Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
File: BcCcQdI4lrLVQoGCYj-I-mdubJA.mft (raw, json)
Hash identifier: N2G/wGduckFhmVfutBf/ANSZZpInqppkjl+BMHoXuT0=
Subject key identifier: 80:89:D4:00:E8:04:84:E3:F7:E4:29:F7:FA:D5:89:24:99:9C:3B:52
Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
Certificate issuer: /CN=05c09c41d23896b2d5428182623f88fa676e6c90
Certificate serial: 019D9A3E9BB311F939B32BA2BEF767E77EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 07:01:27 +0000
Manifest this update: Fri 17 Apr 2026 07:01:27 +0000
Manifest next update: Sat 18 Apr 2026 07:01:27 +0000
Files and hashes: 1: BcCcQdI4lrLVQoGCYj-I-mdubJA.crl (hash: Dawe6j/1krRdkzR2LyNxN++evfcO2oyleOhCMGWXuvc=)
2: a32MUCBEBD7yImaxmD5xprVyEpU.asa (hash: LEIQqHPZ7Deh8zzcjOaSyrr8jOCT4jyKKlMIZpGKUJc=)
3: hSa-jL7A0Cvb7swNmNrYjsj_n70.roa (hash: TUV2Alqz5JkF7MwZ8HViCcGRzdJK6kTlEyLaHmA8NLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:9b:b3:11:f9:39:b3:2b:a2:be:f7:67:e7:7e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90
Validity
Not Before: Apr 17 07:01:27 2026 GMT
Not After : Apr 18 07:01:27 2026 GMT
Subject: CN=8089d400e80484e3f7e429f7fad58924999c3b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:10:4b:01:bf:07:66:07:7a:c9:53:14:41:37:
d2:e3:b4:c3:96:29:86:19:3c:4f:85:54:73:12:2b:
db:da:fa:13:20:8f:a4:bc:e3:f7:c3:8d:44:fe:40:
7f:53:84:f7:92:53:e5:f5:ff:55:28:9d:31:3d:8c:
5f:fc:19:b7:68:6e:41:42:06:0d:79:ac:55:07:61:
c0:ea:a5:0a:5e:a3:52:16:74:83:a1:3a:25:51:2e:
82:a1:4c:20:42:0d:e8:5f:b7:2c:30:58:b1:3f:11:
21:b1:95:f3:94:72:91:c9:06:76:9f:cd:84:5f:f2:
c8:d2:93:ba:d6:02:c7:65:d2:5c:88:d5:c5:23:d5:
b1:33:40:5b:22:75:9b:e0:f6:ac:c8:35:81:6d:e8:
c1:92:3c:1e:46:76:a3:69:3e:ca:98:25:f4:a0:55:
ee:f0:7b:01:93:78:1a:d1:11:53:5e:55:64:77:64:
65:a5:6d:49:3b:c9:ce:07:f6:ed:10:07:2d:f5:01:
27:c7:ca:bf:4e:22:0c:33:2b:7a:b1:fd:d0:78:14:
34:9b:4f:61:95:09:3e:ae:b9:ae:04:97:cf:87:e3:
ac:c4:d1:10:49:b7:1e:bc:06:7f:21:8e:24:05:a0:
f0:e4:00:56:a5:c0:db:ed:9e:24:bf:06:98:47:55:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:89:D4:00:E8:04:84:E3:F7:E4:29:F7:FA:D5:89:24:99:9C:3B:52
X509v3 Authority Key Identifier:
keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:69:52:9e:a1:43:7b:f0:ed:05:9b:76:10:a5:3e:1e:e0:a3:
63:3d:cf:7c:f9:b6:3d:be:89:d2:ed:be:e9:81:68:e9:6c:57:
1b:c0:80:4f:32:aa:f7:3e:d4:fc:4e:d1:c7:05:91:79:86:42:
28:07:c3:b7:40:59:1b:57:1e:33:3f:2e:72:4e:81:30:c9:32:
b7:e7:04:7a:46:6d:98:d7:bd:d9:91:7a:f6:3a:ea:ee:8c:5e:
a0:8b:1f:40:a2:6e:aa:e2:b5:38:b0:12:50:2f:c9:97:f0:a5:
56:8a:28:d8:8e:8a:c5:04:0e:f3:2c:3e:ee:bc:34:84:ef:2f:
f9:75:d8:85:e3:16:54:cd:9a:c4:6d:d0:09:46:f7:99:db:61:
a4:5c:8f:fa:23:ea:ec:1e:03:89:6b:a6:2d:2c:42:8c:50:be:
34:f4:69:59:18:5b:27:7c:68:57:76:2b:63:b9:25:c4:3d:4a:
ce:19:ff:b7:27:f1:bb:6b:28:68:83:a3:bb:75:b8:a0:36:03:
f2:78:52:1b:77:b9:13:cc:a1:58:32:e1:e3:24:22:85:32:5a:
3d:5e:d6:67:4c:c0:f0:76:76:91:ca:39:a0:43:a3:cc:9c:b9:
41:d1:36:01:5a:8d:f4:8e:46:e9:31:3b:8c:fb:9c:b3:5b:56:
d7:db:5d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:34:56 2026 by rpki-client