Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
File: bcXjzvXaXn_fw2TF1aBALTpnhtw.mft (raw, json)
Hash identifier: C6JcPHcHtzn043ESSiI7HtWKrCRg5x78i/VuKS7KYYw=
Subject key identifier: B0:AE:8B:F6:8E:1E:C7:7A:11:25:61:74:38:AE:7B:40:FF:B5:0C:80
Authority key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
Certificate issuer: /CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Certificate serial: 019D98F4C769B781DA791A0A4EC03C95CD7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
Manifest number: 115C
Signing time: Fri 17 Apr 2026 01:01:11 +0000
Manifest this update: Fri 17 Apr 2026 01:01:11 +0000
Manifest next update: Sat 18 Apr 2026 01:01:11 +0000
Files and hashes: 1: KTh_wFZKz8V5Fp_N5BMzfuwBa2E.roa (hash: Y4+66kr490+tAfYv+Li1KCX6wSQ4d0GvtrjYF/+CHtM=)
2: bcXjzvXaXn_fw2TF1aBALTpnhtw.crl (hash: 6i5A6dxdWxuDng0Ewhvna0cs/mIDe0G8E2ZsY5GhiSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:c7:69:b7:81:da:79:1a:0a:4e:c0:3c:95:cd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Validity
Not Before: Apr 17 01:01:11 2026 GMT
Not After : Apr 18 01:01:11 2026 GMT
Subject: CN=b0ae8bf68e1ec77a1125617438ae7b40ffb50c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8d:01:b4:3f:f6:45:5c:e0:f6:b4:7a:17:20:
02:bc:0a:b6:29:fa:dd:f1:9d:a1:eb:ce:4f:84:8a:
b4:93:d9:d7:6e:a5:c8:8d:af:5f:fa:03:50:eb:52:
bc:70:55:31:6d:96:78:45:e1:cd:10:84:64:ae:41:
dd:de:65:a6:ce:47:2f:c1:59:40:45:66:63:9e:58:
f7:cc:fb:e1:28:61:11:f9:92:09:8c:9b:fd:5e:28:
eb:f8:a2:99:52:46:70:25:94:56:dd:3b:1b:ec:b5:
76:74:e6:d5:8d:5e:09:75:29:89:e5:51:4c:60:a2:
5d:c4:dd:9e:6e:31:88:7d:9d:dc:d8:a9:4c:1a:8c:
95:52:bb:ca:fc:93:e8:59:13:b7:f3:ea:a7:44:31:
8f:7c:9d:b0:f9:44:f8:d3:85:77:61:b6:12:1f:b8:
59:34:f4:2a:3d:17:25:8e:ec:c8:95:a5:f1:be:c5:
20:27:fb:d9:43:8a:75:b0:50:19:86:21:c0:c9:71:
27:13:33:1f:40:ce:0b:60:7f:26:51:22:38:4c:dd:
21:d1:39:30:74:0f:b6:5e:02:3b:51:a4:58:05:5b:
0c:96:bb:46:29:5f:23:a7:75:bb:ba:ed:1e:44:59:
c5:36:93:17:ac:cb:a2:20:4f:22:04:8d:2e:9e:ac:
2b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AE:8B:F6:8E:1E:C7:7A:11:25:61:74:38:AE:7B:40:FF:B5:0C:80
X509v3 Authority Key Identifier:
keyid:6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:19:63:59:d2:9b:46:ae:1b:39:d6:46:57:ca:5d:79:cf:00:
25:ad:17:8d:fc:0a:32:e4:6e:25:b0:91:4a:95:68:d2:94:09:
7c:a2:cb:4d:06:68:91:bb:84:d6:a8:34:74:05:f2:2c:a3:0c:
7e:3b:83:5d:80:aa:9a:ad:23:36:f8:5c:cf:ed:f5:3e:57:d1:
39:22:3c:a0:a4:5f:e1:ad:1f:e5:ba:97:17:c0:28:a9:d7:6f:
5f:ff:8e:bb:6d:08:4d:3f:4d:23:b4:61:46:2a:c2:3f:a6:91:
12:55:21:4d:39:b8:5c:a1:8d:a8:49:6c:e9:e4:1a:44:70:35:
06:e0:f7:30:aa:6c:89:90:13:f7:29:b0:ff:e5:ee:47:87:35:
db:e0:f5:17:5c:4f:81:f2:85:b8:dd:1a:96:73:70:33:8b:e4:
e0:b8:d8:24:d9:1b:30:39:6d:3f:91:4a:50:18:2d:15:68:c1:
5c:20:8e:cf:56:1e:90:95:01:73:cf:a4:2d:0c:c2:d1:52:36:
89:22:e6:61:af:01:39:33:97:1f:bc:4e:1a:fd:17:6b:9b:3f:
33:e7:b4:95:8f:3e:da:78:33:9a:36:d2:cc:71:c7:40:16:79:
03:1e:fb:7e:66:21:fd:89:53:7b:9c:13:97:8d:e5:aa:c0:95:
95:52:61:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:14 2026 by rpki-client