
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
File: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft (raw, json)
Hash identifier: pRLnTKDgdOZkiRPq5CD1dfGIHMPhXOzEH6mHUAmvMt0=
Subject key identifier: DC:60:BA:8D:3A:26:1F:7D:9D:8E:0C:32:16:8E:5B:DD:AD:B1:DB:B4
Authority key identifier: 06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
Certificate issuer: /CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Certificate serial: 01A0C9D91C40DBBC42A47E978FB6DD9043C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
Manifest number: 0F30
Signing time: Tue 22 Sep 2026 16:00:43 +0000
Manifest this update: Tue 22 Sep 2026 16:00:43 +0000
Manifest next update: Wed 23 Sep 2026 16:00:43 +0000
Files and hashes: 1: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl (hash: VQFFECIsq2btUqdMM9pzMNjk5miUyfXnubR/KXNJkrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:1c:40:db:bc:42:a4:7e:97:8f:b6:dd:90:43:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Validity
Not Before: Sep 22 16:00:43 2026 GMT
Not After : Sep 23 16:00:43 2026 GMT
Subject: CN=dc60ba8d3a261f7d9d8e0c32168e5bddadb1dbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:76:3e:ec:83:7b:61:47:d5:ac:f8:c2:27:
82:e7:08:28:59:3e:23:71:c1:ea:fd:1f:06:2d:73:
4f:f9:48:fc:0a:8e:31:4b:3d:83:d6:75:bf:db:74:
0f:5a:6f:d6:86:da:62:6f:7c:0a:cf:a8:ca:a6:f3:
59:0b:9b:56:92:30:65:f8:13:c5:06:90:32:69:b4:
40:11:cf:2a:51:5c:52:6e:5a:63:0c:b0:cb:13:bb:
2a:e6:7f:e3:4a:81:df:c8:62:2f:62:71:7f:ae:d9:
c9:d2:24:b9:b9:e0:d1:4d:46:cb:ce:8e:11:32:40:
ee:e4:27:14:2d:66:06:9c:b7:d7:33:eb:26:d5:ea:
6d:f2:25:f6:aa:b9:41:8e:b9:07:da:0e:72:84:55:
52:bb:01:b0:6c:54:4e:eb:80:e8:b5:8f:e9:a5:0b:
c5:31:da:35:62:9a:6f:2c:ac:c4:fb:c5:bf:ad:e2:
44:8d:ae:a3:35:cb:67:14:f6:b1:5d:72:ca:9e:6e:
db:22:9d:7d:56:7e:db:ab:bf:47:b3:c6:88:56:1a:
cf:bb:39:f1:09:9c:44:87:56:9f:31:b5:b0:2f:c4:
29:9c:9d:82:36:05:2e:ea:50:8f:0f:eb:74:83:83:
f8:5f:d9:51:48:41:3b:fd:d3:74:14:29:0c:10:18:
8f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:60:BA:8D:3A:26:1F:7D:9D:8E:0C:32:16:8E:5B:DD:AD:B1:DB:B4
X509v3 Authority Key Identifier:
keyid:06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e9:fb:4f:67:d3:27:f5:b3:05:68:5e:20:84:3b:30:42:e5:
db:27:a4:c4:40:ab:00:61:fe:64:a3:29:4d:1f:fe:e9:08:01:
f4:ab:55:30:93:9d:32:ee:fa:9e:60:a2:e6:db:94:32:64:40:
8b:ba:3b:bf:db:b8:e3:39:81:c5:fd:43:ea:86:95:8e:31:f8:
d9:ef:8a:73:c6:96:05:28:f6:b9:18:92:6e:1b:9b:90:27:3a:
07:a1:61:0f:12:50:58:9a:e5:47:ed:43:ad:e8:f7:1b:db:8b:
e3:3b:6e:28:3e:9e:fe:fc:d9:90:78:22:ba:70:f6:cb:12:23:
15:29:85:cd:10:dc:bd:08:26:af:79:f5:94:5a:4c:b2:f8:b7:
8e:01:7b:a2:e2:4a:20:5a:a1:e8:49:92:86:ee:aa:30:31:1d:
70:26:41:cc:dd:3e:f5:0f:4f:40:80:bb:65:a9:71:66:cb:66:
c0:1d:77:7d:e4:3d:0d:8f:25:bd:03:6b:0c:b4:9e:ce:5c:8f:
56:58:1a:b0:80:66:65:01:38:8f:8c:dc:1b:3f:b4:6e:76:af:
0c:10:37:42:c9:fb:80:0c:5d:be:f6:b5:67:27:00:2b:87:bb:
01:a0:82:2b:63:e3:ee:96:ff:74:18:8e:6b:b1:0f:b5:da:80:
10:c0:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:57:54 2026 by rpki-client