Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
File: BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft (raw, json)
Hash identifier: l2CQMa9h62FwnMAc+KiuX4Nu+hM03fsiuTr9dWe8E90=
Subject key identifier: 2D:86:34:47:C3:05:BB:F8:2C:1F:63:7D:ED:8A:9E:D8:88:19:A3:7B
Authority key identifier: 04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
Certificate issuer: /CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Certificate serial: 01A0CB223617C3E2D89EC8E1437796AD8228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
Manifest number: 0D3A
Signing time: Tue 22 Sep 2026 22:00:11 +0000
Manifest this update: Tue 22 Sep 2026 22:00:11 +0000
Manifest next update: Wed 23 Sep 2026 22:00:11 +0000
Files and hashes: 1: BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl (hash: 8LnhD2F/jIz+GrlYcRp10pQ0MlWLWsEiDhYqqZIGqX8=)
2: v9xxAs53z8-Lo-M8MAasS_fTI5w.roa (hash: W5P7f8MNnL6/RnaFt8r/SNRF065+Vy7YUi1ouIgirhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:36:17:c3:e2:d8:9e:c8:e1:43:77:96:ad:82:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Validity
Not Before: Sep 22 22:00:11 2026 GMT
Not After : Sep 23 22:00:11 2026 GMT
Subject: CN=2d863447c305bbf82c1f637ded8a9ed88819a37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:8c:01:ab:c6:80:55:b9:e9:e9:9d:4c:c1:
3e:85:9d:44:bb:55:f0:5f:ad:73:70:40:08:a4:4b:
e4:92:5d:13:2b:ab:ee:09:99:31:70:92:1f:4f:0b:
f8:c9:bf:9b:bc:d9:4f:3b:f6:66:71:08:43:34:5b:
cd:2f:f6:b1:79:14:3b:7d:fc:82:7a:04:b4:b6:d0:
d7:ca:af:a1:e7:ac:b5:40:79:f7:8b:02:ef:6e:39:
45:59:eb:82:8c:6f:7e:18:0b:63:75:ca:ae:b3:e9:
af:e5:a1:d3:32:ca:3a:32:14:4b:8a:8f:27:ba:92:
e5:a8:ff:d7:77:aa:b9:20:90:4a:b0:16:40:d8:ca:
93:e7:a1:83:a9:01:ac:46:bc:50:1b:63:7b:2c:45:
62:7c:ff:15:f9:59:b2:93:43:2d:a4:aa:c5:59:ba:
c1:e1:4b:51:02:53:d7:7c:f5:bf:a1:db:b7:10:11:
89:f2:d8:b9:6e:c2:19:d2:62:6e:45:a6:8e:47:da:
9b:6a:86:c5:bf:b0:91:c7:f3:03:08:7f:7d:7d:44:
f8:b3:09:f1:71:31:da:a1:e7:a0:4c:62:86:34:14:
8e:4c:78:da:65:c5:41:48:45:f4:cf:e6:95:08:77:
d4:23:4e:34:47:17:be:a8:94:d6:98:59:f5:da:fc:
f2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:86:34:47:C3:05:BB:F8:2C:1F:63:7D:ED:8A:9E:D8:88:19:A3:7B
X509v3 Authority Key Identifier:
keyid:04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c5:fc:60:d7:48:90:ea:2c:d7:f4:d1:b2:e3:45:f8:c4:32:
78:09:ff:ca:e2:83:e9:72:1a:ad:bc:3a:98:52:34:db:6b:e7:
12:6b:0f:58:f4:b3:5d:45:7e:4e:d0:39:11:e1:17:5e:a5:a1:
8e:ae:68:fe:f8:77:ef:91:54:c4:cd:76:98:a9:8e:27:e1:d3:
3e:85:91:d8:0d:a4:61:66:75:0c:a9:0c:48:97:35:6f:05:4f:
dd:4c:31:aa:46:7a:a1:ea:75:36:2e:18:b4:1b:b4:43:11:3a:
3b:fd:4c:bd:86:21:38:4b:62:0e:43:27:45:7f:e4:a0:4a:9e:
e4:f9:13:49:9b:ad:3c:03:a3:29:53:81:c0:a0:3b:f7:7d:22:
5e:27:98:cb:33:a8:d9:46:c8:6b:33:94:aa:31:b7:dd:a6:97:
ce:eb:50:c4:4e:c0:1f:13:73:ed:82:9c:79:0c:fb:c6:3b:1a:
70:29:ab:96:97:dd:3d:c8:2d:af:b5:2a:23:99:10:d7:fa:3d:
a6:b2:1e:a1:09:f7:b9:c4:2a:8b:02:9d:64:09:34:28:ac:41:
88:d7:7c:43:92:4b:7b:ec:f9:fa:a3:94:7d:82:a9:d8:d0:2b:
be:ce:0c:7a:42:5a:24:fd:ae:40:c1:0f:4e:f7:cf:d8:f9:07:
e4:b0:d2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:39:12 2026 by rpki-client