Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
File: BcgcgJdDfNF58xkYPAKC6mzRylE.mft (raw, json)
Hash identifier: wMzCHDHYQFfwvI734528GMh84YL3A2OAkWCGuirCkqg=
Subject key identifier: 5D:C8:7C:AB:8B:33:97:A0:8E:9B:FB:DC:A9:6B:EB:75:61:98:0B:8A
Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
Certificate issuer: /CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Certificate serial: 019D9A3E1E38BCF922BA3B37CB5F2CDC205F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
Manifest number: 0880
Signing time: Fri 17 Apr 2026 07:00:55 +0000
Manifest this update: Fri 17 Apr 2026 07:00:55 +0000
Manifest next update: Sat 18 Apr 2026 07:00:55 +0000
Files and hashes: 1: BcgcgJdDfNF58xkYPAKC6mzRylE.crl (hash: dJJ7d1G7dUljxsmnFfEV2kglmBQ1ypDCTzVoHR4jB0Q=)
2: U-i1oEyBuqeV6jZfreY9KrH4m50.roa (hash: L5IQFtrjgg9i37LgVDvIKbkJPMhrCXGXXL5UYx1rh/c=)
3: XUDIgk_5z10h164Tz-e9tCKiPaQ.roa (hash: jI1OJJCcnL0UAf8SALv1ORGopOdQFzAzsNBmfQqbk2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:1e:38:bc:f9:22:ba:3b:37:cb:5f:2c:dc:20:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Validity
Not Before: Apr 17 07:00:55 2026 GMT
Not After : Apr 18 07:00:55 2026 GMT
Subject: CN=5dc87cab8b3397a08e9bfbdca96beb7561980b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:85:b6:ff:34:97:35:59:fe:49:86:0e:e6:
c9:64:50:4e:8f:69:d6:bd:08:8d:04:20:4b:5c:47:
8d:cf:5d:29:16:88:33:15:d5:eb:eb:d8:13:16:68:
d8:2b:8e:b5:69:6b:44:ce:80:39:fa:48:3f:d2:84:
34:f4:7e:f1:75:0a:cd:28:16:39:bd:e5:78:67:14:
12:a4:52:52:c6:67:33:59:fb:66:5e:cb:e0:0d:b0:
4a:d8:2e:81:ac:f5:55:ca:ce:95:54:dd:e2:42:d3:
68:04:15:be:73:df:1b:42:60:5d:24:9f:ad:65:92:
ee:32:a1:ce:4c:a6:92:a4:eb:94:fc:9f:8f:14:9c:
61:33:79:89:50:31:44:57:19:c8:31:2b:25:b5:48:
54:4d:4a:21:bf:86:6c:6c:ab:d3:fe:60:88:24:22:
3c:9f:c6:39:1c:da:c6:f9:72:db:d0:8a:f4:74:23:
44:95:7c:8a:fa:04:4e:8f:cf:4c:6b:37:74:62:c3:
0d:fa:c0:e9:b2:fb:12:6a:d7:07:d5:9c:91:38:99:
fe:89:f9:65:17:f3:72:65:ed:05:0c:f7:63:24:d2:
04:32:d6:a4:a4:01:f9:b6:7e:a0:28:42:f8:02:34:
24:f7:70:4e:99:0c:70:20:30:85:89:23:75:61:c2:
6e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C8:7C:AB:8B:33:97:A0:8E:9B:FB:DC:A9:6B:EB:75:61:98:0B:8A
X509v3 Authority Key Identifier:
keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c8:66:43:0e:10:5a:d1:75:a5:c8:05:9d:f2:92:75:50:a5:
2a:cf:85:5f:00:89:ac:53:df:23:95:ba:77:3a:9a:d4:78:87:
6e:8f:97:c1:11:5b:88:8d:ab:f2:5d:a3:a1:ca:aa:2f:14:f9:
52:bd:1e:cb:04:e2:da:99:60:81:37:f0:40:ca:9c:4f:6a:7e:
cd:ef:6f:a4:47:d1:45:cb:b2:a7:38:cc:e6:b2:f2:dc:fa:ec:
41:18:82:50:53:49:97:37:e1:90:1d:a5:e2:b7:de:38:ec:34:
90:b7:20:20:24:1b:74:a8:46:37:f5:71:e0:13:22:37:8c:62:
61:49:7d:6a:69:64:f0:5e:53:ff:2c:62:97:1d:c5:66:54:ae:
a1:4a:e1:d0:63:1b:bf:0c:ea:34:ef:47:ec:1c:36:b9:aa:f1:
07:1f:0a:bf:9f:44:48:87:07:1c:56:d6:2c:e9:bb:2e:3c:3f:
15:67:8c:a5:d6:8a:cc:9e:41:97:c2:bc:da:ac:e5:87:ef:09:
84:c0:24:e6:3e:cc:8e:c3:57:55:65:12:7e:9b:a5:b6:32:99:
ce:2c:95:d6:8e:6c:a3:e5:c2:bd:3f:9d:7a:83:53:98:d6:a5:
23:b1:63:65:77:8c:2e:63:14:a4:9a:da:00:9d:4e:33:01:08:
51:a6:bd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:07:51 2026 by rpki-client