
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
File: BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft (raw, json)
Hash identifier: VAcpl0RcpIVJh8nmKjyIiPigI9nDjlr0B3pUf7fT5D0=
Subject key identifier: D4:8B:34:37:DF:29:E0:1D:44:13:40:50:E9:3D:6E:EC:AC:59:01:8C
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Certificate issuer: /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial: 019CACB49FB0A6EF59A8B572670C8F14F7CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
Manifest number: 072A
Signing time: Mon 02 Mar 2026 04:00:44 +0000
Manifest this update: Mon 02 Mar 2026 04:00:44 +0000
Manifest next update: Tue 03 Mar 2026 04:00:44 +0000
Files and hashes: 1: 00o4xaDHpiFteTUPLMlUN7rQVoI.roa (hash: ZRGfAq/Hq7q+igfCUvDc/UpA7zCnyl+OWfUsaj7F95E=)
2: BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl (hash: KbI8mbfJnN4LDAoyrL02dHSJEO7oURdFrUez0TWoHuw=)
3: MvKa56Lh9HW9SL8NyMjhRYtv0qg.roa (hash: 3xT11vaLSNBdap8Lh9ldE026pM17b0YhoNdmRaGGcdM=)
4: WrMgI56WRjshSRrApL-slkKjgA4.roa (hash: 0BKk8cC15fl8RJL/MOhUkeA23XV4PJie7eRKpkT7taU=)
5: etH8r7e8XASDtw0AKt0yqnoZqpw.roa (hash: Ew9vIIGcLcL1KV1t2cyyHQVGMjP/TKGuie7BO0Z4Iyo=)
6: smKaRyBksPR8VVMeNllW4CrXk_U.roa (hash: dXCbu0CsSAQ16fQlnuw0mfD9ky7E36GElPP7CmVSu8Y=)
7: wh_A1Ywd9PlQ177YVaXtq3eGCuQ.roa (hash: 53+0yVnHLQ77916U1STNg9D9Toz5NayIfx2I9V3mCKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:9f:b0:a6:ef:59:a8:b5:72:67:0c:8f:14:f7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Validity
Not Before: Mar 2 04:00:44 2026 GMT
Not After : Mar 3 04:00:44 2026 GMT
Subject: CN=d48b3437df29e01d44134050e93d6eecac59018c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cb:93:2c:88:2e:df:67:44:61:1b:cf:7c:e0:
f4:23:51:eb:a0:de:34:61:d1:1d:4f:83:7f:95:11:
46:e7:5a:90:5d:3f:c6:fe:8e:4b:2b:50:0b:fa:ed:
4d:03:1a:d2:04:f4:16:46:f9:27:ac:b4:a8:da:bb:
e7:e3:92:e4:76:0d:96:f0:8a:e7:4b:e8:55:af:0e:
61:97:dd:4f:16:85:3d:53:13:7d:21:52:39:a4:89:
0a:d8:24:50:38:90:dd:94:2b:b1:af:69:fb:7d:da:
99:9f:fd:08:4f:0f:25:32:a4:ba:d4:01:0f:76:09:
b3:3f:58:e9:f0:04:a6:89:35:a5:b0:95:b3:0d:c6:
fc:25:e2:43:5a:41:c4:e3:b3:40:34:4b:65:9c:4a:
18:80:e9:37:45:fd:b5:22:50:b6:f9:ef:b3:56:cf:
38:98:dd:94:16:ca:7f:0e:ff:54:56:ba:e7:22:09:
d2:e5:c4:dc:29:e5:b1:1c:9e:d4:24:a5:35:62:58:
84:9c:a4:f9:94:16:d7:ac:ed:e1:48:18:21:6e:e1:
e0:7b:88:99:ae:2f:1b:40:5e:88:db:fc:0a:a9:0d:
df:0d:6c:01:66:cf:1e:8b:e4:97:18:19:2b:d9:8b:
3b:d3:f3:c3:74:64:6c:49:5c:c5:ca:d6:98:01:84:
1d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8B:34:37:DF:29:E0:1D:44:13:40:50:E9:3D:6E:EC:AC:59:01:8C
X509v3 Authority Key Identifier:
keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0f:fd:83:c9:04:55:e3:fe:d5:5c:94:af:41:14:5e:74:87:
5a:68:59:3e:87:1b:ef:68:a5:e8:c1:c6:44:6f:63:67:8b:c2:
d0:2e:da:cf:56:53:98:d9:d0:c8:b2:d0:e6:66:05:83:3d:45:
b6:e0:33:b1:a0:a2:06:93:53:07:ba:80:8c:15:8f:e7:b7:57:
87:d6:85:b5:17:93:2a:bc:f4:5c:6b:73:a0:f4:d5:74:a7:70:
6f:aa:fc:a9:d7:b6:62:35:75:63:d8:42:d9:4e:fb:22:d0:3c:
63:87:3c:4f:d8:f0:f4:78:fe:60:2c:69:a6:7d:6b:64:40:f9:
0a:22:7a:80:1c:92:53:ad:ca:3e:bc:79:3d:86:4b:07:f2:dd:
29:5e:b7:fa:eb:cb:12:0f:df:67:25:49:6d:d9:65:c4:e2:a7:
0c:42:65:02:97:18:c8:df:3c:f7:46:6e:27:10:b5:ad:30:83:
0c:6f:7c:71:08:72:9d:e6:02:8f:e4:b8:36:0e:26:f8:58:77:
fc:77:bd:04:9a:e5:58:80:8f:99:8d:b0:22:e6:f9:0e:d7:e0:
26:00:6c:03:49:be:3e:23:12:c3:2d:0f:3e:d3:7d:bf:97:ef:
08:a5:84:12:ca:93:73:4b:5b:89:0b:03:ea:2d:a7:5d:da:b6:
9a:26:3b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:26 2026 by rpki-client