Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
File: BcgcgJdDfNF58xkYPAKC6mzRylE.mft (raw, json)
Hash identifier: X3tZtgxjSjOznrxOHq4isZSFcWWkKytnaUtTevIpVqQ=
Subject key identifier: 6A:84:AA:C5:BE:52:E3:8D:92:DF:33:6C:49:CA:4D:BE:50:29:6C:A6
Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
Certificate issuer: /CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Certificate serial: 019CACB4BA23D031626308AF1E9415E9EA8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
Manifest number: 0805
Signing time: Mon 02 Mar 2026 04:00:51 +0000
Manifest this update: Mon 02 Mar 2026 04:00:51 +0000
Manifest next update: Tue 03 Mar 2026 04:00:51 +0000
Files and hashes: 1: BcgcgJdDfNF58xkYPAKC6mzRylE.crl (hash: yRZQry34OOFWbMDs+pS8nlX0W5Y8JB47uR0nkb6HEGM=)
2: U-i1oEyBuqeV6jZfreY9KrH4m50.roa (hash: L5IQFtrjgg9i37LgVDvIKbkJPMhrCXGXXL5UYx1rh/c=)
3: XUDIgk_5z10h164Tz-e9tCKiPaQ.roa (hash: jI1OJJCcnL0UAf8SALv1ORGopOdQFzAzsNBmfQqbk2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:ba:23:d0:31:62:63:08:af:1e:94:15:e9:ea:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Validity
Not Before: Mar 2 04:00:51 2026 GMT
Not After : Mar 3 04:00:51 2026 GMT
Subject: CN=6a84aac5be52e38d92df336c49ca4dbe50296ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:11:0e:1c:6e:fa:27:a2:6c:a2:19:6c:d3:00:
d9:d0:50:7c:69:1a:a2:33:26:46:a4:42:d8:71:e7:
ac:a0:4f:ff:85:88:ee:0e:a8:5f:63:f2:69:09:76:
74:d8:6f:7e:42:67:db:9b:84:ca:cf:29:74:16:b0:
64:57:85:33:e6:62:5c:1c:5b:3a:87:a0:16:5a:ae:
62:8b:74:1a:2c:9c:94:14:03:a3:9f:52:fa:02:61:
89:74:94:24:53:20:3e:54:2f:87:1e:4b:93:0c:fd:
b5:b1:37:c3:76:27:f6:e5:f1:0e:d1:c6:2d:15:d2:
59:73:8c:f6:26:c1:93:ce:2d:76:3b:77:8b:f6:0c:
e8:ab:c0:60:83:d6:8f:9a:7c:b3:73:97:c6:df:60:
b2:40:c1:ef:fc:38:21:97:61:0e:95:37:c8:72:97:
24:ad:b7:fa:8d:1b:72:21:2f:8f:d9:a2:11:78:92:
87:f2:7f:54:41:5b:3a:88:22:4e:ff:6f:01:29:ad:
71:84:74:19:14:da:59:93:9a:03:5c:db:79:cf:cb:
2c:b5:40:11:ed:32:88:da:7b:19:fc:89:c1:59:80:
6d:aa:2f:6f:65:31:d3:ed:50:54:95:42:d4:9b:ab:
7b:78:7a:b5:55:bf:63:5f:59:2b:db:16:4c:10:8c:
5e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:84:AA:C5:BE:52:E3:8D:92:DF:33:6C:49:CA:4D:BE:50:29:6C:A6
X509v3 Authority Key Identifier:
keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ba:e0:f8:5d:ec:32:0f:a4:2c:d3:b2:a6:9a:da:f1:7e:c2:
6d:b1:aa:f0:f7:e8:79:cf:64:b6:3f:8d:7a:50:af:4f:14:3d:
68:5b:0c:5e:b2:35:43:9f:6c:ed:6d:68:1e:42:21:e4:1e:bc:
d4:ba:92:ab:f1:d2:db:10:9e:71:7a:4f:84:af:24:96:2b:8d:
f0:3a:ff:6e:97:0b:36:03:9a:b9:d9:46:98:c7:35:fd:46:cf:
c0:3f:db:55:8c:19:c1:24:01:ec:b4:97:73:84:12:7c:53:bd:
4f:12:43:28:42:a7:4f:26:ab:ea:2d:82:c9:89:07:08:63:05:
06:c6:ea:88:e4:29:22:53:4d:e2:de:f1:1f:1b:cd:ef:56:b8:
de:47:50:7a:b0:78:de:81:3b:80:e3:0b:08:fe:08:c2:4b:ec:
5e:64:6d:b9:cb:43:85:55:03:53:c5:c8:b7:2f:b2:90:c4:dd:
d3:7b:76:79:a4:1e:93:0b:3a:80:dd:6f:3d:ad:e7:45:49:34:
59:03:a4:e7:31:25:03:b2:1b:d5:0f:93:7f:c2:20:7f:0e:16:
6f:6f:98:8b:82:39:fd:af:b0:63:c7:bc:a7:e7:82:bf:f9:29:
ce:06:9e:ec:ee:74:a0:7f:89:68:4e:e4:23:84:d5:48:f8:47:
e4:85:68:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:15:35 2026 by rpki-client