
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
File: BV14S5ASZjw0C_Z_rLYb--EIcbg.mft (raw, json)
Hash identifier: XcNazDWCea8z+BCTzbqoZ64FvSWZo9wq301my9ZdegY=
Subject key identifier: DC:6F:79:FE:A6:1C:00:69:62:12:D7:14:39:9F:17:70:3E:CE:72:41
Authority key identifier: 05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8
Certificate issuer: /CN=055d784b9012663c340bf67facb61bfbe10871b8
Certificate serial: 019CAD59E4016812CF1AEE55337B16DF333F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
Manifest number: 0D4E
Signing time: Mon 02 Mar 2026 07:01:15 +0000
Manifest this update: Mon 02 Mar 2026 07:01:15 +0000
Manifest next update: Tue 03 Mar 2026 07:01:15 +0000
Files and hashes: 1: BV14S5ASZjw0C_Z_rLYb--EIcbg.crl (hash: tLVK9hEPCbb6vwS+zji/zzJzZ92MfWmjFidXkwSJiK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:e4:01:68:12:cf:1a:ee:55:33:7b:16:df:33:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=055d784b9012663c340bf67facb61bfbe10871b8
Validity
Not Before: Mar 2 07:01:15 2026 GMT
Not After : Mar 3 07:01:15 2026 GMT
Subject: CN=dc6f79fea61c00696212d714399f17703ece7241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:67:60:76:bd:dd:41:48:f4:38:47:fd:40:bc:
96:29:ac:95:cc:9e:06:57:63:f4:4d:a9:44:c4:23:
87:0b:1f:ed:45:f9:d1:2e:f5:f8:97:76:19:db:98:
c1:df:fd:9b:0b:4c:e4:a7:bc:4f:67:05:20:38:c9:
e6:fb:bc:68:35:fa:ef:4d:dd:2e:47:5a:dc:87:50:
d6:ff:ef:20:1a:2f:13:9e:2f:97:fc:17:6d:bd:3c:
b4:a0:f2:a3:d7:d7:bb:be:3f:28:02:07:7b:90:da:
09:a3:de:c5:63:58:68:c6:3a:24:2e:e0:23:25:b9:
91:96:0c:79:72:a2:d2:46:11:9b:6b:4e:17:4f:65:
fc:bd:d9:4d:db:1e:ed:1e:9a:0b:17:37:93:0b:36:
b3:c4:74:86:ba:97:66:ba:67:5f:90:8e:13:28:62:
6e:a8:da:3d:f1:5d:1c:21:01:05:f1:8a:80:7b:6c:
a3:3d:8a:67:5c:22:6a:12:e0:d3:8c:e0:8a:96:8f:
c9:ce:f8:52:64:7d:8b:c7:47:9b:68:3b:f6:ac:7a:
6e:a5:13:93:ee:f1:1c:28:26:c6:b7:e4:38:c5:91:
a2:59:e2:7f:29:0c:08:89:bf:ec:e1:3c:fd:92:d0:
5e:a1:7e:91:31:15:3d:24:89:85:12:b0:bf:b3:5c:
8b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6F:79:FE:A6:1C:00:69:62:12:D7:14:39:9F:17:70:3E:CE:72:41
X509v3 Authority Key Identifier:
keyid:05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f5:7c:c7:fe:e5:ec:da:a3:71:a8:54:68:90:03:03:1c:51:
d1:bd:e1:67:77:af:f4:f9:b3:dc:21:2a:42:ab:a3:04:60:48:
d7:23:50:b2:ef:f3:a4:15:6b:07:18:01:f1:1d:62:b4:c6:2f:
77:52:bf:a3:1e:10:4e:00:02:f4:c0:9c:d8:28:12:77:4a:5b:
8e:e8:b1:67:25:eb:25:58:f5:03:de:ac:08:06:91:d3:74:b3:
b8:b0:46:c9:b4:83:fd:40:50:26:a9:67:13:e6:3f:a9:80:b5:
fe:94:e8:94:1c:f4:08:16:a6:69:0d:96:50:0e:51:f9:52:60:
76:f7:1c:34:92:2f:af:c3:dd:1e:bd:80:ca:99:b0:b0:1d:ce:
8f:2b:63:cb:cf:61:60:08:6a:c0:de:a5:bd:5f:fe:f5:73:18:
ff:92:dc:2f:ab:55:17:84:fd:09:01:dc:1c:22:1f:10:6f:24:
99:a5:42:08:a3:a7:71:da:3e:32:c2:26:64:23:0b:83:ec:2c:
2a:da:ff:c4:fb:97:f0:aa:62:8d:27:16:34:0b:db:e7:22:0d:
84:bf:2f:7a:1a:ec:79:dc:a2:28:d7:1b:71:5e:5d:41:90:c3:
88:04:49:52:d0:94:94:84:f7:e0:7f:d9:ec:f1:cb:27:78:ac:
08:77:19:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWeQBaBLPGu5VM3sW3zM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NWQ3ODRiOTAxMjY2M2MzNDBiZjY3ZmFjYjYxYmZiZTEw
ODcxYjgwHhcNMjYwMzAyMDcwMTE1WhcNMjYwMzAzMDcwMTE1WjAzMTEwLwYDVQQD
EyhkYzZmNzlmZWE2MWMwMDY5NjIxMmQ3MTQzOTlmMTc3MDNlY2U3MjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2dgdr3dQUj0OEf9QLyWKayVzJ4G
V2P0TalExCOHCx/tRfnRLvX4l3YZ25jB3/2bC0zkp7xPZwUgOMnm+7xoNfrvTd0u
R1rch1DW/+8gGi8Tni+X/BdtvTy0oPKj19e7vj8oAgd7kNoJo97FY1hoxjokLuAj
JbmRlgx5cqLSRhGba04XT2X8vdlN2x7tHpoLFzeTCzazxHSGupdmumdfkI4TKGJu
qNo98V0cIQEF8YqAe2yjPYpnXCJqEuDTjOCKlo/JzvhSZH2Lx0ebaDv2rHpupROT
7vEcKCbGt+Q4xZGiWeJ/KQwIib/s4Tz9ktBeoX6RMRU9JImFErC/s1yLEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxvef6mHABpYhLXFDmfF3A+znJBMB8GA1UdIwQY
MBaAFAVdeEuQEmY8NAv2f6y2G/vhCHG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlYxNFM1QVNaancwQ19aX3JMWWItLUVJY2JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC81N2MwZTgtMzkzYy00NWM5LTg4MWYt
M2I0MjA1ZGI3NTNhLzEvQlYxNFM1QVNaancwQ19aX3JMWWItLUVJY2JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC81N2MwZTgtMzkzYy00NWM5LTg4MWYtM2I0MjA1ZGI3NTNh
LzEvQlYxNFM1QVNaancwQ19aX3JMWWItLUVJY2JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPV8x/7l
7NqjcahUaJADAxxR0b3hZ3ev9Pmz3CEqQqujBGBI1yNQsu/zpBVrBxgB8R1itMYv
d1K/ox4QTgAC9MCc2CgSd0pbjuixZyXrJVj1A96sCAaR03SzuLBGybSD/UBQJqln
E+Y/qYC1/pTolBz0CBamaQ2WUA5R+VJgdvccNJIvr8PdHr2AypmwsB3Ojytjy89h
YAhqwN6lvV/+9XMY/5LcL6tVF4T9CQHcHCIfEG8kmaVCCKOncdo+MsImZCMLg+ws
Ktr/xPuX8KpijScWNAvb5yINhL8vehrsedyiKNcbcV5dQZDDiARJUtCUlIT34H/Z
7PHLJ3isCHcZVA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:09:03 2026 by rpki-client