Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
File: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft (raw, json)
Hash identifier: IMUggXGv8MWmdIWN1RyPDRXsg/moPaKsSlPJVmEdrIE=
Subject key identifier: 15:40:FD:B7:79:AA:29:F2:3E:FF:94:D2:D9:41:3F:97:ED:72:8A:47
Authority key identifier: 06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
Certificate issuer: /CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Certificate serial: 019D270465BDEE6869AF50ECEBCD53767F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
Manifest number: 0D4E
Signing time: Wed 25 Mar 2026 22:01:32 +0000
Manifest this update: Wed 25 Mar 2026 22:01:32 +0000
Manifest next update: Thu 26 Mar 2026 22:01:32 +0000
Files and hashes: 1: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl (hash: QnbN+8+IB9HhUTq9oks0Pn3lObBoWMZPBstvt+/c4+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:65:bd:ee:68:69:af:50:ec:eb:cd:53:76:7f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Validity
Not Before: Mar 25 22:01:32 2026 GMT
Not After : Mar 26 22:01:32 2026 GMT
Subject: CN=1540fdb779aa29f23eff94d2d9413f97ed728a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:72:48:11:b1:0f:04:c0:db:af:35:d5:18:e0:
4a:b6:29:82:5c:f7:f4:13:e2:d5:80:19:6d:11:f5:
e9:6e:78:a1:94:37:d0:34:36:41:c9:f0:57:88:de:
75:51:67:6e:cb:a1:33:e5:80:56:7f:40:e2:9a:75:
d5:c1:51:34:d3:55:59:2b:c9:6b:1c:56:18:6d:f5:
2c:5f:fe:5d:1e:1b:95:97:85:b0:48:4d:fe:05:5c:
1b:25:b3:f5:55:3e:d5:09:e5:fe:e6:b0:35:83:c1:
0f:6e:42:86:f7:5f:e6:23:e1:44:e3:a1:19:2d:ff:
e9:8c:10:06:a0:49:13:92:3f:c8:8e:73:04:0f:96:
61:96:2f:db:91:c1:39:94:75:b1:63:12:f8:b4:20:
98:b4:fd:71:b5:3f:0d:c6:7b:b6:eb:75:cb:e7:66:
57:e5:40:71:51:07:87:5c:52:3f:5a:3b:b3:10:19:
ff:12:b5:20:91:8b:8c:00:03:a8:fd:5d:f3:93:13:
10:c6:6b:5c:6e:a8:11:fa:40:68:80:92:65:a0:2c:
ae:dd:29:84:eb:4a:90:08:b5:47:f8:75:6a:de:3d:
78:56:21:5f:a1:97:b7:88:97:d5:67:40:76:0f:48:
63:d5:44:7f:fd:17:31:75:b9:a6:87:f1:44:d6:99:
df:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:40:FD:B7:79:AA:29:F2:3E:FF:94:D2:D9:41:3F:97:ED:72:8A:47
X509v3 Authority Key Identifier:
keyid:06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bb:01:f2:68:76:99:03:01:02:94:ff:b7:02:d5:08:18:b3:
7f:5c:d2:8c:1e:49:91:30:c8:5d:ed:d0:c9:cb:c2:f2:16:e6:
5c:8f:50:96:b4:72:19:8b:89:89:94:a1:c0:59:68:00:39:56:
5f:5a:18:b7:27:b5:c4:50:03:97:0f:b9:50:b3:62:20:29:19:
73:d3:6d:d7:f7:2f:52:ec:c8:5a:e3:8c:07:8d:86:25:7c:ec:
e1:cb:65:5b:d6:83:54:7c:0f:56:1b:c1:d5:0c:83:7f:bd:92:
3e:9b:bb:f1:8b:eb:85:0e:85:99:c5:83:1b:97:d0:1a:61:d6:
87:b5:03:3a:25:fe:ed:f1:ae:e6:0e:06:1b:6a:2d:57:94:fb:
18:14:44:ec:3b:c4:be:dd:ef:c3:f0:7f:01:8f:0a:40:6f:a2:
23:1c:9d:11:bf:8d:2c:da:08:e6:f1:c8:5f:98:31:4c:06:ae:
8b:5e:80:32:2e:c0:30:24:67:19:f9:da:33:11:9d:74:48:95:
d1:67:3c:21:10:9e:d0:97:ea:e4:f9:75:6c:08:6c:aa:cb:a4:
28:51:8b:00:da:73:d7:05:ee:95:32:50:82:0e:f6:9f:b9:52:
ea:a2:33:43:ce:ea:2a:28:c5:2d:ca:e6:ab:be:5a:d2:3d:6f:
a5:a7:e2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:22 2026 by rpki-client