Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: 13HAVEoHv3GcNsHGV+8Vm5kDFCplnl54yQyryZ14Sbs=
Subject key identifier: A2:14:CF:28:27:16:D6:A1:73:4F:46:A6:2F:C0:5B:53:60:CE:8A:7F
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 01A0C9D93CA773F83B3188B0D6C5E7D7D876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 1A6D
Signing time: Tue 22 Sep 2026 16:00:52 +0000
Manifest this update: Tue 22 Sep 2026 16:00:52 +0000
Manifest next update: Wed 23 Sep 2026 16:00:52 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: jfxrcs09oHv9fnWn2w3ItOu8vnD34rU+w7AQOhDEUWg=)
2: hTRFy4b-NXgfqT3Ys05VYgTqhdI.roa (hash: lHDz7JkYdQE2h8WEtCFRCNw6+mNU93VaarKaLbHW5uI=)
3: hyfFakadnytXl4p0xrQCeFJgUhU.roa (hash: OoK7VERj3Hnh56OBMYeBHkMVOjO2QMd8/KNIimfFc/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:3c:a7:73:f8:3b:31:88:b0:d6:c5:e7:d7:d8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Sep 22 16:00:52 2026 GMT
Not After : Sep 23 16:00:52 2026 GMT
Subject: CN=a214cf282716d6a1734f46a62fc05b5360ce8a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:84:1b:13:6e:4c:c7:f5:d4:7b:23:aa:6d:10:
59:2f:35:9f:5e:4b:62:77:13:89:67:ec:4d:3f:41:
d1:28:93:88:ee:f5:3d:da:38:12:08:9d:99:f7:12:
aa:f5:70:59:be:9b:35:52:5b:98:fa:71:05:f0:aa:
d3:f5:4b:06:e5:12:59:ae:cc:47:1a:19:97:aa:99:
0c:ee:49:4d:c3:91:a8:60:08:0d:36:07:d4:17:15:
c2:46:71:c5:11:c3:95:e7:dd:58:a1:c9:b9:3b:e8:
36:be:c2:66:92:05:f4:49:f9:53:b0:29:68:f0:80:
3d:36:08:88:a6:c0:57:2b:d3:1e:ee:43:bd:19:2b:
d7:de:21:72:82:27:1e:5d:9c:55:41:07:4c:25:53:
df:85:7c:1e:9d:af:e3:72:98:4b:dd:56:c7:ed:6b:
7d:02:eb:8e:0c:12:48:8d:41:b8:a8:cf:91:51:93:
95:46:bc:cd:4c:d5:38:ea:4f:78:4b:08:04:73:47:
7e:9a:5c:13:7e:1f:90:7b:a9:33:b5:76:43:15:d0:
74:b8:f9:0a:93:c7:7f:82:aa:43:f6:ed:42:76:a4:
02:ad:cd:36:5a:91:4f:19:2a:76:12:7a:62:74:02:
13:d8:fd:53:84:23:cf:9e:cf:05:11:44:41:37:25:
10:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:14:CF:28:27:16:D6:A1:73:4F:46:A6:2F:C0:5B:53:60:CE:8A:7F
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e4:23:0f:3a:bc:73:76:02:c8:ce:91:f8:26:91:cf:97:25:
11:d4:7d:5d:f1:48:27:63:e9:f9:96:2e:85:a0:63:8a:fa:fd:
f0:b4:0f:06:1e:b1:0e:12:ab:10:5f:aa:5e:48:a7:1d:31:09:
d0:a7:5f:d9:d1:65:a7:20:d9:0c:b5:a7:2e:0b:6a:d8:3b:9b:
ab:ed:9a:94:b3:a8:93:08:51:1b:f8:d9:37:82:fd:8a:a2:08:
38:3c:76:e4:3b:05:84:10:bf:d3:ac:f5:e5:4a:e3:71:60:d9:
59:d5:b1:48:3a:bb:00:7b:4f:f1:af:71:9b:09:93:0b:f6:75:
70:1a:48:8a:20:79:08:c0:09:78:77:cb:6d:57:bf:5d:d9:a0:
01:20:a0:2c:8c:da:26:3e:53:ea:78:c9:20:10:d7:0a:cc:60:
a4:e4:40:eb:f5:37:74:81:c9:a0:4b:8a:08:e0:6b:05:51:99:
3b:92:6d:1e:30:3f:53:e5:24:81:c5:a6:21:f2:9c:50:0e:d5:
11:d5:ff:7a:0f:0c:34:b1:7d:bf:f3:d3:40:5b:36:42:68:2e:
1b:23:26:99:37:72:8d:6c:81:63:83:ed:b0:84:56:c5:40:3a:
c9:ab:87:1e:60:11:0e:5f:08:22:0c:fe:51:52:95:f7:16:c2:
18:1c:a9:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJ2Tync/g7MYiw1sXn19h2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MmFjMzgyNjg5Njg3YjYwZmNlNWNlOWRiODg3YjIxZDY4
YTZhYmMwHhcNMjYwOTIyMTYwMDUyWhcNMjYwOTIzMTYwMDUyWjAzMTEwLwYDVQQD
EyhhMjE0Y2YyODI3MTZkNmExNzM0ZjQ2YTYyZmMwNWI1MzYwY2U4YTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IQbE25Mx/XUeyOqbRBZLzWfXkti
dxOJZ+xNP0HRKJOI7vU92jgSCJ2Z9xKq9XBZvps1UluY+nEF8KrT9UsG5RJZrsxH
GhmXqpkM7klNw5GoYAgNNgfUFxXCRnHFEcOV591Yocm5O+g2vsJmkgX0SflTsClo
8IA9NgiIpsBXK9Me7kO9GSvX3iFygiceXZxVQQdMJVPfhXwena/jcphL3VbH7Wt9
AuuODBJIjUG4qM+RUZOVRrzNTNU46k94SwgEc0d+mlwTfh+Qe6kztXZDFdB0uPkK
k8d/gqpD9u1CdqQCrc02WpFPGSp2EnpidAIT2P1ThCPPns8FEURBNyUQxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIUzygnFtahc09Gpi/AW1Ngzop/MB8GA1UdIwQY
MBaAFAQqw4Joloe2D85c6duIeyHWimq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUt
NzBiYzY2ODkzZTVjLzEvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUtNzBiYzY2ODkzZTVj
LzEvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+QjDzq8
c3YCyM6R+CaRz5clEdR9XfFIJ2Pp+ZYuhaBjivr98LQPBh6xDhKrEF+qXkinHTEJ
0Kdf2dFlpyDZDLWnLgtq2Dubq+2alLOokwhRG/jZN4L9iqIIODx25DsFhBC/06z1
5UrjcWDZWdWxSDq7AHtP8a9xmwmTC/Z1cBpIiiB5CMAJeHfLbVe/XdmgASCgLIza
Jj5T6njJIBDXCsxgpORA6/U3dIHJoEuKCOBrBVGZO5JtHjA/U+UkgcWmIfKcUA7V
EdX/eg8MNLF9v/PTQFs2QmguGyMmmTdyjWyBY4PtsIRWxUA6yauHHmARDl8IIgz+
UVKV9xbCGByp/g==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:07:55 2026 by rpki-client