Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
File: BcgcgJdDfNF58xkYPAKC6mzRylE.mft (raw, json)
Hash identifier: MnG+7zWyQfaKcL7SmDLld6HTnnntj8AMQyATVe6SA1Y=
Subject key identifier: 86:E8:A1:31:AE:F7:CB:D6:88:10:64:70:E5:FF:1D:04:D0:A1:DE:57
Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
Certificate issuer: /CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Certificate serial: 019D284D5898D97674B06C115391B500A6D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
Manifest number: 0845
Signing time: Thu 26 Mar 2026 04:00:50 +0000
Manifest this update: Thu 26 Mar 2026 04:00:50 +0000
Manifest next update: Fri 27 Mar 2026 04:00:50 +0000
Files and hashes: 1: BcgcgJdDfNF58xkYPAKC6mzRylE.crl (hash: e0Gs2jJneQ5VJMVmiAzGKKybud+9tSYX3No1tciNN38=)
2: U-i1oEyBuqeV6jZfreY9KrH4m50.roa (hash: L5IQFtrjgg9i37LgVDvIKbkJPMhrCXGXXL5UYx1rh/c=)
3: XUDIgk_5z10h164Tz-e9tCKiPaQ.roa (hash: jI1OJJCcnL0UAf8SALv1ORGopOdQFzAzsNBmfQqbk2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:58:98:d9:76:74:b0:6c:11:53:91:b5:00:a6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Validity
Not Before: Mar 26 04:00:50 2026 GMT
Not After : Mar 27 04:00:50 2026 GMT
Subject: CN=86e8a131aef7cbd688106470e5ff1d04d0a1de57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3b:12:aa:09:d4:04:51:35:aa:53:da:9b:ae:
c7:8e:b3:0c:b4:b9:6f:80:fb:46:d8:d6:28:8a:b0:
a5:70:d0:95:4a:63:17:0b:01:a7:90:da:62:a1:d9:
d7:33:ec:30:bd:37:8b:bf:4c:fc:4d:6a:eb:9f:14:
e6:14:b9:9c:c3:25:c2:96:c4:13:17:56:ea:c7:cf:
59:00:19:4c:64:41:29:d8:c2:0c:15:fc:5b:cc:86:
ca:9f:80:0d:41:a2:e6:dd:05:60:10:46:f9:5a:b0:
9a:1b:f8:59:6a:a5:49:42:07:7a:46:a0:97:cb:f2:
fc:18:75:28:cd:97:79:90:88:cc:64:7b:29:31:72:
9b:e1:89:40:29:71:56:29:91:82:3c:ce:4f:5c:4f:
83:3b:08:7b:46:04:3d:fa:d8:52:e5:cf:ca:c0:e2:
f0:f4:9a:99:04:c1:6e:e6:8f:13:2f:22:8b:93:2d:
89:bd:ce:fd:01:e8:0c:83:95:68:ff:1f:39:eb:ca:
0e:d3:a5:73:a2:1d:81:e1:6e:16:3b:e1:e8:c3:0c:
a9:e9:46:17:19:af:f6:0d:58:a4:16:ee:c3:cf:49:
7a:e2:62:c9:e6:e0:af:54:19:28:59:43:b4:18:fb:
3f:0c:46:aa:0c:83:0f:e8:00:e7:f4:ab:76:38:0b:
36:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E8:A1:31:AE:F7:CB:D6:88:10:64:70:E5:FF:1D:04:D0:A1:DE:57
X509v3 Authority Key Identifier:
keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:bb:ed:34:3c:d7:ce:32:8a:b4:6e:78:cd:82:ab:5f:e3:29:
4e:f4:93:b5:61:48:82:92:b4:f8:70:d1:5d:a2:0e:66:40:f6:
3e:62:a7:71:e9:9e:18:72:d4:4e:8c:4a:64:c7:57:d4:25:89:
13:a5:36:01:6f:38:13:10:2b:83:74:14:0d:fb:67:bf:73:d6:
dc:82:b5:68:6b:a1:66:ea:be:8f:41:62:3c:76:1c:2e:9f:38:
f7:2c:ef:22:77:4c:c9:71:b1:32:a3:21:04:e2:7f:0f:6e:54:
94:8a:9c:1c:b1:e0:5e:53:a7:3d:74:4e:a4:e1:e4:fd:17:58:
6a:7a:a5:a8:5a:c4:d3:65:28:82:12:a8:b9:c5:db:ed:03:dd:
45:9d:fb:68:a8:bd:5c:57:74:c3:d1:a5:f5:6c:1b:56:a3:74:
77:6b:f1:b7:9c:db:82:be:fa:47:32:d8:d5:dc:04:1f:a0:31:
e6:7d:27:1b:7b:6b:33:ad:6b:75:13:02:00:fe:d5:4b:47:cf:
5d:d6:e7:be:ce:ac:ff:83:48:45:8a:14:de:8b:58:c2:6e:3a:
6a:8b:6d:0b:ff:27:b7:75:4a:43:15:16:b5:68:29:be:e7:d7:
df:08:3f:21:fc:52:65:77:e7:f8:1f:4d:59:e3:96:1b:fb:dd:
4c:7d:13:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:14 2026 by rpki-client