Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
File: BcCcQdI4lrLVQoGCYj-I-mdubJA.mft (raw, json)
Hash identifier: 4LyCc4X4eu+1fQK07lB4XeKa4y5pBuGYtrtRtWWRQEs=
Subject key identifier: D1:B8:DB:5B:5B:73:BB:38:B9:96:E7:09:FF:DC:B8:2B:44:DD:EB:B8
Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
Certificate issuer: /CN=05c09c41d23896b2d5428182623f88fa676e6c90
Certificate serial: 019FA7868B748AF3AF876B65FEFB9A40208F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 07:00:40 +0000
Manifest this update: Tue 28 Jul 2026 07:00:40 +0000
Manifest next update: Wed 29 Jul 2026 07:00:40 +0000
Files and hashes: 1: BcCcQdI4lrLVQoGCYj-I-mdubJA.crl (hash: c3WSy2NMq0FeHbAjLvyX0FSyJI598l2l0EeDdR/dEos=)
2: a32MUCBEBD7yImaxmD5xprVyEpU.asa (hash: LEIQqHPZ7Deh8zzcjOaSyrr8jOCT4jyKKlMIZpGKUJc=)
3: hSa-jL7A0Cvb7swNmNrYjsj_n70.roa (hash: TUV2Alqz5JkF7MwZ8HViCcGRzdJK6kTlEyLaHmA8NLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:86:8b:74:8a:f3:af:87:6b:65:fe:fb:9a:40:20:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90
Validity
Not Before: Jul 28 07:00:40 2026 GMT
Not After : Jul 29 07:00:40 2026 GMT
Subject: CN=d1b8db5b5b73bb38b996e709ffdcb82b44ddebb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:05:09:92:a3:b2:ba:54:74:80:6a:75:72:
3c:c9:9d:b2:98:ce:79:af:14:93:e8:0e:1f:6b:24:
b0:c5:f4:14:67:d1:6b:d2:15:49:b9:93:5a:d5:42:
ab:89:5e:1d:ec:ac:00:8b:79:2e:bc:8b:37:ab:19:
11:5d:b5:b4:fe:e4:3b:ef:88:70:43:37:03:b2:57:
ea:ee:58:2a:ed:93:a0:34:91:12:32:85:9d:56:1e:
9b:c8:21:6b:4b:fa:77:a7:a6:48:44:c9:ba:a5:52:
2c:15:ff:b2:26:ab:77:72:6d:bb:96:af:5d:63:5f:
66:c2:92:50:72:cd:99:87:53:e4:b2:ff:d6:db:7c:
8d:35:08:16:f2:aa:b1:ae:2c:13:ed:f8:a8:44:d8:
b3:9e:0b:8c:41:1c:fd:8e:f9:31:b3:55:34:1c:69:
41:40:17:55:14:29:f4:9e:10:13:4c:5f:95:3c:ba:
05:ec:ed:56:b4:d6:d2:5e:9a:5f:bf:83:5a:25:e3:
91:ce:92:4a:2e:75:43:e7:07:bb:a8:7e:4c:79:c4:
32:e4:7f:32:cc:f0:df:01:93:ff:17:f4:6f:f2:3d:
7d:5c:9b:8f:70:bf:71:16:5d:b8:d0:93:f4:c8:a8:
15:4a:69:fb:8e:41:d6:84:6b:ca:73:f9:9a:77:cb:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B8:DB:5B:5B:73:BB:38:B9:96:E7:09:FF:DC:B8:2B:44:DD:EB:B8
X509v3 Authority Key Identifier:
keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f2:60:c7:15:d1:63:b3:f0:23:f3:1b:98:87:a1:03:20:fb:
c0:22:4d:81:64:fe:45:33:d0:d9:af:f1:34:0f:a2:33:63:db:
7b:fd:e9:44:90:51:2b:18:06:67:12:58:fa:9c:57:2c:36:3a:
b8:f3:9b:15:00:7e:c8:1f:8d:46:6e:e6:84:34:73:39:9a:1a:
36:7c:8b:7f:5a:42:0b:9f:be:b2:e2:64:78:a6:8c:b9:f9:84:
0e:a1:08:7b:05:74:53:b9:33:ba:c0:bc:45:be:37:86:6b:73:
28:d6:3a:d6:c8:1d:7a:f1:7f:cf:a4:08:6f:8a:84:60:cf:63:
07:2e:c6:92:14:7a:b9:0f:9a:8e:06:95:e7:d0:fd:f1:ec:2f:
38:b9:56:dd:81:f0:1f:57:56:8a:83:38:d2:4f:ce:45:f2:fc:
73:b1:b3:32:26:01:cb:34:c4:5b:42:a9:ae:eb:c7:47:7e:5d:
53:ad:7e:09:a2:07:fa:e9:47:c4:f9:93:0a:92:9e:c7:86:a1:
22:7c:fb:23:e5:53:85:99:ad:25:ea:b1:eb:c5:2e:60:b5:e7:
01:4d:e4:20:8b:eb:fe:21:d0:e1:ad:83:e2:5f:95:12:a7:13:
9e:34:2c:b6:f5:c2:b6:bf:1d:54:4a:28:0e:eb:6f:27:dd:a3:
b7:70:84:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:53:00 2026 by rpki-client