Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
File: BGWHkB8TB5vtiYL2KendFUaM_vE.mft (raw, json)
Hash identifier: GUtD6PNY9+4FJK1BuQxYgVhXsthOsVUl86v8z92yUfY=
Subject key identifier: 9B:57:12:FC:D1:77:5B:97:B5:1F:20:5B:77:A3:01:AD:C8:EA:12:0B
Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
Certificate issuer: /CN=046587901f13079bed8982f629e9dd15468cfef1
Certificate serial: 019D284E50B48193FA020F1E3CF795166758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
Manifest number: 127D
Signing time: Thu 26 Mar 2026 04:01:54 +0000
Manifest this update: Thu 26 Mar 2026 04:01:54 +0000
Manifest next update: Fri 27 Mar 2026 04:01:54 +0000
Files and hashes: 1: BGWHkB8TB5vtiYL2KendFUaM_vE.crl (hash: KTf/Bl5g7X//rVWN5MBduIozYzvK4YQHrL8cg0LkSVU=)
2: fTPoxCe4jGfBgPBLkUKcm_JbirE.roa (hash: 02Sw+k6mgA2rz0rcR6vWe/Ze2n73fjDgyV/8LWMOJoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:50:b4:81:93:fa:02:0f:1e:3c:f7:95:16:67:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1
Validity
Not Before: Mar 26 04:01:54 2026 GMT
Not After : Mar 27 04:01:54 2026 GMT
Subject: CN=9b5712fcd1775b97b51f205b77a301adc8ea120b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:de:16:64:61:22:10:00:89:cf:d5:31:fb:
96:27:c9:f9:75:1a:bf:a0:d2:46:85:a2:e5:09:e8:
88:92:a4:c6:43:09:c2:3b:6b:50:b1:9c:d2:5c:2c:
20:91:3c:4b:e9:6b:06:2e:35:26:68:ae:55:0a:43:
34:cd:1a:f9:ea:79:cd:2a:dd:4e:9f:ea:81:99:74:
7d:df:9b:17:de:61:7d:f3:f8:01:d5:4e:ee:c4:5a:
2e:0f:62:8f:5a:79:6e:7a:d8:44:23:ef:a6:0f:97:
bd:fd:2e:ce:e0:6f:63:21:03:07:13:15:3b:43:1e:
d1:f9:a2:63:6e:5d:91:99:51:6c:c7:33:0e:6a:e1:
4a:ed:f0:cf:06:d3:3b:ce:fe:ce:1e:78:73:b3:50:
2f:3a:48:da:0e:0f:2b:48:fc:68:53:37:c4:f2:24:
b1:97:a0:50:df:fe:c9:49:ba:22:09:5d:a9:b2:2b:
5d:5b:9a:52:ce:4a:6c:e5:68:36:53:62:f8:a4:d9:
a6:e2:4c:8b:6f:59:90:64:8f:b0:f6:0a:fe:00:ec:
7f:b3:8e:db:01:53:22:95:93:39:8c:50:86:dd:b5:
59:a2:00:88:9d:84:a4:66:a1:70:d7:ea:44:e9:1c:
18:9a:bf:d8:36:be:c1:00:89:72:ad:9c:0b:44:39:
10:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:57:12:FC:D1:77:5B:97:B5:1F:20:5B:77:A3:01:AD:C8:EA:12:0B
X509v3 Authority Key Identifier:
keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fb:d6:84:16:f9:44:ea:6b:bd:2b:f3:52:dc:ea:e1:5e:5b:
ce:fb:85:99:5b:da:78:12:7e:79:bd:ab:0b:27:98:b9:78:46:
b9:14:db:29:5f:31:36:56:3b:e5:e1:85:a8:36:2c:2d:65:d2:
c1:53:1c:6e:0b:ec:00:45:95:8c:3d:3c:76:8c:fa:2e:f2:ed:
95:b1:c5:fa:9a:b0:63:03:6d:a7:a1:97:38:19:14:bd:85:42:
b9:77:54:12:f2:69:c9:d1:d5:c5:47:68:dc:fc:9c:fb:ec:56:
0c:e3:97:d0:a0:4d:64:b0:cc:55:0d:a8:50:60:2f:32:ff:45:
ec:cf:cf:19:f7:56:85:9a:17:26:c1:0c:82:53:b4:88:80:03:
2b:d6:37:14:76:b3:0d:66:77:1d:49:93:31:20:4d:ed:11:96:
60:de:c9:20:92:28:28:24:47:c5:c6:70:ca:e7:e1:72:c0:6a:
e4:ff:35:6d:c9:6d:37:a4:69:39:df:7a:4b:63:42:84:fb:3f:
b3:9b:a6:29:49:25:f7:fe:48:0c:32:76:68:64:59:70:ca:3f:
73:4c:06:c4:c3:5a:b4:32:08:60:3a:99:24:e4:99:2a:78:ba:
8e:12:51:b7:4d:35:1a:3f:29:25:a1:8d:76:40:88:8a:4f:9d:
b0:e9:45:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:17:58 2026 by rpki-client