Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
File: BGelYhGyHprHzcj7Y58xCpLCEEw.mft (raw, json)
Hash identifier: d5WwNXttYRUVnx9DYlrowfMEJ/c6o83TWEMVZTieDBU=
Subject key identifier: 38:5A:DC:EF:10:93:2D:C3:05:9D:6B:CC:2F:1C:7E:AD:4D:0B:24:7E
Authority key identifier: 04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
Certificate issuer: /CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Certificate serial: 019F8F4717E2D71A826D6B507CE78D05B51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
Manifest number: 10A7
Signing time: Thu 23 Jul 2026 14:00:28 +0000
Manifest this update: Thu 23 Jul 2026 14:00:28 +0000
Manifest next update: Fri 24 Jul 2026 14:00:28 +0000
Files and hashes: 1: 1-WmJXUzndEvurHNC9z-EdX-GqLg.roa (hash: k4/qUPEWtP0yhAjTXryxItYMnfRgWY9Qd/ypPo+vPZA=)
2: BGelYhGyHprHzcj7Y58xCpLCEEw.crl (hash: XB9LZ+nOjQlw6sRfz5duenE68YX6rZOz0OLYHJ+IPtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:17:e2:d7:1a:82:6d:6b:50:7c:e7:8d:05:b5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Validity
Not Before: Jul 23 14:00:28 2026 GMT
Not After : Jul 24 14:00:28 2026 GMT
Subject: CN=385adcef10932dc3059d6bcc2f1c7ead4d0b247e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:64:90:2a:9c:14:02:02:56:61:1b:87:b9:
13:37:bc:63:17:bb:d2:52:45:9b:38:01:62:82:71:
ef:8f:8f:86:07:3f:c6:ab:fa:30:4b:95:00:86:1d:
2a:60:3f:e0:c4:fa:98:f2:87:c3:00:47:82:66:90:
3e:f4:63:ca:74:e9:6d:e3:2e:73:da:44:2f:41:79:
e3:37:09:96:af:07:90:d4:94:44:12:56:36:9f:6e:
db:fc:b9:7c:0a:e7:c0:a3:ac:0e:a7:a7:bd:29:15:
1d:b8:e8:dd:96:58:17:c4:32:4a:79:75:cb:62:ca:
61:c7:28:fe:0e:65:18:e0:88:c5:6f:7a:c5:82:6e:
24:e5:dc:b4:d0:d4:49:57:22:b2:df:93:a9:4a:27:
54:3a:88:50:6a:1a:b4:50:27:77:d2:28:01:a6:7d:
4a:7e:43:2e:1a:5b:ce:e1:61:68:8f:58:09:f5:84:
ee:bd:f6:e8:8c:92:ef:72:8b:ef:3b:bf:1d:4e:45:
6d:a1:29:27:ab:a0:34:08:a0:ce:45:55:1e:b9:f6:
bd:a2:94:de:fb:19:10:41:bb:9f:84:28:ee:c2:5b:
7e:36:f1:48:b1:79:63:03:68:9e:8b:11:cf:6f:3d:
0f:6d:d7:7b:ea:c3:14:dd:ae:a2:9e:98:07:12:ce:
de:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5A:DC:EF:10:93:2D:C3:05:9D:6B:CC:2F:1C:7E:AD:4D:0B:24:7E
X509v3 Authority Key Identifier:
keyid:04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a3:77:c9:76:73:0f:7a:e0:79:38:2e:3b:75:3a:b0:46:95:
e7:b4:cf:72:df:b4:71:c0:e8:d3:be:79:bc:0a:2e:a9:a4:cd:
b3:33:d3:6d:14:3c:fb:7c:a7:88:6c:a6:6f:2e:0c:3a:57:b6:
37:0b:a2:65:4e:6d:e9:d2:86:3e:1c:b3:8f:87:67:f4:1d:44:
51:58:78:55:3f:dc:9f:f4:ad:1e:59:92:10:b5:15:2c:a8:5b:
fa:19:3e:02:c4:5a:5d:df:4b:41:29:77:e9:74:6a:9c:32:a0:
4c:0f:e4:f7:f6:98:2e:6e:c9:bf:6d:dc:5b:07:cf:eb:38:dc:
3d:a7:89:22:62:bd:87:60:62:78:63:db:62:39:a9:00:29:55:
d7:fe:91:cb:ff:6d:1d:38:28:e1:df:ee:43:4a:13:43:a2:b7:
c1:8c:89:5e:34:d1:de:9c:8d:ff:a0:0c:58:97:a0:be:d4:c5:
7b:5f:42:50:8b:7c:31:9b:52:9a:81:fd:92:37:d0:1d:51:6e:
30:0e:e9:63:17:49:7f:9a:a2:3b:76:6c:6e:5e:8b:1b:5f:59:
2f:57:46:de:5d:79:11:2f:27:0d:e6:6e:e3:f2:ba:a6:56:61:
fd:e9:53:bf:3b:d0:17:05:35:54:04:88:ad:bb:97:78:ee:97:
2e:d6:79:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:04 2026 by rpki-client