Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: k7jJCQ+LZQGfbmwDi7+IGq1RfhuaW4PC0PwBmfzov2c=
Subject key identifier: 0C:7E:80:77:09:5B:8B:BF:20:48:85:79:F2:4F:6E:71:EC:AB:6E:83
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 019EC06D1892CE8977EA8A382BA1C219119B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 195F
Signing time: Sat 13 Jun 2026 10:00:35 +0000
Manifest this update: Sat 13 Jun 2026 10:00:35 +0000
Manifest next update: Sun 14 Jun 2026 10:00:35 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: eW20/QUCPgCf017cneNMH/rwmPLvXnp+jHAJ+ssfhXY=)
2: hTRFy4b-NXgfqT3Ys05VYgTqhdI.roa (hash: lHDz7JkYdQE2h8WEtCFRCNw6+mNU93VaarKaLbHW5uI=)
3: hyfFakadnytXl4p0xrQCeFJgUhU.roa (hash: OoK7VERj3Hnh56OBMYeBHkMVOjO2QMd8/KNIimfFc/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:18:92:ce:89:77:ea:8a:38:2b:a1:c2:19:11:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Jun 13 10:00:35 2026 GMT
Not After : Jun 14 10:00:35 2026 GMT
Subject: CN=0c7e8077095b8bbf20488579f24f6e71ecab6e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d3:f6:dd:dc:d5:f8:10:c5:9e:71:4a:35:c1:
ba:83:ec:d4:ce:70:ef:07:d8:bc:fb:4f:10:64:4f:
56:99:c8:f5:7d:d7:61:f1:f3:fb:c9:f9:a7:a2:d5:
10:08:4b:f3:76:65:6a:62:40:f4:39:20:81:1e:da:
be:74:2a:9f:af:8b:dd:67:21:06:c4:f8:45:7f:2d:
73:a4:2d:fa:8e:b8:29:4d:a8:00:9a:ca:ac:6a:bc:
ab:2f:16:dd:c6:a3:d3:fa:e7:3b:b7:28:5d:8a:1e:
7e:09:48:c7:85:9d:5f:eb:b8:df:83:ff:dc:49:c8:
3c:6d:54:75:09:22:74:e4:21:f2:d3:99:35:37:0d:
5a:8a:fc:9e:93:d6:91:df:ca:d3:f7:2c:8e:b3:f7:
e6:06:9b:3b:aa:c5:da:0b:00:b0:d2:e0:ff:4b:8c:
6d:66:1b:d4:b0:b0:03:43:47:4e:19:59:b7:34:87:
ab:f7:29:87:73:65:c0:5c:8e:3b:0f:5d:16:38:47:
b8:8e:bf:50:04:83:de:1d:56:67:17:5b:10:cb:66:
3f:c3:12:2d:8d:53:ab:75:5a:48:a9:fa:51:ff:3b:
be:c2:b9:a5:ee:4c:7b:17:fe:56:ad:00:d1:d5:af:
e5:50:d6:41:2c:4a:18:cd:32:8c:19:81:61:e9:25:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7E:80:77:09:5B:8B:BF:20:48:85:79:F2:4F:6E:71:EC:AB:6E:83
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:bb:8d:72:d4:2f:e5:2b:29:ca:cc:fc:7d:b4:99:ae:95:1c:
4a:38:6b:cf:6b:fa:fd:7e:a2:3c:c6:91:67:51:3c:61:f1:1c:
ff:3c:90:37:95:cb:13:6c:ff:e6:22:ee:9a:72:d8:92:fd:07:
55:9e:58:10:88:88:11:88:bd:ce:d5:fc:50:70:90:91:ad:29:
4a:be:e1:82:79:b2:68:cc:39:c1:63:b2:ac:75:66:1a:7d:e0:
ca:c9:56:63:6b:e0:ee:cb:ab:8e:77:3d:51:4b:d7:97:f6:3d:
0a:34:85:9f:0f:dc:c1:00:c8:83:e7:29:26:bf:8c:37:45:15:
4f:14:72:9c:6b:2f:8f:8d:7a:f9:43:e6:dc:f2:80:7a:25:0a:
6b:9c:9a:09:7a:7a:76:2d:e3:b4:1f:bd:46:e6:19:b7:38:7b:
93:04:ec:22:38:c0:73:de:27:40:e4:e6:bd:bc:13:9f:32:4f:
6e:d4:ec:83:76:47:2f:66:a4:7e:0f:b3:6c:51:f9:6c:32:03:
56:5a:f9:c2:26:9a:a2:9d:cb:83:34:f2:f7:2e:62:f5:57:9b:
2d:58:95:33:05:2b:09:2e:96:d0:83:dd:ad:5b:f0:a8:af:ee:
d1:a7:2f:9c:d5:5d:39:d5:84:71:d6:4e:e5:20:80:28:ee:7b:
df:57:6d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:33:06 2026 by rpki-client