Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: e1ur4cMgGC0W6t+qZxTgL5ZQe6YEHffN4d/CH1D5Rgs=
Subject key identifier: BD:B3:E0:13:75:11:6E:A8:CB:AA:9E:1F:BF:7B:79:1F:49:8D:CF:89
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 019FA82B1AC12FE5266383010CACB663FF60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 10:00:24 +0000
Manifest this update: Tue 28 Jul 2026 10:00:24 +0000
Manifest next update: Wed 29 Jul 2026 10:00:24 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: W7UaSR6vJ/qBTbd9sDiis28YWkebpbuC6VYkYBnawLc=)
2: hTRFy4b-NXgfqT3Ys05VYgTqhdI.roa (hash: lHDz7JkYdQE2h8WEtCFRCNw6+mNU93VaarKaLbHW5uI=)
3: hyfFakadnytXl4p0xrQCeFJgUhU.roa (hash: OoK7VERj3Hnh56OBMYeBHkMVOjO2QMd8/KNIimfFc/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:1a:c1:2f:e5:26:63:83:01:0c:ac:b6:63:ff:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Jul 28 10:00:24 2026 GMT
Not After : Jul 29 10:00:24 2026 GMT
Subject: CN=bdb3e01375116ea8cbaa9e1fbf7b791f498dcf89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:18:2d:b6:ba:29:55:66:a2:a2:f7:2a:eb:
c6:b3:99:18:58:c7:5e:e6:71:b6:7d:e0:36:de:c2:
5f:96:12:f3:fb:6d:da:35:01:3d:ba:1d:c5:9f:43:
1b:59:1f:de:9a:e5:c3:b0:6b:b0:a3:27:ad:49:fb:
90:da:65:b2:a0:55:ca:ba:f8:57:88:90:36:fd:ce:
14:a4:7d:43:4e:f2:7d:09:b2:1b:dd:17:2f:3b:ee:
d1:59:87:d0:8e:ac:19:1b:3d:16:05:e5:8f:2a:4b:
84:c1:43:ae:77:ff:92:85:ea:03:89:5c:91:de:88:
a3:9e:be:0a:4c:0e:a5:a1:f5:0b:ed:2a:dd:72:70:
81:b0:0c:79:66:ba:2c:8b:0f:ec:90:57:02:b9:80:
4f:1d:9c:1e:52:dc:53:4a:a1:79:a7:6b:88:0b:54:
40:80:03:c4:2a:7c:b3:ff:45:10:16:03:1d:71:67:
ee:2b:38:81:ce:ff:08:0d:4d:ee:a1:54:ea:2f:27:
89:3c:c8:aa:25:9b:dd:70:c7:93:92:95:c9:d7:83:
d3:3c:30:d9:c0:4f:01:b9:2d:ca:ee:35:66:44:49:
3c:22:6c:42:31:c8:84:72:2f:cf:0a:d4:64:a6:f0:
77:7c:bd:7f:49:b2:19:02:86:a1:6f:22:4b:f3:27:
70:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B3:E0:13:75:11:6E:A8:CB:AA:9E:1F:BF:7B:79:1F:49:8D:CF:89
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:14:bf:2e:44:f3:21:13:4c:92:66:17:3b:67:74:e6:b2:a9:
7d:5f:6f:88:72:4b:30:53:87:1b:0a:8c:12:e5:2f:c9:e6:f2:
bb:71:0e:10:ec:8e:4e:b1:ee:04:e8:61:89:bd:c6:fc:9f:73:
8f:22:75:e4:2c:41:b9:a5:cf:68:40:d4:a4:37:e5:a0:34:a7:
3c:4c:53:e7:e0:b1:90:31:28:1c:79:e3:8e:79:35:64:7a:55:
dc:86:04:c2:27:99:05:54:c6:6f:1b:da:4f:1d:c8:14:07:bf:
67:5f:9a:c8:88:d5:a6:96:66:78:92:4d:bf:59:c7:4b:58:5b:
3b:bb:f5:d1:d4:83:7b:ac:46:a9:74:22:1e:0e:4f:e5:1a:d4:
63:18:72:08:c0:c0:c9:83:ee:71:58:3b:77:1c:52:3c:40:f4:
0c:ef:55:29:e3:b8:ba:b6:b3:97:57:f4:8b:1b:de:01:d8:13:
4f:66:15:a9:32:aa:51:05:2f:d8:6a:c2:60:36:a3:e1:b8:fb:
ed:58:11:b8:59:2c:e5:f5:92:ee:ac:2d:20:e5:5d:94:f9:09:
ce:7b:dc:ae:82:08:f8:98:84:fc:e9:2c:f7:27:e3:d1:94:ae:
0d:6d:dc:87:0d:5f:c2:0c:02:ad:2a:29:97:05:24:ad:8e:ab:
35:3e:ed:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:38:36 2026 by rpki-client