Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
File: Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json)
Hash identifier: lisVvisuY5uLdghWJfqtfDgCY3x/dVS8ooQP56YvFy0=
Subject key identifier: A6:62:17:00:21:F7:02:4E:07:1E:15:11:20:4A:C8:6C:AB:07:0C:FC
Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Certificate serial: 01A0C85871C65FF9450D9A272D9B9BE82CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
Manifest number: 19F9
Signing time: Tue 22 Sep 2026 09:00:34 +0000
Manifest this update: Tue 22 Sep 2026 09:00:34 +0000
Manifest next update: Wed 23 Sep 2026 09:00:34 +0000
Files and hashes: 1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: TAclAba+zeX09ZPlRimB6MXkc1xX+omsditGrmVdE8Q=)
2: PlQCAe4FWjUSCOsaxJlS8rOMgYU.roa (hash: Ds9oHPXZ9drh6bet4k02ulHrCJ7yWBpxx33onOLcAs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:71:c6:5f:f9:45:0d:9a:27:2d:9b:9b:e8:2c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Validity
Not Before: Sep 22 09:00:34 2026 GMT
Not After : Sep 23 09:00:34 2026 GMT
Subject: CN=a662170021f7024e071e1511204ac86cab070cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:71:66:7b:bf:dc:3c:23:ce:74:f4:1f:67:
6f:7e:eb:55:5c:30:bf:ec:e4:52:67:87:c2:c6:6c:
fa:aa:88:60:97:fe:bc:ce:9a:fc:3c:34:44:5b:90:
20:60:c0:3d:78:d8:b3:0e:9c:70:d8:46:a4:99:ad:
fc:0c:89:e9:97:e4:d4:55:45:75:5b:aa:00:da:e6:
cc:ee:90:7c:8d:bd:bd:fc:c2:7a:b8:0c:74:7e:e2:
1f:ac:cb:74:3a:c0:d3:a3:9b:2b:42:29:50:6a:9d:
f2:77:24:6b:55:cb:e0:57:40:db:86:f6:6c:dd:08:
b6:43:26:c2:27:32:92:96:62:0b:c4:93:c3:32:bd:
60:b9:e5:55:84:85:ca:d4:69:70:c5:71:7f:9e:dd:
4b:61:5f:bb:b4:7d:5c:7b:71:c6:23:72:cd:6d:ec:
f5:02:19:6e:df:50:0a:4f:81:0b:7a:b4:e8:21:15:
0b:29:f1:2d:d2:f1:f6:78:14:78:47:23:fd:6e:b8:
9d:9e:6c:da:a6:50:b5:98:0c:fd:e0:37:47:a1:bd:
03:ce:95:c4:27:29:22:e6:04:13:00:bf:5f:f5:1f:
9b:52:88:4b:74:a4:27:fc:8f:73:b2:d4:aa:0a:87:
df:a7:6e:8e:6c:42:9a:63:db:2d:db:9a:57:dc:21:
61:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:62:17:00:21:F7:02:4E:07:1E:15:11:20:4A:C8:6C:AB:07:0C:FC
X509v3 Authority Key Identifier:
keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:04:0a:95:a8:25:91:5a:59:c9:95:f5:eb:a8:3a:9b:ea:d7:
67:c1:08:80:b8:1d:23:90:f3:f2:5a:e8:33:5a:9b:77:d2:be:
2f:b6:dd:8c:f8:d5:f9:3d:56:46:ee:0f:de:68:fa:e3:4c:0c:
3b:37:a4:21:65:5b:3b:c3:d3:30:68:ca:62:a5:7c:f3:ba:46:
97:c6:e5:20:2a:5b:95:82:c7:03:27:c4:37:11:50:7e:87:5c:
1e:17:f4:ac:27:e3:4c:21:46:1d:44:aa:56:fd:9d:63:d4:e1:
49:ff:49:df:09:e4:b7:a9:72:5c:9d:ce:0f:d1:d6:73:e4:99:
46:2c:3b:0d:f5:52:e7:d5:71:0b:67:1e:af:9a:6f:5c:94:aa:
f7:dd:43:cf:48:b3:f7:33:8b:18:ff:23:ab:a1:b1:39:50:54:
6b:35:d2:17:d8:cf:96:52:b4:9c:28:2c:f1:39:42:68:9f:2d:
c6:78:1d:94:01:2c:02:d6:d1:b5:82:2d:d7:09:54:66:82:a9:
b8:9b:40:1a:78:9e:90:33:86:95:c7:18:af:c1:76:09:4d:0d:
e6:20:44:a5:a4:04:7c:cc:22:fb:b9:f2:ca:b0:e5:1b:25:9b:
87:bb:01:65:8f:28:d9:9d:30:b8:67:b2:65:02:22:47:a7:23:
06:2b:6c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:42:59 2026 by rpki-client