Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
File: BcgcgJdDfNF58xkYPAKC6mzRylE.mft (raw, json)
Hash identifier: f9ZPf5Y+KeAPF0UDPBKXukZMD0VJUHRCK6McJwyzVsU=
Subject key identifier: C4:B9:5C:EE:63:41:98:A0:1D:7D:08:0C:20:97:6F:34:34:97:08:E2
Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
Certificate issuer: /CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Certificate serial: 019EC1B6890B2383D78DC259F0FD8D3198EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
Manifest number: 0919
Signing time: Sat 13 Jun 2026 16:00:25 +0000
Manifest this update: Sat 13 Jun 2026 16:00:25 +0000
Manifest next update: Sun 14 Jun 2026 16:00:25 +0000
Files and hashes: 1: BcgcgJdDfNF58xkYPAKC6mzRylE.crl (hash: I81ADCgbKabZflE+7yWeChgqiYBBWgBZgHjvzyO/kbA=)
2: U-i1oEyBuqeV6jZfreY9KrH4m50.roa (hash: L5IQFtrjgg9i37LgVDvIKbkJPMhrCXGXXL5UYx1rh/c=)
3: XUDIgk_5z10h164Tz-e9tCKiPaQ.roa (hash: jI1OJJCcnL0UAf8SALv1ORGopOdQFzAzsNBmfQqbk2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:89:0b:23:83:d7:8d:c2:59:f0:fd:8d:31:98:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Validity
Not Before: Jun 13 16:00:25 2026 GMT
Not After : Jun 14 16:00:25 2026 GMT
Subject: CN=c4b95cee634198a01d7d080c20976f34349708e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:f0:ea:0e:61:8b:fa:ca:5d:9c:2d:86:2e:
90:12:95:82:79:18:c3:65:5b:cc:b1:45:a3:4a:5b:
d5:d5:bc:e0:5c:ef:14:34:73:09:7c:e9:2c:83:2c:
fe:a4:f3:7d:35:e5:4c:54:e5:2f:78:a6:28:d6:4f:
52:f4:43:84:e5:fc:16:a4:59:b1:93:d3:c7:28:e6:
4a:80:10:1e:8c:c7:7d:27:8b:20:0b:fb:57:1b:e0:
b9:e3:56:f9:57:a2:b6:7e:b2:14:bc:cf:31:6b:e8:
de:f8:e3:58:52:74:11:2f:05:54:41:ad:f0:94:93:
c8:24:67:24:64:67:ff:b1:2d:4b:fe:75:a4:d1:54:
d0:d2:ca:b1:d5:bc:5f:79:f8:28:26:39:56:b2:ce:
bb:60:3c:fd:cf:55:a0:05:ac:d4:03:ee:f6:93:2b:
8e:fe:43:b5:e1:cf:2b:0a:e9:7c:89:0c:3f:e7:98:
35:05:97:55:6c:1e:a4:d0:20:fe:63:ad:35:8d:a1:
28:60:97:58:0f:94:0e:29:83:72:b7:ef:49:c0:66:
bf:f5:f5:e5:3a:8c:63:1c:d7:81:cd:35:21:30:7d:
60:05:4b:d9:f5:48:03:d9:1a:b8:40:c9:22:2d:89:
be:51:b6:05:0f:e6:f0:30:67:f8:86:27:cf:ea:54:
8c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B9:5C:EE:63:41:98:A0:1D:7D:08:0C:20:97:6F:34:34:97:08:E2
X509v3 Authority Key Identifier:
keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:50:01:0c:af:c6:33:0e:c1:62:f7:ec:88:0a:20:76:91:97:
4c:e5:08:13:13:22:f1:e7:d4:3e:d1:55:8b:7e:86:f9:3b:78:
c3:45:c8:89:c7:50:47:05:ee:2f:5f:3e:e3:e3:6c:7c:d1:e9:
f5:41:af:66:c5:f9:0c:59:27:88:30:c6:4f:54:c6:f6:d5:0b:
26:38:dd:94:93:e9:a9:e3:b9:ae:e5:6b:c3:96:4d:5c:cd:4f:
1d:31:d7:fd:d8:6c:7d:47:05:02:63:39:cc:4c:66:94:0f:c1:
b1:41:d7:22:b7:51:57:cb:35:66:62:c4:fd:04:eb:c5:03:08:
3f:f3:52:08:65:84:17:8c:fc:43:d5:71:f8:d6:a3:d7:a1:8c:
27:ca:16:0a:cd:63:c4:30:6b:72:64:00:c0:cc:08:57:84:b3:
11:78:e9:78:b8:53:fb:9a:fd:1c:72:8f:60:ab:4a:5d:95:fa:
5a:e2:f1:7d:1f:ab:df:cb:84:da:19:ff:e5:63:0d:d2:6e:1c:
7d:5f:bf:82:9d:81:5e:8f:dd:90:0f:46:62:85:31:ff:13:66:
16:df:f7:c4:11:f2:3c:1e:da:36:e7:88:cd:9b:ea:31:db:1e:
ab:86:6e:1c:7f:8e:1d:79:2c:32:71:38:59:c7:ba:de:a6:6d:
1b:29:bd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:25:22 2026 by rpki-client