Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
File: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft (raw, json)
Hash identifier: U2LR0OtZZ37TGf9nMRANpIy8FSHtmhfJNhf7lZTg5T0=
Subject key identifier: 24:5D:F3:14:0C:CD:94:CB:8D:D9:5D:89:A9:C2:A5:6C:66:B7:80:4B
Authority key identifier: 06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
Certificate issuer: /CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Certificate serial: 019E1E35B64210146762D9F313B14A51B4B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
Manifest number: 0DCE
Signing time: Tue 12 May 2026 22:01:36 +0000
Manifest this update: Tue 12 May 2026 22:01:36 +0000
Manifest next update: Wed 13 May 2026 22:01:36 +0000
Files and hashes: 1: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl (hash: BQDO3nrOr8mm+cRA1dYSFUo8k4oHl5m4Dlno23cb25U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:b6:42:10:14:67:62:d9:f3:13:b1:4a:51:b4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Validity
Not Before: May 12 22:01:36 2026 GMT
Not After : May 13 22:01:36 2026 GMT
Subject: CN=245df3140ccd94cb8dd95d89a9c2a56c66b7804b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9f:10:ee:44:69:25:59:16:62:44:ea:4f:e0:
c9:b7:3d:d2:97:65:11:91:f2:97:b5:ad:67:f5:ef:
9b:96:12:43:f2:c8:cb:a9:e9:00:91:b8:6d:37:ab:
89:44:a8:b2:aa:f3:19:25:80:83:1d:1e:b8:2a:9c:
bc:b8:74:ce:48:8b:3e:ab:df:49:4a:3a:1f:c0:6c:
75:be:bc:f7:04:d6:37:fd:66:9b:c7:ad:2d:9e:c6:
26:e3:97:2a:ab:c0:d7:63:4f:a3:3d:52:e8:58:ac:
65:71:01:57:4e:c9:e1:43:8f:66:f9:6b:ba:72:5b:
2c:f6:29:ee:25:2b:f1:9f:81:60:c9:00:e5:a3:cd:
3c:ff:ba:55:6f:3c:41:c5:a5:64:99:a0:0f:b8:47:
aa:04:5e:4f:d2:49:4e:a7:0c:d4:6b:7f:09:73:5a:
3d:53:d3:d7:96:d0:60:b7:4e:29:a8:8a:3b:a4:f5:
89:c0:cf:f3:a0:7c:4b:32:e0:22:1f:af:f2:dd:3d:
35:aa:ca:cc:ca:06:65:51:93:ec:0e:ff:a6:46:a7:
b5:a2:b4:a4:f0:bf:bf:b2:d7:e2:03:0e:f5:67:86:
8a:5b:72:61:3d:8f:98:10:6b:ee:dd:ef:37:00:49:
8a:b8:69:70:6d:14:03:4a:3b:42:6b:a4:f8:38:6c:
51:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5D:F3:14:0C:CD:94:CB:8D:D9:5D:89:A9:C2:A5:6C:66:B7:80:4B
X509v3 Authority Key Identifier:
keyid:06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:b1:61:e5:c6:02:de:ee:12:70:46:3c:15:ee:00:27:b2:45:
ba:23:ec:47:49:dc:45:79:f2:45:8d:23:d9:bd:be:bb:f8:19:
d0:90:04:ab:96:90:b3:a0:0d:64:bc:09:9b:38:5e:39:ea:ea:
8e:c5:eb:88:7b:0f:53:86:27:7b:03:50:15:24:1b:9c:60:19:
1b:a8:20:ca:ed:2b:ac:93:83:3f:6d:a1:6f:7f:1a:c4:75:b9:
cf:cc:68:37:a8:29:b3:c3:c9:f4:be:40:76:c5:10:d7:a8:69:
e8:f5:5c:9c:c8:63:8f:e2:1c:e2:46:e5:56:a6:4d:ba:a0:64:
39:3d:8d:60:18:f0:ad:b5:89:fa:68:41:c1:0f:fb:1a:30:16:
20:57:74:fe:01:9b:7c:f0:9b:f3:50:c7:ef:69:33:99:c5:fe:
a9:db:8e:3c:24:88:9a:89:ae:38:fd:ac:aa:0f:4f:b9:fc:45:
91:62:3d:9a:0c:a8:ad:7a:72:a9:e0:28:a5:58:e5:b3:6e:bc:
ba:bc:21:6c:e1:fc:1d:c9:76:2d:34:7f:9b:47:1c:53:08:0b:
2b:3c:75:98:79:83:77:44:9b:9d:a5:e4:6a:ac:75:04:37:59:
0a:70:76:92:42:3e:da:4b:d1:7a:98:a3:03:e9:32:9e:c4:e2:
d2:f4:17:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNbZCEBRnYtnzE7FKUbS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDE4ZTdiNTJiZDMyNjhhYTRkNWQzYWE1NzdmNDdkMGYx
ODc1MDQwHhcNMjYwNTEyMjIwMTM2WhcNMjYwNTEzMjIwMTM2WjAzMTEwLwYDVQQD
EygyNDVkZjMxNDBjY2Q5NGNiOGRkOTVkODlhOWMyYTU2YzY2Yjc4MDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ8Q7kRpJVkWYkTqT+DJtz3Sl2UR
kfKXta1n9e+blhJD8sjLqekAkbhtN6uJRKiyqvMZJYCDHR64Kpy8uHTOSIs+q99J
SjofwGx1vrz3BNY3/Wabx60tnsYm45cqq8DXY0+jPVLoWKxlcQFXTsnhQ49m+Wu6
clss9inuJSvxn4FgyQDlo808/7pVbzxBxaVkmaAPuEeqBF5P0klOpwzUa38Jc1o9
U9PXltBgt04pqIo7pPWJwM/zoHxLMuAiH6/y3T01qsrMygZlUZPsDv+mRqe1orSk
8L+/stfiAw71Z4aKW3JhPY+YEGvu3e83AEmKuGlwbRQDSjtCa6T4OGxRGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRd8xQMzZTLjdldianCpWxmt4BLMB8GA1UdIwQY
MBaAFAYBjntSvTJoqk1dOqV39H0PGHUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdHT2UxSzlNbWlxVFYwNnBYZjBmUThZZFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZGM5YjAtNzE4NS00YjE4LTg1N2Qt
MWQ5ZmU4YWExMmFiLzEvQmdHT2UxSzlNbWlxVFYwNnBYZjBmUThZZFFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9mZGM5YjAtNzE4NS00YjE4LTg1N2QtMWQ5ZmU4YWExMmFi
LzEvQmdHT2UxSzlNbWlxVFYwNnBYZjBmUThZZFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0bFh5cYC
3u4ScEY8Fe4AJ7JFuiPsR0ncRXnyRY0j2b2+u/gZ0JAEq5aQs6ANZLwJmzheOerq
jsXriHsPU4YnewNQFSQbnGAZG6ggyu0rrJODP22hb38axHW5z8xoN6gps8PJ9L5A
dsUQ16hp6PVcnMhjj+Ic4kblVqZNuqBkOT2NYBjwrbWJ+mhBwQ/7GjAWIFd0/gGb
fPCb81DH72kzmcX+qduOPCSImomuOP2sqg9PufxFkWI9mgyorXpyqeAopVjls268
urwhbOH8Hcl2LTR/m0ccUwgLKzx1mHmDd0SbnaXkaqx1BDdZCnB2kkI+2kvRepij
A+kynsTi0vQXfA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:29:42 2026 by rpki-client