Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
File: BcCcQdI4lrLVQoGCYj-I-mdubJA.mft (raw, json)
Hash identifier: UueeE+gbv2+wV1t2h7FiTplKxc8M0/Sc9HyFeC1cxb0=
Subject key identifier: 34:DD:7F:B3:C8:DE:97:74:62:6F:C7:79:61:65:41:1E:F2:40:77:96
Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
Certificate issuer: /CN=05c09c41d23896b2d5428182623f88fa676e6c90
Certificate serial: 01A0BF8C3F1A02D4618D6173CC4A818C69B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
Manifest number: 1A62
Signing time: Sun 20 Sep 2026 16:00:34 +0000
Manifest this update: Sun 20 Sep 2026 16:00:34 +0000
Manifest next update: Mon 21 Sep 2026 16:00:34 +0000
Files and hashes: 1: BcCcQdI4lrLVQoGCYj-I-mdubJA.crl (hash: gQAzTDZaBqnhvEtj5E1lMrD3Dw4HxzsdwtXEPtLffL4=)
2: a32MUCBEBD7yImaxmD5xprVyEpU.asa (hash: LEIQqHPZ7Deh8zzcjOaSyrr8jOCT4jyKKlMIZpGKUJc=)
3: hSa-jL7A0Cvb7swNmNrYjsj_n70.roa (hash: TUV2Alqz5JkF7MwZ8HViCcGRzdJK6kTlEyLaHmA8NLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:8c:3f:1a:02:d4:61:8d:61:73:cc:4a:81:8c:69:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90
Validity
Not Before: Sep 20 16:00:34 2026 GMT
Not After : Sep 21 16:00:34 2026 GMT
Subject: CN=34dd7fb3c8de9774626fc7796165411ef2407796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fe:9f:93:0d:eb:4a:b3:29:ac:2b:1b:35:37:
3b:d6:34:84:21:4e:38:0d:69:b8:87:11:45:35:ec:
dc:28:73:a8:11:49:51:3e:10:5c:1f:b0:0b:54:2e:
95:db:e2:d6:04:6d:7a:fb:e6:37:24:62:40:a2:f4:
b2:90:59:66:df:a4:f5:22:27:76:12:a2:ff:9b:b8:
64:b4:89:01:55:a6:80:12:ff:a6:5b:4a:c0:66:d5:
9a:58:2d:e5:ac:9e:95:47:97:5d:8e:0c:f2:38:4f:
6c:9a:a9:e7:1c:5a:bf:de:d6:8d:de:e7:fa:38:42:
40:75:6d:5c:6f:74:86:59:9c:ce:e2:c5:f6:e0:d3:
ca:97:56:84:89:9a:23:3a:c1:cf:f1:e3:60:62:c8:
5f:8b:c3:4d:a9:da:c0:3f:7a:13:92:2a:c5:30:89:
f6:24:9e:bd:95:d7:a9:b0:52:85:3c:2f:a9:a1:23:
d8:e8:5e:7c:ba:31:28:3c:61:6a:b3:c6:23:bd:8e:
01:55:0d:0c:2a:03:a6:a5:51:cb:c1:ca:c9:d8:34:
8e:09:27:c8:6a:76:c5:18:13:e1:38:0d:65:03:2f:
56:fd:60:c1:dc:79:07:95:20:c3:21:15:b7:98:75:
1b:5d:82:bb:96:72:ec:59:65:ac:3a:38:4a:93:34:
7f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DD:7F:B3:C8:DE:97:74:62:6F:C7:79:61:65:41:1E:F2:40:77:96
X509v3 Authority Key Identifier:
keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7e:68:05:80:17:ca:1d:63:a2:a3:c9:a5:83:88:f9:2c:ae:
4e:63:e5:b8:59:34:73:2b:b9:a9:5d:8e:2e:ee:a7:d2:10:fb:
5c:ae:b5:66:9d:5d:27:d0:35:b6:4a:20:15:15:e0:66:c0:cc:
1f:c9:40:6b:2c:b4:89:cb:66:b8:e9:64:28:73:96:27:49:a8:
c9:5c:87:23:ee:46:44:b8:3b:05:f0:e9:80:47:73:c6:65:ae:
67:ed:86:f1:a1:94:02:02:fe:33:75:cc:3f:66:92:ca:b2:0f:
c0:08:bd:18:56:0c:7d:55:8d:04:7e:7e:96:4b:e3:96:40:38:
ab:fa:71:81:32:52:50:f8:65:8a:da:8e:b7:ed:c7:84:4b:1f:
ce:bf:f9:78:0f:53:51:4a:78:88:9e:32:d1:42:bf:50:b0:c7:
4f:66:0b:31:ed:17:d4:64:88:e2:09:3e:10:ad:02:2e:21:7a:
64:a4:fe:95:f3:18:56:6a:21:0c:22:b8:f4:6d:f7:9c:ce:06:
19:c1:ae:00:d8:2c:66:bb:64:fa:73:d8:86:69:c8:1d:9a:ae:
5d:5c:d8:fc:26:f0:4d:57:b0:d7:28:9e:00:13:20:eb:23:d1:
7e:35:0e:0f:37:a1:85:bc:72:cd:1c:02:61:a3:ab:01:04:83:
2a:2b:9e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:09:51 2026 by rpki-client