Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
File: BcCcQdI4lrLVQoGCYj-I-mdubJA.mft (raw, json)
Hash identifier: 7HW2Z0c7AgOYWrMpdRD+eCd5I/i5jCFCsJjMs8EVsWk=
Subject key identifier: 54:0F:D7:E7:E4:B4:4D:F6:A1:9A:B2:FF:7B:DE:E3:6C:8C:C0:8D:09
Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
Certificate issuer: /CN=05c09c41d23896b2d5428182623f88fa676e6c90
Certificate serial: 01A1AABA6F8B4D3E480444AC26AD4DB2C669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
Manifest number: 1ADC
Signing time: Thu 05 Nov 2026 08:01:47 +0000
Manifest this update: Thu 05 Nov 2026 08:01:47 +0000
Manifest next update: Fri 06 Nov 2026 08:01:47 +0000
Files and hashes: 1: BcCcQdI4lrLVQoGCYj-I-mdubJA.crl (hash: ATz0CQkp4D/Xzun+4FA5SfMf8LV3Sz8WOc1dDwuxVDg=)
2: GSs9YTYcBp0k_rMcJ6lExucgmq8.asa (hash: rU06J2Nsz3IWhCHO+giWwXNVWJAqC/xb5eigysyzeBo=)
3: hSa-jL7A0Cvb7swNmNrYjsj_n70.roa (hash: TUV2Alqz5JkF7MwZ8HViCcGRzdJK6kTlEyLaHmA8NLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:ba:6f:8b:4d:3e:48:04:44:ac:26:ad:4d:b2:c6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90
Validity
Not Before: Nov 5 08:01:47 2026 GMT
Not After : Nov 6 08:01:47 2026 GMT
Subject: CN=540fd7e7e4b44df6a19ab2ff7bdee36c8cc08d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:28:09:57:83:db:66:2e:60:52:34:eb:af:6c:
01:6f:94:cf:6c:7f:0d:09:9e:c0:b7:23:be:ab:46:
d7:a5:f2:47:eb:ca:69:24:5f:f3:9f:92:62:2a:34:
cb:a3:07:c5:04:52:53:c8:00:f5:c1:19:5f:2d:37:
2a:80:ef:e3:3d:2a:36:8c:44:91:f9:d1:65:82:c1:
0e:36:81:b7:18:d6:83:ba:fb:5f:65:36:9b:4f:fb:
f0:14:5b:1a:79:e7:f9:70:5c:9e:59:9b:7a:42:08:
bd:1e:61:80:eb:ef:77:54:40:fa:64:7c:88:98:17:
2f:ca:3a:e0:93:7a:60:f3:1c:1a:6f:f1:8f:b9:a0:
80:e4:cc:7a:10:73:4b:2d:0a:7a:e3:b8:d9:d2:50:
d6:67:63:88:74:39:d3:3d:9e:92:b6:c8:99:51:36:
dd:66:c2:7b:79:18:a7:64:ae:85:ba:da:70:7a:4a:
39:4c:ba:c5:65:c2:97:7d:d9:c5:4d:17:60:7a:50:
cd:7b:73:01:19:4b:5d:46:7d:8d:05:5e:f1:e9:3d:
7f:65:b8:6e:57:9a:6d:ac:44:a4:18:2e:55:6f:28:
b7:62:e2:c7:9b:7a:e5:1a:8a:06:65:d3:d5:46:6d:
5b:78:66:f8:7c:de:31:10:80:40:9b:d2:65:54:63:
aa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0F:D7:E7:E4:B4:4D:F6:A1:9A:B2:FF:7B:DE:E3:6C:8C:C0:8D:09
X509v3 Authority Key Identifier:
keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c3:eb:fd:9f:b0:92:09:de:ad:e6:61:aa:15:38:0b:64:28:
1c:ac:21:41:7b:cf:cc:3c:27:41:2e:16:09:2f:28:2e:45:a3:
a0:1b:ef:60:e4:7b:79:69:f5:53:48:f5:d9:f0:25:2f:18:9f:
91:5c:a7:2f:aa:3c:21:7f:53:62:7f:e9:51:9a:66:b1:a5:5b:
25:c9:8a:6c:39:8c:02:46:6d:4f:0f:a7:43:69:c3:a3:6b:7e:
7d:13:41:be:90:2a:4a:b9:9b:ae:2b:e3:13:4b:52:ea:4d:1d:
e4:b6:e7:0d:59:9c:1f:c5:28:b8:ce:8a:f4:2b:c6:11:59:ab:
5c:c3:64:0a:1e:24:16:76:64:6b:d3:4a:f6:fe:fd:30:f7:3e:
49:d1:88:5b:00:09:65:11:d9:34:11:b7:7d:de:09:0d:19:11:
4d:b4:8c:6c:2f:07:7a:9d:3e:c2:9b:13:ab:3c:6a:ea:19:58:
53:67:60:d1:ed:77:44:de:52:83:e5:98:44:15:a6:e5:61:76:
1f:bd:79:3e:e7:34:2d:a6:75:a7:9e:8a:a1:c7:ff:0b:49:8f:
ce:e9:fa:de:13:9b:36:8d:e4:92:5d:14:dc:5c:1b:61:f8:51:
ac:d5:a7:ac:af:38:34:42:9e:f4:37:ee:8e:7d:5a:1a:10:26:
6d:39:f0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:30:51 2026 by rpki-client