:b0:11:dd:07:9e:f5:ad:69:8c:e2:49:
bb:5e:4c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:50:08 2026 by rpki-client