Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File: BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier: nPb1via8lWOiAXDB6TKlo+Yne0cGBPDFrxkZvn5dzjo=
Subject key identifier: 3D:DC:33:50:DC:B3:11:FC:B8:00:EB:B2:D3:7C:F1:11:2E:4A:84:07
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial: 019D2884293194CC10EC79E6AEDF7033DA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number: 17C7
Signing time: Thu 26 Mar 2026 05:00:42 +0000
Manifest this update: Thu 26 Mar 2026 05:00:42 +0000
Manifest next update: Fri 27 Mar 2026 05:00:42 +0000
Files and hashes: 1: 1HpVkB_jbLhmzmxBwUx9bssht30.roa (hash: zCHbybFcXq0qDlNR99yqu6g+oFdwplvbb6MafSX5AMs=)
2: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: 6XHIDKQX5NvSO7j6AkHzxSCDJWKdoeKko8pHy47Dsgk=)
3: TgYSgtEo4dSznEstSh4wl1Lb_yg.roa (hash: nniijit4FyrPMtz8C+vav/OxG7xVfSAPSwIGynyNP+Q=)
4: XXDxWPYvJwQEEoD1ZkxghR4ET40.roa (hash: kPDCqZ/ABCjh6D3pWOnBRlSEdw9IBPT/5sVK336dTdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:29:31:94:cc:10:ec:79:e6:ae:df:70:33:da:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
Validity
Not Before: Mar 26 05:00:42 2026 GMT
Not After : Mar 27 05:00:42 2026 GMT
Subject: CN=3ddc3350dcb311fcb800ebb2d37cf1112e4a8407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:f2:72:ac:11:80:25:8c:4e:e3:ce:24:e4:
5c:cd:27:0e:01:26:6e:75:9c:f5:b8:cd:50:b4:03:
fb:bf:83:a0:54:8f:9b:ee:c8:69:97:89:d5:b5:05:
e2:5f:21:51:31:78:3c:81:c1:65:65:69:1c:20:b8:
95:11:07:9d:98:9a:83:1f:c0:d2:71:35:a5:36:9d:
14:6b:56:91:5b:58:fc:f8:a6:0f:51:3f:fe:8d:0a:
e4:35:79:82:e8:17:38:90:e2:f7:84:74:44:34:d9:
8d:27:9e:0b:24:9e:b9:63:76:69:ef:a4:df:e7:92:
5e:16:f8:7d:36:b8:7c:dd:9e:f5:f1:0a:d8:6d:b3:
65:84:e0:57:65:f7:ed:02:97:79:de:82:67:94:c6:
a7:6b:2f:3d:f0:9a:7e:a8:8e:d3:6e:3c:24:b5:bb:
09:f3:19:d6:99:70:48:5b:27:32:a4:3f:45:e0:86:
63:3e:7e:b4:04:39:38:42:f6:93:5f:25:e5:c2:1c:
28:3c:7d:1d:44:59:83:15:31:8b:a4:51:52:dd:da:
a1:13:83:8e:52:a6:07:27:38:47:a4:d4:9e:a1:d6:
a1:27:dd:0f:8f:e7:88:0e:e8:0c:32:0a:ae:f1:39:
12:f7:4d:9d:c3:40:03:06:55:93:b9:7d:fc:33:74:
8e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DC:33:50:DC:B3:11:FC:B8:00:EB:B2:D3:7C:F1:11:2E:4A:84:07
X509v3 Authority Key Identifier:
keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:37:bd:aa:e3:ce:22:a4:4c:d8:67:7e:5d:01:a3:6d:b5:93:
08:55:09:9e:e1:64:98:c6:74:8d:4b:47:1f:2f:93:f1:0d:c2:
1a:50:60:e5:33:c4:aa:ae:b1:7a:df:f0:29:9f:3c:a9:59:17:
42:a5:3b:e0:24:1b:0f:e9:70:0f:3c:ea:cd:e0:79:82:cb:b0:
f2:b8:f5:45:eb:80:4e:07:c2:37:6f:44:d4:11:a1:9d:28:dd:
33:5a:19:63:52:a7:ec:51:10:ca:d1:59:2b:bc:1e:55:d8:d1:
2a:79:ac:7e:b4:95:ca:0b:9d:3f:89:d5:4e:6f:4e:1e:31:62:
73:8b:74:6f:f0:41:0f:4a:2b:72:fc:2e:c8:f8:6b:9b:33:22:
32:bc:cd:f3:f0:5b:b0:e2:0f:eb:a7:5f:da:e4:fa:c5:e4:05:
1d:4b:1e:ae:55:7e:01:7e:63:35:34:a4:27:b5:a3:2b:d2:d1:
21:b7:58:0f:14:f8:26:46:0f:23:d2:86:fb:44:58:ae:0f:f3:
8a:f2:af:79:80:f4:46:43:47:2b:ec:fc:da:1a:37:df:72:57:
ae:e8:ea:6c:cb:a7:17:f9:46:bf:ec:ca:34:d7:21:8c:ee:a2:
87:1a:d9:9c:a7:af:d3:c1:24:69:90:c6:c8:d5:97:98:d5:79:
02:83:2c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:17 2026 by rpki-client