Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: GSmW4gJNvVmpU0prTJq2Jav3A6EMzh/eEZ9HhvejwEk=
Subject key identifier: 5A:63:F0:F8:C8:71:36:60:9A:BD:1D:0A:0F:19:00:B0:7C:D8:DC:8A
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 019CAD59C4F9AF43C4FFEA3B6F0BA77DBADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 07:01:07 +0000
Manifest this update: Mon 02 Mar 2026 07:01:07 +0000
Manifest next update: Tue 03 Mar 2026 07:01:07 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: T/54hwtF179HokZhGkvuto0E7pxS3brVAghz3dj/uQE=)
2: hTRFy4b-NXgfqT3Ys05VYgTqhdI.roa (hash: lHDz7JkYdQE2h8WEtCFRCNw6+mNU93VaarKaLbHW5uI=)
3: hyfFakadnytXl4p0xrQCeFJgUhU.roa (hash: OoK7VERj3Hnh56OBMYeBHkMVOjO2QMd8/KNIimfFc/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:c4:f9:af:43:c4:ff:ea:3b:6f:0b:a7:7d:ba:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Mar 2 07:01:07 2026 GMT
Not After : Mar 3 07:01:07 2026 GMT
Subject: CN=5a63f0f8c87136609abd1d0a0f1900b07cd8dc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d4:ac:ac:98:5b:e9:6d:bd:9f:11:df:b0:e7:
47:e0:3b:03:bc:3e:68:46:d8:36:fa:05:27:16:32:
44:7c:16:2e:9b:56:b0:13:8e:4b:cd:dd:5c:b1:90:
49:46:af:85:52:35:c9:3f:5b:55:99:3b:85:23:55:
b0:fc:52:c2:37:f7:ea:bf:00:f0:5c:ad:bb:e7:87:
7d:86:88:c5:a1:7a:68:de:da:65:c8:2e:6a:8f:0e:
15:b4:c0:bb:df:c5:62:c3:c8:ed:e2:3b:f7:ad:14:
57:83:69:fc:a3:2d:e2:4b:41:68:df:01:dc:8f:85:
03:de:7c:01:5a:73:52:6a:61:5d:73:b4:70:f4:a4:
c5:a0:02:0f:f6:d3:80:3e:ba:2c:e5:4c:28:46:4d:
54:3a:69:2e:c2:d6:a7:ae:b0:c4:a2:8b:c2:1c:a1:
ee:f8:ed:25:1e:a8:c8:65:0e:48:6c:34:c4:8e:f5:
7d:39:0a:5f:78:14:50:f7:0a:22:65:d8:f6:10:c7:
09:cb:d8:31:2f:e1:82:b8:0e:e6:02:5a:d2:97:76:
69:06:50:7b:c3:69:e1:d5:da:c2:30:6f:dc:92:9c:
4f:b3:07:1e:e4:6a:3b:23:a1:22:e8:49:e2:f1:c6:
5a:af:61:d8:35:56:49:65:e2:03:a0:69:3e:a7:9f:
3c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:63:F0:F8:C8:71:36:60:9A:BD:1D:0A:0F:19:00:B0:7C:D8:DC:8A
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ae:99:9c:42:d8:a1:19:87:be:aa:28:17:cd:b9:7e:8e:c6:
92:01:12:4f:f1:0e:78:6a:97:0a:66:01:b0:39:a1:af:2d:46:
17:38:35:e6:06:fc:b8:28:a2:20:bf:27:82:c8:00:f2:af:4f:
db:be:cc:8c:ca:cb:40:49:e3:e6:57:25:33:db:8e:e1:35:89:
bf:84:c3:6a:73:72:e0:24:73:0e:d3:b8:5b:2e:fd:38:12:d4:
f2:3e:3b:a5:4a:b2:40:43:7d:2c:72:3b:54:25:2b:e3:74:8f:
ec:17:a0:f5:6d:45:f7:78:80:f9:ee:06:b4:d0:25:f0:bf:5b:
b9:14:8b:51:33:7e:43:51:f6:49:45:1e:3f:28:37:8a:01:be:
b5:c3:8b:af:3d:97:ae:f4:37:28:19:6d:46:f3:3c:7a:3a:0d:
ba:75:fc:5b:79:07:39:13:90:45:93:6f:23:06:e0:8c:2f:b5:
04:b4:92:00:4c:ea:41:65:a4:31:08:5f:e0:e5:a1:d0:64:b6:
22:75:d3:68:77:fa:9e:fc:d2:02:95:8b:3c:f6:42:54:3c:4e:
02:fd:62:24:c9:90:7b:c5:ff:60:90:64:ac:d3:6e:92:67:b3:
f8:fc:79:43:a9:45:13:2e:07:71:c5:d6:ce:26:a3:78:10:6c:
8c:45:1d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:30 2026 by rpki-client