Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
File: BGyntgTsCPb1Sw50iQZUfdN1Z00.mft (raw, json)
Hash identifier: zBDOlBtOS2EVE0EW5Wz0buLdAA9EkH/fWpo6j4MFuyo=
Subject key identifier: 4E:5D:3A:7B:62:A4:1A:26:47:69:84:DF:FB:5A:DE:68:84:5F:85:2F
Authority key identifier: 04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
Certificate issuer: /CN=046ca7b604ec08f6f54b0e748906547dd375674d
Certificate serial: 019D265FAA561F123978CA15FD01B375FD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
Manifest number: 1549
Signing time: Wed 25 Mar 2026 19:01:36 +0000
Manifest this update: Wed 25 Mar 2026 19:01:36 +0000
Manifest next update: Thu 26 Mar 2026 19:01:36 +0000
Files and hashes: 1: BGyntgTsCPb1Sw50iQZUfdN1Z00.crl (hash: PvOwoLEWCjFYyyF4bE9mnbi7PU7DGd4AsORUUUhAwwQ=)
2: MLeNfxLl71ZiEa-4ROMfKWY0HfE.roa (hash: Z2UBW5tUmk27eN0YD99HvRO7Fm7FnWica0sXE52jO9U=)
3: PtAGcm7_KHWDCz9aca-_lnbGDdw.roa (hash: kog+FbgStFH4bPMvqHeDVOD0owoRZw+UqxHeqF/7hj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:aa:56:1f:12:39:78:ca:15:fd:01:b3:75:fd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046ca7b604ec08f6f54b0e748906547dd375674d
Validity
Not Before: Mar 25 19:01:36 2026 GMT
Not After : Mar 26 19:01:36 2026 GMT
Subject: CN=4e5d3a7b62a41a26476984dffb5ade68845f852f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:49:2b:26:98:82:d7:97:22:de:4c:a2:d1:87:
84:b5:0b:de:7b:5c:b1:62:76:58:e8:e5:b3:0a:1c:
ef:31:41:35:07:cd:76:42:3a:e5:e6:63:8e:ae:14:
13:47:34:21:11:f2:49:e8:58:0b:18:a8:4c:b9:a9:
9d:36:1d:12:b2:1e:58:ee:69:d7:9b:2c:1d:53:65:
4c:7c:07:8a:93:e1:cc:68:ea:93:24:09:9b:bf:de:
b1:0f:fa:61:e5:e8:d5:15:8a:44:c2:15:93:06:7d:
57:65:9d:e7:53:31:7f:3f:2d:9a:61:d9:83:96:70:
8b:53:8b:af:1d:86:c0:ea:d8:2a:88:eb:03:45:78:
d3:b1:13:b5:ea:6d:c0:22:73:19:f9:2c:00:18:98:
25:29:51:fb:c5:1d:c2:3b:aa:b2:af:d2:b7:19:7c:
04:47:5e:3b:e8:54:20:26:27:d0:8c:bb:76:89:12:
05:a4:d9:98:a1:45:e7:d1:09:3f:1f:81:4a:58:3d:
0c:ce:7b:a4:94:57:85:8f:77:a2:e4:56:1f:d1:c2:
40:85:3c:ef:56:52:6f:3c:52:00:88:6f:07:87:99:
12:1d:31:9a:e2:1a:b4:83:7d:cb:13:15:cd:6e:81:
4a:1e:df:c9:9f:3e:78:81:a1:f7:6c:d2:15:16:c4:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5D:3A:7B:62:A4:1A:26:47:69:84:DF:FB:5A:DE:68:84:5F:85:2F
X509v3 Authority Key Identifier:
keyid:04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9c:94:49:3f:3d:c1:cf:fe:11:2e:0e:0d:7b:08:eb:f0:46:
22:c0:6f:29:f4:5a:bd:f5:53:5e:c8:1e:d2:9f:2a:e7:cd:93:
c7:df:f0:35:70:93:9a:e0:11:f8:a8:a4:45:13:d5:77:4d:82:
dd:c6:b6:6e:d8:8b:2b:4f:ae:90:9b:77:72:a9:fa:4e:3c:30:
94:6c:7a:82:7c:9d:36:12:d7:a1:72:25:21:ac:fe:f9:6b:92:
4e:c4:19:55:b6:3d:be:a7:53:dc:38:39:96:dd:4e:b4:5f:d9:
20:d7:9e:ea:44:63:0d:0d:69:14:83:73:0f:5e:f9:42:e2:d8:
96:4f:e8:44:67:8c:9d:01:53:2b:85:4c:49:c6:fa:37:1a:4b:
b3:79:ab:3c:e0:a0:1b:4c:50:c3:fe:2e:c4:50:db:ee:be:27:
1f:67:9f:68:fc:67:3a:1b:da:40:1d:c1:05:37:2c:02:2f:1e:
62:b0:6c:92:b9:58:0a:a9:49:42:94:8d:16:3a:ab:97:b8:90:
72:10:65:9b:12:a9:f5:4f:69:e7:90:fe:59:11:46:12:bb:c5:
9f:81:c2:d0:c1:49:98:90:c5:48:97:38:ec:45:c9:52:e0:c8:
29:00:bb:30:9e:55:e4:c0:77:8c:2d:27:bc:b9:07:2f:14:ac:
2d:23:79:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX6pWHxI5eMoV/QGzdf0YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NmNhN2I2MDRlYzA4ZjZmNTRiMGU3NDg5MDY1NDdkZDM3
NTY3NGQwHhcNMjYwMzI1MTkwMTM2WhcNMjYwMzI2MTkwMTM2WjAzMTEwLwYDVQQD
Eyg0ZTVkM2E3YjYyYTQxYTI2NDc2OTg0ZGZmYjVhZGU2ODg0NWY4NTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEkrJpiC15ci3kyi0YeEtQvee1yx
YnZY6OWzChzvMUE1B812Qjrl5mOOrhQTRzQhEfJJ6FgLGKhMuamdNh0Ssh5Y7mnX
mywdU2VMfAeKk+HMaOqTJAmbv96xD/ph5ejVFYpEwhWTBn1XZZ3nUzF/Py2aYdmD
lnCLU4uvHYbA6tgqiOsDRXjTsRO16m3AInMZ+SwAGJglKVH7xR3CO6qyr9K3GXwE
R1476FQgJifQjLt2iRIFpNmYoUXn0Qk/H4FKWD0MznuklFeFj3ei5FYf0cJAhTzv
VlJvPFIAiG8Hh5kSHTGa4hq0g33LExXNboFKHt/Jnz54gaH3bNIVFsStiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5dOntipBomR2mE3/ta3miEX4UvMB8GA1UdIwQY
MBaAFARsp7YE7Aj29UsOdIkGVH3TdWdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkd5bnRnVHNDUGIxU3c1MGlRWlVmZE4xWjAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOTJlYTUtOWNhOC00YjBmLTkzODgt
MDkzOTYxZDM4Yzg2LzEvQkd5bnRnVHNDUGIxU3c1MGlRWlVmZE4xWjAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zOTJlYTUtOWNhOC00YjBmLTkzODgtMDkzOTYxZDM4Yzg2
LzEvQkd5bnRnVHNDUGIxU3c1MGlRWlVmZE4xWjAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5yUST89
wc/+ES4ODXsI6/BGIsBvKfRavfVTXsge0p8q582Tx9/wNXCTmuAR+KikRRPVd02C
3ca2btiLK0+ukJt3cqn6TjwwlGx6gnydNhLXoXIlIaz++WuSTsQZVbY9vqdT3Dg5
lt1OtF/ZINee6kRjDQ1pFINzD175QuLYlk/oRGeMnQFTK4VMScb6NxpLs3mrPOCg
G0xQw/4uxFDb7r4nH2efaPxnOhvaQB3BBTcsAi8eYrBskrlYCqlJQpSNFjqrl7iQ
chBlmxKp9U9p55D+WRFGErvFn4HC0MFJmJDFSJc47EXJUuDIKQC7MJ5V5MB3jC0n
vLkHLxSsLSN5ug==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:13:19 2026 by rpki-client