Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
File: Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft (raw, json)
Hash identifier: TKkOUJudl9XlpxT9OG/EgyjlAAh/xHT/MdT2Y5xc5GQ=
Subject key identifier: 18:4F:C2:EB:36:A6:8B:1B:FE:6E:3D:BB:43:F4:C1:2B:24:84:A8:92
Authority key identifier: 06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
Certificate issuer: /CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Certificate serial: 019D273AFFD19D777722ADE3784441EE0543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
Manifest number: 04A9
Signing time: Wed 25 Mar 2026 23:01:11 +0000
Manifest this update: Wed 25 Mar 2026 23:01:11 +0000
Manifest next update: Thu 26 Mar 2026 23:01:11 +0000
Files and hashes: 1: Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl (hash: 9DhZU3Tce5rhSNxdxkTkZnYqf2Pw+uTPyyk0njtJ5to=)
2: egh2jlJ3EvVVoKqsyyD80-m512Q.roa (hash: RHu71nLbKp8lHX4W0lV6aHdUtImYmFlIXsjzf9wXMgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ff:d1:9d:77:77:22:ad:e3:78:44:41:ee:05:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Validity
Not Before: Mar 25 23:01:11 2026 GMT
Not After : Mar 26 23:01:11 2026 GMT
Subject: CN=184fc2eb36a68b1bfe6e3dbb43f4c12b2484a892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ea:a1:ab:ef:ad:53:fb:fa:c4:01:d8:2b:0e:
02:cf:e8:d6:66:82:45:02:fd:13:02:93:52:1b:01:
40:c8:30:dc:6c:b7:2b:2e:af:92:fc:93:20:19:05:
79:3a:2e:fb:77:ab:91:09:46:32:bb:ec:36:b5:3d:
49:1b:c1:c1:f4:e1:4e:92:86:17:2c:97:9d:db:59:
da:8c:c5:dc:27:98:af:b9:c2:29:02:c5:f0:3a:b9:
03:6b:0e:cf:0e:0b:02:f4:2a:3d:b8:51:f9:39:78:
74:ce:8c:00:44:81:a3:66:51:78:af:c4:8e:6a:97:
9e:65:25:99:87:fd:0e:31:b6:87:d7:53:8b:56:56:
ef:3a:7d:df:fd:9c:89:86:ae:b4:21:e0:5b:fe:2f:
6b:84:49:1a:a2:58:a9:08:48:7c:2b:9c:72:48:1b:
01:e8:1d:e0:3f:e9:40:b3:8f:29:3c:50:2a:ea:b8:
36:7c:46:ad:ae:f1:30:56:93:e4:2c:0d:6c:d3:b2:
60:7a:49:3f:db:c6:39:e2:5c:c7:5e:40:a6:59:2c:
2e:ee:66:55:42:a7:d3:7a:f9:ce:35:ef:5b:e8:10:
ce:fb:7c:64:b4:2b:11:05:8a:71:72:a7:ff:a8:25:
f6:7e:2a:1d:ce:38:a4:c5:ef:1f:7e:f5:07:19:7b:
8a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4F:C2:EB:36:A6:8B:1B:FE:6E:3D:BB:43:F4:C1:2B:24:84:A8:92
X509v3 Authority Key Identifier:
keyid:06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ef:f5:b4:87:75:55:85:f8:1d:b7:bd:ad:00:a7:41:88:f7:
45:cf:04:f2:2f:14:c8:59:4e:2a:9c:91:9b:14:1e:5a:03:ea:
ba:71:18:f9:74:a0:a6:21:b5:b9:e6:0b:b6:1a:29:64:d9:8d:
53:03:ca:88:5c:29:cd:3c:cf:af:30:48:1f:55:99:41:0f:85:
90:73:02:91:d2:f5:56:61:4b:8f:56:cf:52:2f:a5:c6:5f:0a:
97:7d:ba:37:a3:ab:3a:09:16:d5:d8:b3:a9:fc:ea:6c:f7:d1:
0c:88:0e:9e:d3:ed:0e:e2:6a:c4:02:20:eb:b5:f1:17:13:dc:
c6:fe:5d:74:15:44:00:c2:23:2a:66:23:d5:06:e2:7e:14:bb:
58:9a:65:1c:0d:6a:38:16:14:25:fe:fd:db:34:2a:64:cd:44:
c5:3a:7c:aa:21:d4:41:1a:6d:81:09:42:67:08:05:a0:af:c6:
fc:97:a2:f4:1f:67:a1:0f:89:8e:35:64:0a:e1:41:07:bb:67:
c3:51:db:6b:fd:27:5d:3e:f0:df:8a:5d:dd:38:bd:9e:49:66:
cc:fc:1a:cd:01:f1:c0:57:e7:22:71:8f:b3:05:77:b9:98:c0:
e6:be:74:3d:14:ad:d0:10:ba:b2:6c:83:ae:11:da:d6:64:84:
84:b9:5a:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOv/RnXd3Iq3jeERB7gVDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDk3YTcyZTRhZTQwYjZiOTkyOWI3MmY4MWVmZDcxYzUx
N2RkOTgwHhcNMjYwMzI1MjMwMTExWhcNMjYwMzI2MjMwMTExWjAzMTEwLwYDVQQD
EygxODRmYzJlYjM2YTY4YjFiZmU2ZTNkYmI0M2Y0YzEyYjI0ODRhODkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uqhq++tU/v6xAHYKw4Cz+jWZoJF
Av0TApNSGwFAyDDcbLcrLq+S/JMgGQV5Oi77d6uRCUYyu+w2tT1JG8HB9OFOkoYX
LJed21najMXcJ5ivucIpAsXwOrkDaw7PDgsC9Co9uFH5OXh0zowARIGjZlF4r8SO
apeeZSWZh/0OMbaH11OLVlbvOn3f/ZyJhq60IeBb/i9rhEkaolipCEh8K5xySBsB
6B3gP+lAs48pPFAq6rg2fEatrvEwVpPkLA1s07Jgekk/28Y54lzHXkCmWSwu7mZV
QqfTevnONe9b6BDO+3xktCsRBYpxcqf/qCX2fiodzjikxe8ffvUHGXuK9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhPwus2posb/m49u0P0wSskhKiSMB8GA1UdIwQY
MBaAFAYJenLkrkC2uZKbcvge/XHFF92YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdsNmN1U3VRTGE1a3B0eS1CNzljY1VYM1pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zYTEwOWEtOWIzMi00NWE4LTliMGMt
N2EwMjUxN2ZkOWQyLzEvQmdsNmN1U3VRTGE1a3B0eS1CNzljY1VYM1pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zYTEwOWEtOWIzMi00NWE4LTliMGMtN2EwMjUxN2ZkOWQy
LzEvQmdsNmN1U3VRTGE1a3B0eS1CNzljY1VYM1pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMe/1tId1
VYX4Hbe9rQCnQYj3Rc8E8i8UyFlOKpyRmxQeWgPqunEY+XSgpiG1ueYLthopZNmN
UwPKiFwpzTzPrzBIH1WZQQ+FkHMCkdL1VmFLj1bPUi+lxl8Kl326N6OrOgkW1diz
qfzqbPfRDIgOntPtDuJqxAIg67XxFxPcxv5ddBVEAMIjKmYj1QbifhS7WJplHA1q
OBYUJf792zQqZM1ExTp8qiHUQRptgQlCZwgFoK/G/Jei9B9noQ+JjjVkCuFBB7tn
w1Hba/0nXT7w34pd3Ti9nklmzPwazQHxwFfnInGPswV3uZjA5r50PRSt0BC6smyD
rhHa1mSEhLlalQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:29 2026 by rpki-client