
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
File: BGK247pQCQLmPuFOXKyREoMqLCc.mft (raw, json)
Hash identifier: QUns9H9g1XviPLrojF+n8H3/YMaZkIS6UDW3cCrMQjk=
Subject key identifier: E7:B5:C8:1C:A9:0C:3D:B7:B6:8A:2D:29:4E:CF:B9:76:7A:2A:F8:50
Authority key identifier: 04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
Certificate issuer: /CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Certificate serial: 019D258409AAF6A0BA2DF24B7340BF9C6287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
Manifest number: 040B
Signing time: Wed 25 Mar 2026 15:01:43 +0000
Manifest this update: Wed 25 Mar 2026 15:01:43 +0000
Manifest next update: Thu 26 Mar 2026 15:01:43 +0000
Files and hashes: 1: BGK247pQCQLmPuFOXKyREoMqLCc.crl (hash: CdaqWuLEiY5Oq5CATZ1pXezFcjRYa8iaj9recEMrXyE=)
2: XM1JyfkvL8GQlIDWNsypURBRDIQ.roa (hash: E9RkLX7TB/4zizaYko106pLHCoP05WAm/iO/6rgM8Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:09:aa:f6:a0:ba:2d:f2:4b:73:40:bf:9c:62:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Validity
Not Before: Mar 25 15:01:43 2026 GMT
Not After : Mar 26 15:01:43 2026 GMT
Subject: CN=e7b5c81ca90c3db7b68a2d294ecfb9767a2af850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a1:42:ac:17:ad:41:b9:4a:83:e6:cf:6f:e9:
0d:9b:24:54:17:01:81:39:5c:f7:69:66:37:9d:2a:
e2:42:75:c1:89:8e:53:14:ee:f9:64:0b:55:ca:0d:
16:75:02:ad:64:3b:16:d0:9f:50:6f:bb:e6:55:61:
cf:fa:ac:57:57:69:cc:d8:b7:0d:7e:48:cc:1a:98:
7c:66:71:4b:7f:2e:8c:75:0f:9f:a8:07:da:c8:42:
e2:e1:32:7b:44:46:55:55:33:52:28:da:6d:10:a4:
1c:0e:3d:08:a6:f2:cb:d4:e8:f0:14:4f:b5:57:a8:
12:4d:b6:03:ce:f1:78:3b:47:ec:bb:ff:de:4a:4a:
bb:e7:7f:25:4c:90:cb:82:60:c8:38:08:7e:5c:16:
fd:88:26:88:bc:29:2c:78:60:4b:5e:d2:c2:f8:7d:
ff:3b:00:16:14:6b:ba:61:af:95:5c:f0:fe:08:20:
05:7b:57:72:12:80:a9:f2:cb:84:af:2c:42:63:48:
10:e7:f0:2e:88:72:22:b9:92:e1:8b:c1:4f:18:bc:
07:6e:9c:f2:27:e2:30:9b:28:78:de:11:76:d1:43:
24:05:a0:20:ce:b4:98:13:09:96:27:06:11:14:85:
77:d1:14:ba:4c:7c:7c:5c:14:39:33:fc:61:51:12:
7d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B5:C8:1C:A9:0C:3D:B7:B6:8A:2D:29:4E:CF:B9:76:7A:2A:F8:50
X509v3 Authority Key Identifier:
keyid:04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ca:73:39:b8:c5:50:67:eb:01:17:37:36:8c:7d:21:f9:b8:
aa:dc:5f:ee:4e:1d:12:a1:1c:cc:88:20:b2:cb:2b:52:22:58:
2e:28:a3:9d:29:e6:89:ef:ac:3c:e8:0e:c2:92:9e:85:e0:19:
0b:f8:23:94:fb:9e:cf:98:52:da:08:52:4a:f0:be:4f:e2:a2:
90:8c:a4:b8:48:d6:77:25:b1:50:5e:cb:64:85:84:25:e1:e4:
46:b1:34:54:d6:f1:2f:3f:a0:ba:f7:66:1b:7b:ad:d8:5c:cc:
c3:49:04:5d:ac:1c:bd:a7:33:06:45:14:ca:b2:10:df:a0:7e:
e7:7f:1b:2e:87:c9:5b:6f:b6:54:a8:51:1c:51:c8:d1:94:ee:
e2:13:d2:5d:b3:ce:28:39:6d:4f:5e:20:c7:2b:69:f3:56:23:
fb:4e:d2:dd:90:5f:02:57:d6:85:55:b8:ff:73:8a:1e:3d:81:
9e:09:ea:4b:9f:d6:24:fa:8b:9b:45:18:44:a7:27:35:a1:c7:
3a:e8:0f:cb:83:23:83:fb:91:6b:90:de:dc:63:5a:5c:52:01:
a1:cc:30:34:29:8f:c4:14:58:c2:c5:d2:06:46:b9:4b:5c:4b:
aa:ed:b4:43:05:12:c8:ab:57:6a:d4:f0:02:60:07:3b:3b:92:
70:64:e2:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lhAmq9qC6LfJLc0C/nGKHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NjJiNmUzYmE1MDA5MDJlNjNlZTE0ZTVjYWM5MTEyODMy
YTJjMjcwHhcNMjYwMzI1MTUwMTQzWhcNMjYwMzI2MTUwMTQzWjAzMTEwLwYDVQQD
EyhlN2I1YzgxY2E5MGMzZGI3YjY4YTJkMjk0ZWNmYjk3NjdhMmFmODUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aFCrBetQblKg+bPb+kNmyRUFwGB
OVz3aWY3nSriQnXBiY5TFO75ZAtVyg0WdQKtZDsW0J9Qb7vmVWHP+qxXV2nM2LcN
fkjMGph8ZnFLfy6MdQ+fqAfayELi4TJ7REZVVTNSKNptEKQcDj0IpvLL1OjwFE+1
V6gSTbYDzvF4O0fsu//eSkq7538lTJDLgmDIOAh+XBb9iCaIvCkseGBLXtLC+H3/
OwAWFGu6Ya+VXPD+CCAFe1dyEoCp8suEryxCY0gQ5/AuiHIiuZLhi8FPGLwHbpzy
J+Iwmyh43hF20UMkBaAgzrSYEwmWJwYRFIV30RS6THx8XBQ5M/xhURJ9vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOe1yBypDD23tootKU7PuXZ6KvhQMB8GA1UdIwQY
MBaAFARituO6UAkC5j7hTlyskRKDKiwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lZTFiMDEtNTFhZC00YTAyLWIyNzgt
NjQxNmNkMzc3YjQ4LzEvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9lZTFiMDEtNTFhZC00YTAyLWIyNzgtNjQxNmNkMzc3YjQ4
LzEvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8pzObjF
UGfrARc3Nox9Ifm4qtxf7k4dEqEczIggsssrUiJYLiijnSnmie+sPOgOwpKeheAZ
C/gjlPuez5hS2ghSSvC+T+KikIykuEjWdyWxUF7LZIWEJeHkRrE0VNbxLz+guvdm
G3ut2FzMw0kEXawcvaczBkUUyrIQ36B+538bLofJW2+2VKhRHFHI0ZTu4hPSXbPO
KDltT14gxytp81Yj+07S3ZBfAlfWhVW4/3OKHj2BngnqS5/WJPqLm0UYRKcnNaHH
OugPy4Mjg/uRa5De3GNaXFIBocwwNCmPxBRYwsXSBka5S1xLqu20QwUSyKtXatTw
AmAHOzuScGTipA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:19 2026 by rpki-client