Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File: BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier: rs/lTUQAgRB0iHD1Bjgscg38nEXgA348lhn6+3AXthc=
Subject key identifier: CE:C4:84:C2:38:50:9C:1D:0C:10:B9:EE:AF:2A:92:13:2F:BC:69:5B
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial: 019D9A7543939219B19C12135522B034C595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number: 1802
Signing time: Fri 17 Apr 2026 08:01:09 +0000
Manifest this update: Fri 17 Apr 2026 08:01:09 +0000
Manifest next update: Sat 18 Apr 2026 08:01:09 +0000
Files and hashes: 1: 1HpVkB_jbLhmzmxBwUx9bssht30.roa (hash: zCHbybFcXq0qDlNR99yqu6g+oFdwplvbb6MafSX5AMs=)
2: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: CffNqsKkMRJhm07Kxs0ESs+gTzatCgdkUpKMeB2sacY=)
3: TgYSgtEo4dSznEstSh4wl1Lb_yg.roa (hash: nniijit4FyrPMtz8C+vav/OxG7xVfSAPSwIGynyNP+Q=)
4: XXDxWPYvJwQEEoD1ZkxghR4ET40.roa (hash: kPDCqZ/ABCjh6D3pWOnBRlSEdw9IBPT/5sVK336dTdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:43:93:92:19:b1:9c:12:13:55:22:b0:34:c5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
Validity
Not Before: Apr 17 08:01:09 2026 GMT
Not After : Apr 18 08:01:09 2026 GMT
Subject: CN=cec484c238509c1d0c10b9eeaf2a92132fbc695b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:30:e7:9c:06:d9:71:44:6e:15:7f:fb:61:d1:
c1:7b:ab:d6:3c:da:48:73:c4:70:5e:9d:29:b0:84:
b1:65:e7:b8:61:44:49:f7:67:02:4b:94:69:06:73:
c0:a3:36:e5:4c:02:31:d0:0a:e2:26:33:63:58:1f:
b9:6a:17:26:ea:53:19:27:ba:ed:a9:c5:b8:17:07:
36:40:09:31:4d:29:f3:6a:8e:11:b5:9a:26:0d:c3:
2a:2f:49:ae:6f:f0:b0:88:0b:79:49:dd:e4:fd:85:
f7:d4:59:83:60:4e:f0:f9:a5:85:93:7a:4e:f6:d5:
87:fe:09:d0:f5:af:14:ae:84:ff:8b:ab:7d:0d:37:
89:78:c4:4e:b2:0d:51:e7:07:df:f5:1b:5d:1f:d5:
02:ad:8c:fe:87:56:34:94:c4:ae:59:35:fe:1b:ec:
ba:02:e6:47:2d:8f:31:82:70:3d:1d:12:ad:4a:35:
88:27:28:92:65:9f:0b:4d:f1:2e:06:bf:fb:57:f3:
61:45:50:c8:eb:31:73:c9:ad:7f:98:43:8e:13:3d:
60:7a:fd:c1:94:c5:23:6b:a6:03:05:c5:40:de:91:
99:ce:df:af:22:c4:74:70:5c:5b:af:3e:07:fc:a6:
c4:02:56:c3:d1:f4:7a:ad:80:e6:6e:21:94:a3:9f:
8d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C4:84:C2:38:50:9C:1D:0C:10:B9:EE:AF:2A:92:13:2F:BC:69:5B
X509v3 Authority Key Identifier:
keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a2:6e:84:27:c1:71:a9:32:56:a9:c3:b8:88:fe:6f:9c:be:
87:b2:f5:da:15:3d:9a:8f:a7:d7:3a:c3:ee:06:3b:56:10:fa:
58:74:51:a6:0d:5b:b6:c8:b8:83:39:3c:89:07:4e:0f:a3:cf:
71:ab:e4:04:71:83:96:65:93:90:9d:84:ec:a3:b0:8f:1d:17:
84:f9:68:0d:78:fe:68:bd:6b:10:34:26:92:5b:5f:e4:a9:05:
eb:05:6c:6c:44:58:4d:09:89:c0:e1:b2:d2:c5:93:26:50:fa:
95:2d:a4:2d:d5:e4:f3:f1:75:dd:de:01:95:f6:da:ce:a5:03:
38:5d:a3:d6:7a:e0:3b:8c:52:51:e5:65:6f:9f:37:f7:37:74:
8b:e9:d8:9a:16:fa:05:1d:bb:a0:10:6a:34:40:3a:0b:a8:55:
f6:f7:6e:af:c2:64:1d:44:1d:61:84:e1:7d:b3:33:0d:3e:80:
e1:fd:fc:ef:7c:bd:05:de:a9:36:2d:4b:b2:a1:ba:fd:fa:37:
22:c3:81:f0:93:6a:25:db:5e:f4:57:a9:13:c3:e8:c7:e0:76:
4b:3c:ee:4d:cf:58:fb:34:56:e0:5b:b9:09:3e:d6:6b:b7:30:
9d:cf:4b:86:f2:00:a6:3e:43:ca:be:58:65:77:74:90:7d:f5:
91:92:f7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:21 2026 by rpki-client