Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
File: Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft (raw, json)
Hash identifier: R24s6hDoZu9RcwoeFpiXwaJ40bqQFWEK7Optlg8VYgU=
Subject key identifier: 6A:B1:02:9F:37:86:DB:0F:50:29:55:66:C7:D0:A4:27:CF:E2:30:42
Authority key identifier: 06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
Certificate issuer: /CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Certificate serial: 019E1C7D57E7280ABC6B3C2B296E013FD1F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
Manifest number: 0528
Signing time: Tue 12 May 2026 14:00:36 +0000
Manifest this update: Tue 12 May 2026 14:00:36 +0000
Manifest next update: Wed 13 May 2026 14:00:36 +0000
Files and hashes: 1: Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl (hash: w5TB6FDnaYkp+ERv9R8XZkEHag7nU8vPVcUsOZwnXuQ=)
2: egh2jlJ3EvVVoKqsyyD80-m512Q.roa (hash: RHu71nLbKp8lHX4W0lV6aHdUtImYmFlIXsjzf9wXMgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:57:e7:28:0a:bc:6b:3c:2b:29:6e:01:3f:d1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Validity
Not Before: May 12 14:00:36 2026 GMT
Not After : May 13 14:00:36 2026 GMT
Subject: CN=6ab1029f3786db0f50295566c7d0a427cfe23042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:c7:de:30:aa:a5:3e:3b:75:11:23:e4:18:
70:2f:c3:77:26:c9:6a:50:00:f3:e1:a5:3d:ad:6a:
cc:bb:1d:18:01:fc:6c:16:6b:ed:fb:c7:d3:1a:27:
b3:fd:08:f3:ab:7c:11:d3:d3:30:fc:41:9c:b3:a9:
f2:93:07:02:6f:82:d4:bd:3a:23:84:7b:fa:ef:d8:
5d:4b:5b:9b:92:67:47:a3:6d:cc:b2:89:15:3d:31:
2d:55:aa:1f:48:f2:d8:1b:0c:d7:cc:9a:24:74:e4:
29:cc:c8:f1:6b:9a:97:63:e2:a1:4b:45:46:69:85:
c3:bf:46:d8:cd:da:fc:bc:5c:4d:bb:30:a3:d3:d3:
39:da:cb:a5:e3:3f:ab:99:ef:f1:d5:c6:69:d0:70:
62:9f:68:f5:13:0a:8e:b8:37:6c:55:47:1f:05:ee:
a9:cc:e6:47:d5:32:be:db:30:b9:c8:b8:6a:35:70:
3c:a1:f0:aa:b8:67:85:7c:e2:ec:d4:81:a9:77:03:
ce:28:41:c5:1f:d3:9e:87:81:bb:bf:68:80:0d:9f:
56:d7:5e:b6:b9:26:74:a8:60:1c:6d:0d:57:4e:bb:
ab:ec:c6:a4:e0:82:9e:5b:d5:5d:bf:b6:cb:9d:e6:
2e:6f:dc:0a:c0:dc:0d:56:b0:48:53:d4:0d:f5:8d:
54:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B1:02:9F:37:86:DB:0F:50:29:55:66:C7:D0:A4:27:CF:E2:30:42
X509v3 Authority Key Identifier:
keyid:06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:79:99:f8:4a:d3:fc:d8:50:a5:e3:7e:28:89:d9:3c:06:f5:
0d:19:92:3e:11:b2:c2:e2:45:34:34:28:6a:4a:8e:09:f8:19:
92:92:2d:c5:60:1e:43:be:32:22:2f:06:52:e1:41:e4:65:38:
37:78:cd:ce:b7:bd:47:a8:b9:6c:c2:84:32:c2:63:33:b0:f3:
60:8b:9f:e6:73:20:05:6b:62:8b:de:d3:63:66:b4:9f:cf:81:
bc:e9:79:e7:06:95:3f:50:66:6e:29:bf:c2:7c:41:7f:f6:28:
9d:74:d0:99:49:56:fd:f4:97:22:ce:49:09:b5:81:51:d0:89:
3a:bc:f7:a5:ca:b8:bf:29:d0:3d:e6:73:7d:11:e0:2c:8a:b1:
01:f0:e9:ac:fa:8d:82:5b:7d:db:48:5b:cd:25:69:c4:90:e7:
8e:9f:8c:a6:b3:04:59:ff:2d:73:23:e6:fc:10:c9:3a:99:a5:
d8:66:86:a5:b1:14:b8:29:aa:59:1a:4c:1f:ee:8b:04:9b:55:
f7:ea:ae:4f:cb:70:f8:d6:ef:4b:d1:6b:e9:36:3e:e3:72:81:
e8:2b:89:22:76:cb:99:ef:06:d4:e5:4a:d8:12:2d:46:fb:1c:
6b:89:a9:05:88:c7:33:68:7c:90:48:97:64:10:46:77:24:c4:
0f:5a:c4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:21 2026 by rpki-client