Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: 8DKBwxgG0oijliRFKd4dJThemaoyc7sAiOVWgu4PThk=
Subject key identifier: B3:A1:0D:04:77:44:94:2C:55:95:51:DF:9A:D9:D1:18:55:CC:9F:D8
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 019EBE7F6247648A539994A725D555445597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 01:01:19 +0000
Manifest this update: Sat 13 Jun 2026 01:01:19 +0000
Manifest next update: Sun 14 Jun 2026 01:01:19 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: G/I77n5j8DunR0Z7yyFUF2olkRXp/lJmvRD385jOaWI=)
2: hTRFy4b-NXgfqT3Ys05VYgTqhdI.roa (hash: lHDz7JkYdQE2h8WEtCFRCNw6+mNU93VaarKaLbHW5uI=)
3: hyfFakadnytXl4p0xrQCeFJgUhU.roa (hash: OoK7VERj3Hnh56OBMYeBHkMVOjO2QMd8/KNIimfFc/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:62:47:64:8a:53:99:94:a7:25:d5:55:44:55:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Jun 13 01:01:19 2026 GMT
Not After : Jun 14 01:01:19 2026 GMT
Subject: CN=b3a10d047744942c559551df9ad9d11855cc9fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:6a:f7:fc:60:74:cd:79:72:5a:13:7e:e0:
d0:bc:9d:d6:e0:bc:87:aa:95:b3:5c:89:0b:46:c7:
b7:4b:df:ff:a7:3e:d8:22:db:0b:2f:58:c9:4e:92:
8c:8f:91:b9:b8:93:58:f2:8d:6a:60:2b:73:5f:d2:
69:75:f2:2d:d6:df:6d:5d:71:72:5e:89:5c:a0:28:
1e:f3:97:d4:a1:e1:31:ec:c5:0f:8a:ff:ed:cb:29:
38:20:62:21:90:bd:ee:05:8f:38:bf:a2:c3:8e:47:
9d:d6:4d:77:54:75:d3:e4:94:a6:78:7c:10:72:05:
4e:ea:01:1d:1c:c6:86:9e:fc:43:4b:8a:47:0b:f9:
09:eb:95:01:55:cd:5c:99:92:a9:fa:5c:7b:e0:c9:
d3:69:69:89:e8:ee:91:76:de:49:f3:b8:9d:93:73:
d8:c3:ad:4e:f6:bf:0e:e7:21:28:dd:b1:24:6e:2a:
5f:90:00:9d:13:69:b3:01:74:cd:7a:5a:e9:37:55:
e6:41:4e:8e:8e:18:d2:6d:47:f0:c3:57:da:63:f0:
4d:7a:86:78:3e:a6:43:f3:eb:36:f2:20:36:e8:1c:
c4:72:5b:28:0f:07:d1:4b:ef:d7:54:a2:eb:b4:18:
72:3e:bf:38:f3:e2:bd:cc:92:fa:83:fe:b2:d6:cc:
98:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A1:0D:04:77:44:94:2C:55:95:51:DF:9A:D9:D1:18:55:CC:9F:D8
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ac:b1:dd:e7:ff:f8:23:ea:8d:42:fe:d7:a1:51:24:50:30:
dc:ec:50:e2:f5:80:3d:20:9d:b3:bb:94:4c:6f:3d:92:49:61:
c4:56:54:3d:04:5d:4a:86:05:62:00:d2:cd:57:e3:c8:68:5c:
db:30:be:7a:77:dd:4d:2a:d6:7a:8a:ba:f0:4e:dd:c9:da:60:
db:69:6d:08:b8:d5:42:30:98:31:24:75:d0:3a:89:c3:f2:bd:
47:8f:ee:7e:dc:5a:84:44:ac:fc:78:c8:fa:95:1d:21:18:22:
0d:3e:b0:bb:65:49:20:25:7d:c1:a2:32:96:ef:6c:3a:0f:0a:
43:f8:2e:1d:74:04:b7:4d:f4:82:57:c8:e5:69:f1:9f:6f:ed:
86:05:8f:64:5b:f3:82:fc:37:e3:31:d6:a0:d3:0d:2c:64:ec:
aa:01:88:de:17:5b:d9:2c:29:1f:a5:e5:0f:22:a7:90:05:df:
b1:aa:7c:78:ec:32:97:db:4c:e5:03:46:82:9f:ea:fc:03:71:
e7:85:9e:d9:55:6a:fb:4f:71:c5:7b:d5:a6:fe:76:1b:a9:c0:
6f:63:7e:1b:e0:a0:ea:11:81:5a:07:4c:46:c1:62:00:b0:24:
47:25:e3:e4:34:12:3a:a5:cc:9f:0a:bc:77:7a:98:64:73:6a:
2d:41:5a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:42:01 2026 by rpki-client