Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File: BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier: zyqt3WdduM+RJd3pOFrhnag2Z6b2lM1wzflI6sPl06Y=
Subject key identifier: 6D:37:D0:E2:5F:72:C0:A1:9E:C2:5A:97:E2:5D:4A:F4:51:12:A2:D3
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial: 019CACEB5B3225932D67CBE91F8FE4E9E7EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number: 1787
Signing time: Mon 02 Mar 2026 05:00:31 +0000
Manifest this update: Mon 02 Mar 2026 05:00:31 +0000
Manifest next update: Tue 03 Mar 2026 05:00:31 +0000
Files and hashes: 1: 1HpVkB_jbLhmzmxBwUx9bssht30.roa (hash: zCHbybFcXq0qDlNR99yqu6g+oFdwplvbb6MafSX5AMs=)
2: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: QNV91XDxmQMC2Ei6DLPKDu4d7oRVCxTAHkia+FPCYjE=)
3: TgYSgtEo4dSznEstSh4wl1Lb_yg.roa (hash: nniijit4FyrPMtz8C+vav/OxG7xVfSAPSwIGynyNP+Q=)
4: XXDxWPYvJwQEEoD1ZkxghR4ET40.roa (hash: kPDCqZ/ABCjh6D3pWOnBRlSEdw9IBPT/5sVK336dTdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:5b:32:25:93:2d:67:cb:e9:1f:8f:e4:e9:e7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
Validity
Not Before: Mar 2 05:00:31 2026 GMT
Not After : Mar 3 05:00:31 2026 GMT
Subject: CN=6d37d0e25f72c0a19ec25a97e25d4af45112a2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:d5:c0:a1:36:ed:fc:01:44:65:92:82:2e:
5a:79:d0:a7:67:f6:5c:c5:34:6c:d5:c2:d7:0b:27:
59:9c:93:92:b4:2c:f9:70:32:19:e5:23:c8:7e:5c:
5b:21:98:1b:90:5e:9c:6c:99:bd:32:07:b9:fe:94:
9c:1a:9b:58:0a:ff:f2:3f:de:dc:66:c4:9e:70:f3:
90:aa:21:09:7a:58:c1:dd:92:8a:70:9a:3b:99:be:
0a:05:39:69:e5:06:39:f3:d0:7e:a3:f5:e3:bc:70:
05:5f:4f:da:7f:8b:ea:cd:54:19:b9:d8:e7:9c:d6:
08:0c:e9:23:09:c9:13:99:4c:37:c4:48:e0:94:2a:
c3:be:55:e7:1d:59:46:f6:28:01:ed:9d:3b:c8:01:
10:62:d0:77:76:8f:62:d6:e6:35:d3:7f:61:0f:21:
93:93:9e:ca:e4:af:64:d6:f6:f6:fe:72:66:93:2f:
27:1f:4f:50:e4:67:3d:ae:00:db:a5:53:76:1c:0b:
26:91:b3:36:5a:d8:57:27:7c:21:70:fa:4f:97:c5:
d6:3a:6c:e3:66:23:88:51:7c:15:2e:35:56:6a:ce:
2e:7c:b5:2f:00:42:8c:69:00:4f:3c:0a:aa:94:9b:
3c:31:fd:32:ea:14:38:a9:10:3d:46:2e:01:13:a5:
f9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:37:D0:E2:5F:72:C0:A1:9E:C2:5A:97:E2:5D:4A:F4:51:12:A2:D3
X509v3 Authority Key Identifier:
keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:59:6b:68:74:11:64:d6:64:45:5e:5e:ac:90:1b:b0:08:46:
62:59:46:56:8d:41:23:3c:fb:c5:89:45:45:f0:2b:53:69:78:
56:ae:0f:0c:35:7c:e6:9a:07:13:a7:c3:c3:a0:d3:8f:2d:0b:
27:39:ad:8a:2f:1e:97:b0:29:97:73:8d:12:01:73:8a:96:f6:
0b:2f:0f:be:73:5a:47:eb:ee:00:88:d1:c3:09:a2:df:e7:e8:
55:79:f8:e1:6f:9f:9d:1d:64:03:b1:5e:e9:67:eb:b7:44:53:
0a:9d:60:ee:84:0d:3f:e2:ec:d3:79:b7:a0:06:26:dd:88:db:
53:56:70:a5:ff:06:81:e4:c3:12:6d:dc:25:f4:3e:27:eb:a8:
7f:e6:a6:89:c8:86:c9:eb:ba:1f:f5:2b:c9:78:ef:8a:3a:8a:
cd:dd:af:fb:0b:49:af:6a:f1:20:f4:99:d8:ee:a6:ca:e3:b2:
2b:2a:5c:0f:27:5e:93:60:e3:03:4b:f0:56:b2:e6:28:f9:b9:
65:27:ab:3a:24:cf:46:54:45:c8:e0:83:b5:5c:a9:8e:3a:57:
62:2f:2e:5e:35:26:39:a2:c0:90:2e:91:e0:23:ec:e0:25:2d:
d9:1c:fd:49:2e:1a:cd:3e:d8:11:e4:6f:99:e4:73:09:b2:2a:
6c:71:d6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:36 2026 by rpki-client