Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
File: BGelYhGyHprHzcj7Y58xCpLCEEw.mft (raw, json)
Hash identifier: mIGvfnZno4Y8I98/eMhG1vESLLitIW7UfGFtCSQhWis=
Subject key identifier: 8A:C3:6F:A7:B3:19:3B:D1:3B:80:76:AE:A6:02:73:4B:21:E7:9D:9E
Authority key identifier: 04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
Certificate issuer: /CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Certificate serial: 01A10211DC8E687C230B8898D7E175DB851C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
Manifest number: 1167
Signing time: Sat 03 Oct 2026 14:01:27 +0000
Manifest this update: Sat 03 Oct 2026 14:01:27 +0000
Manifest next update: Sun 04 Oct 2026 14:01:27 +0000
Files and hashes: 1: 1-WmJXUzndEvurHNC9z-EdX-GqLg.roa (hash: k4/qUPEWtP0yhAjTXryxItYMnfRgWY9Qd/ypPo+vPZA=)
2: BGelYhGyHprHzcj7Y58xCpLCEEw.crl (hash: YuztwwPgyvsyVyFpjHSozpe0tQnR8oOzEPb8UlrvrEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:11:dc:8e:68:7c:23:0b:88:98:d7:e1:75:db:85:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Validity
Not Before: Oct 3 14:01:27 2026 GMT
Not After : Oct 4 14:01:27 2026 GMT
Subject: CN=8ac36fa7b3193bd13b8076aea602734b21e79d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:dd:1e:4b:55:44:59:83:88:ee:76:b1:30:
dd:d1:38:7e:ed:48:73:0b:3b:7f:fa:70:6b:cf:fc:
a2:07:04:00:0b:f2:a0:43:31:2b:d6:30:b9:d4:50:
c4:b4:1f:dc:c6:39:78:11:86:10:02:cc:7b:50:64:
bb:8b:d5:3b:9a:4d:c0:1b:23:fe:84:aa:b8:03:10:
6b:04:11:08:7a:f1:da:8b:ff:fe:9e:f0:0d:d7:09:
2a:60:31:19:9c:19:03:e1:af:ab:6e:50:06:2b:e4:
bb:82:f0:a5:eb:a6:59:40:ff:97:48:b3:1a:96:2c:
44:16:6e:f5:2d:e6:61:5b:e0:8e:ce:35:67:a3:58:
16:58:a9:c4:a9:da:80:c0:62:f0:58:b4:92:ee:82:
29:d0:bb:84:79:85:85:bd:3e:1d:ac:67:ac:33:ee:
53:4e:d8:49:be:eb:8c:de:03:0d:14:4f:13:c6:5b:
45:5e:11:2f:58:78:34:3d:dc:b4:c7:47:33:40:4b:
b6:bb:11:9a:26:dd:14:23:aa:37:86:8a:f9:19:6e:
7f:9c:3c:0d:be:ff:e9:c9:20:99:1f:7d:f7:42:93:
da:16:cf:d9:1a:b3:da:89:71:52:9c:92:38:9e:2d:
7a:4d:bd:7e:b5:cb:cf:d0:22:0c:5c:f1:62:31:74:
93:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C3:6F:A7:B3:19:3B:D1:3B:80:76:AE:A6:02:73:4B:21:E7:9D:9E
X509v3 Authority Key Identifier:
keyid:04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:71:5f:77:df:10:5f:cc:0f:70:d5:c8:94:b2:1d:71:f8:c1:
8c:d0:3a:72:35:85:2f:9b:2a:c1:17:21:af:de:83:e3:de:2f:
e6:e5:43:e5:d8:f0:2b:c7:42:91:9e:ba:ab:1f:05:68:9c:d4:
f1:60:23:d9:35:a9:b6:23:15:69:12:e3:41:69:4a:f8:4f:85:
25:96:dd:ed:7a:a4:08:39:0d:eb:88:66:fb:86:24:b6:11:bf:
5b:ec:a7:29:e0:d8:58:6b:3d:10:63:c8:82:99:11:1c:3f:36:
c6:91:ec:94:b5:5a:6f:64:43:19:ec:13:6c:cd:5f:3e:de:f9:
23:93:00:16:40:a5:61:01:73:4e:f4:5c:0f:fe:18:a4:af:08:
2e:86:e7:5b:96:1c:ed:8e:7f:57:cf:4a:fb:be:99:a4:c8:f5:
97:11:07:fc:9d:09:5e:33:f2:4f:a5:74:9f:f4:eb:14:8b:3b:
96:6a:2e:ce:1c:9e:e3:2b:74:2a:41:ee:8d:92:3f:7b:32:72:
bf:04:01:fd:c2:99:1a:d8:da:62:e6:f0:7a:07:c8:47:1d:fd:
28:55:d5:aa:b1:61:96:d5:ad:47:34:ef:c3:0a:a7:8f:58:21:
85:9e:f7:b5:f3:76:93:fc:91:c1:8d:12:15:cd:86:a3:ef:40:
fb:e4:ea:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECEdyOaHwjC4iY1+F124UcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NjdhNTYyMTFiMjFlOWFjN2NkYzhmYjYzOWYzMTBhOTJj
MjEwNGMwHhcNMjYxMDAzMTQwMTI3WhcNMjYxMDA0MTQwMTI3WjAzMTEwLwYDVQQD
Eyg4YWMzNmZhN2IzMTkzYmQxM2I4MDc2YWVhNjAyNzM0YjIxZTc5ZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvbdHktVRFmDiO52sTDd0Th+7Uhz
Czt/+nBrz/yiBwQAC/KgQzEr1jC51FDEtB/cxjl4EYYQAsx7UGS7i9U7mk3AGyP+
hKq4AxBrBBEIevHai//+nvAN1wkqYDEZnBkD4a+rblAGK+S7gvCl66ZZQP+XSLMa
lixEFm71LeZhW+COzjVno1gWWKnEqdqAwGLwWLSS7oIp0LuEeYWFvT4drGesM+5T
TthJvuuM3gMNFE8TxltFXhEvWHg0Pdy0x0czQEu2uxGaJt0UI6o3hor5GW5/nDwN
vv/pySCZH333QpPaFs/ZGrPaiXFSnJI4ni16Tb1+tcvP0CIMXPFiMXSTlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrDb6ezGTvRO4B2rqYCc0sh552eMB8GA1UdIwQY
MBaAFARnpWIRsh6ax83I+2OfMQqSwhBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdlbFloR3lIcHJIemNqN1k1OHhDcExDRUV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wNDVjNGItYzBkNy00Nzc4LTlmNDQt
ODIzYWQyYzJmNWYxLzEvQkdlbFloR3lIcHJIemNqN1k1OHhDcExDRUV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wNDVjNGItYzBkNy00Nzc4LTlmNDQtODIzYWQyYzJmNWYx
LzEvQkdlbFloR3lIcHJIemNqN1k1OHhDcExDRUV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3Ffd98Q
X8wPcNXIlLIdcfjBjNA6cjWFL5sqwRchr96D494v5uVD5djwK8dCkZ66qx8FaJzU
8WAj2TWptiMVaRLjQWlK+E+FJZbd7XqkCDkN64hm+4YkthG/W+ynKeDYWGs9EGPI
gpkRHD82xpHslLVab2RDGewTbM1fPt75I5MAFkClYQFzTvRcD/4YpK8ILobnW5Yc
7Y5/V89K+76ZpMj1lxEH/J0JXjPyT6V0n/TrFIs7lmouzhye4yt0KkHujZI/ezJy
vwQB/cKZGtjaYubwegfIRx39KFXVqrFhltWtRzTvwwqnj1ghhZ73tfN2k/yRwY0S
Fc2Go+9A++Tq8g==
-----END CERTIFICATE-----
Generated at Sat Oct 3 22:29:32 2026 by rpki-client