Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: t7ETr5OxEfQJmSzRQ2STJruiNvd6ew+uHbRwuWttbS0=
Subject key identifier: B6:85:A7:11:2A:3E:B8:EA:3A:68:F7:69:9D:BC:21:24:76:F8:EA:94
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 019D98F4ADF7B3D58A8F65226002341272BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 01:01:05 +0000
Manifest this update: Fri 17 Apr 2026 01:01:05 +0000
Manifest next update: Sat 18 Apr 2026 01:01:05 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: rKOhC4KGd5KBwf2HmVpPGj8mG6pQIwcmDeG8rqrkk/M=)
2: hTRFy4b-NXgfqT3Ys05VYgTqhdI.roa (hash: lHDz7JkYdQE2h8WEtCFRCNw6+mNU93VaarKaLbHW5uI=)
3: hyfFakadnytXl4p0xrQCeFJgUhU.roa (hash: OoK7VERj3Hnh56OBMYeBHkMVOjO2QMd8/KNIimfFc/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:ad:f7:b3:d5:8a:8f:65:22:60:02:34:12:72:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Apr 17 01:01:05 2026 GMT
Not After : Apr 18 01:01:05 2026 GMT
Subject: CN=b685a7112a3eb8ea3a68f7699dbc212476f8ea94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:f8:57:90:36:e4:86:48:94:26:8c:6d:a9:
1d:5e:03:4d:bb:5c:27:74:f7:37:2d:df:d9:7c:ca:
29:fe:3f:9e:98:9f:98:96:59:67:ab:e4:13:fa:2b:
02:89:04:25:79:24:d9:44:62:45:eb:2a:2d:72:f0:
b1:dd:db:60:25:24:53:bc:e9:1e:42:0a:ed:ef:68:
5b:6d:d3:14:f7:d2:98:f0:00:03:cb:bb:bc:9b:f0:
69:a2:71:e7:2a:d8:3b:bb:00:3f:05:36:26:45:d3:
45:42:41:62:d6:98:cc:fe:f8:4b:a5:86:9c:be:7b:
87:39:50:3b:53:96:83:c1:49:ab:82:b2:1b:7e:ca:
f4:93:4f:2e:b1:5b:37:d1:ed:c3:86:fd:c5:11:c6:
2f:c5:dc:18:d6:b3:c8:f5:58:7f:e1:f6:79:ef:a7:
0b:79:f8:1e:ea:da:10:eb:f6:d1:f8:59:16:58:51:
82:10:04:f2:75:91:fa:e7:56:1f:bf:59:12:69:5d:
2a:72:4c:21:f2:40:a7:3a:f5:fe:72:26:60:48:b3:
e0:90:a0:43:0d:f5:05:fc:96:d3:15:e7:19:56:73:
00:ed:01:50:65:d0:eb:c7:77:29:0e:6e:da:c6:eb:
fb:b2:8f:c8:0a:19:c8:30:c5:e4:e1:d5:cd:87:35:
c3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:85:A7:11:2A:3E:B8:EA:3A:68:F7:69:9D:BC:21:24:76:F8:EA:94
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a3:44:0a:1b:39:53:69:7e:34:5d:a5:a9:e1:61:a9:f1:50:
e6:08:d0:29:08:58:0b:aa:aa:9e:f6:0c:c1:71:d6:ce:aa:2b:
e2:1f:08:2c:53:cf:0d:27:9b:8a:e8:8c:54:f2:7a:b0:13:73:
7d:d6:a6:5e:9e:f8:5e:b5:8c:70:13:ff:88:6a:a5:17:5a:a6:
54:d9:3c:43:56:59:52:4c:8b:3b:a2:65:26:f6:90:c3:cd:09:
74:81:29:f1:62:a3:31:51:74:fd:39:06:ad:0d:03:5d:be:14:
1e:29:69:94:ef:a0:b4:25:41:5a:8d:06:7d:14:83:90:dd:a9:
fa:62:f0:ec:79:81:c9:6c:4d:cc:43:c8:ee:02:d8:54:9e:c0:
e6:4b:fb:c5:84:7a:68:f8:5f:7c:48:e4:9d:2e:fd:3d:91:8a:
a0:a6:1e:ec:b6:b5:e0:9a:86:23:e5:c5:49:4f:1b:2a:78:68:
c5:30:65:74:55:87:e0:ef:8f:f9:8f:c7:dc:d4:50:54:11:61:
e3:0d:d8:f4:ff:de:78:e8:15:9f:38:92:7f:23:97:d8:9c:ea:
5c:86:c5:50:00:e3:1c:65:1e:e4:13:16:c6:c3:57:84:8d:4b:
b3:15:37:23:70:e6:0c:c5:de:c3:6a:68:0f:3b:ee:8a:88:92:
46:63:46:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9K33s9WKj2UiYAI0EnK/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MmFjMzgyNjg5Njg3YjYwZmNlNWNlOWRiODg3YjIxZDY4
YTZhYmMwHhcNMjYwNDE3MDEwMTA1WhcNMjYwNDE4MDEwMTA1WjAzMTEwLwYDVQQD
EyhiNjg1YTcxMTJhM2ViOGVhM2E2OGY3Njk5ZGJjMjEyNDc2ZjhlYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqP4V5A25IZIlCaMbakdXgNNu1wn
dPc3Ld/ZfMop/j+emJ+Ylllnq+QT+isCiQQleSTZRGJF6yotcvCx3dtgJSRTvOke
Qgrt72hbbdMU99KY8AADy7u8m/BponHnKtg7uwA/BTYmRdNFQkFi1pjM/vhLpYac
vnuHOVA7U5aDwUmrgrIbfsr0k08usVs30e3Dhv3FEcYvxdwY1rPI9Vh/4fZ576cL
efge6toQ6/bR+FkWWFGCEATydZH651Yfv1kSaV0qckwh8kCnOvX+ciZgSLPgkKBD
DfUF/JbTFecZVnMA7QFQZdDrx3cpDm7axuv7so/IChnIMMXk4dXNhzXDDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaFpxEqPrjqOmj3aZ28ISR2+OqUMB8GA1UdIwQY
MBaAFAQqw4Joloe2D85c6duIeyHWimq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUt
NzBiYzY2ODkzZTVjLzEvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC80NjYzYmItYzUwOS00YTlhLWJjYWUtNzBiYzY2ODkzZTVj
LzEvQkNyRGdtaVdoN1lQemx6cDI0aDdJZGFLYXJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqNEChs5
U2l+NF2lqeFhqfFQ5gjQKQhYC6qqnvYMwXHWzqor4h8ILFPPDSebiuiMVPJ6sBNz
fdamXp74XrWMcBP/iGqlF1qmVNk8Q1ZZUkyLO6JlJvaQw80JdIEp8WKjMVF0/TkG
rQ0DXb4UHilplO+gtCVBWo0GfRSDkN2p+mLw7HmByWxNzEPI7gLYVJ7A5kv7xYR6
aPhffEjknS79PZGKoKYe7La14JqGI+XFSU8bKnhoxTBldFWH4O+P+Y/H3NRQVBFh
4w3Y9P/eeOgVnziSfyOX2JzqXIbFUADjHGUe5BMWxsNXhI1LsxU3I3DmDMXew2po
DzvuioiSRmNGtg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:12 2026 by rpki-client