Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
File: Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft (raw, json)
Hash identifier: 5aAJN7TS1xKOnx1DBjAsDqQ/+ULiXStX4JkvArZ1TgQ=
Subject key identifier: BA:1D:E6:10:43:96:0C:AC:8E:AB:6D:2F:D0:34:92:1D:AC:01:3A:74
Authority key identifier: 06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
Certificate issuer: /CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Certificate serial: 01A0D0493FC92A970F1A333BA5EE22ED4049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
Manifest number: 068F
Signing time: Wed 23 Sep 2026 22:00:56 +0000
Manifest this update: Wed 23 Sep 2026 22:00:56 +0000
Manifest next update: Thu 24 Sep 2026 22:00:56 +0000
Files and hashes: 1: 5OH9MU3n5jnbsFQihGMju6cfMP8.roa (hash: ebl8kR+bOvw+VlEIFx9Aju1goGA4RN7+C5LqHyAwZJ4=)
2: Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl (hash: oOedI+QSe1f21CwGyMzJJNu+wn4eoq8d3LdiIyPOEA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:49:3f:c9:2a:97:0f:1a:33:3b:a5:ee:22:ed:40:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Validity
Not Before: Sep 23 22:00:56 2026 GMT
Not After : Sep 24 22:00:56 2026 GMT
Subject: CN=ba1de61043960cac8eab6d2fd034921dac013a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5d:cf:99:af:fc:b4:2a:c0:2c:a1:72:d8:2a:
3f:17:8a:25:c5:c9:ef:65:0e:a9:8e:ac:f1:d1:78:
cf:82:d8:49:0b:94:55:f1:06:6f:7f:7e:aa:44:1d:
7a:fa:94:ae:4d:e6:d8:a1:62:26:5c:eb:06:9e:85:
ab:7f:3d:33:a4:e7:45:e3:e8:ce:3e:b9:4c:07:91:
00:81:91:4d:d7:c4:21:3f:da:91:d3:2e:c7:04:91:
00:5a:f2:93:14:5a:0d:6c:e3:1d:6a:64:67:24:d3:
12:85:aa:5b:80:99:40:bf:7b:66:14:7d:21:2a:21:
e8:8e:aa:a2:db:7f:c7:00:a4:04:88:ee:da:50:54:
5d:b4:cc:6e:5d:a4:81:5c:ba:1d:8d:34:48:72:8e:
6e:39:48:6e:a1:1d:7e:b2:00:bb:91:13:7d:d9:9f:
ff:64:8a:2b:0c:fe:e7:c5:96:8f:3e:38:42:e5:60:
8a:f1:db:fb:a7:b0:b9:06:c4:78:53:25:ec:63:c8:
0f:1c:2f:01:dc:9c:b7:2b:6b:25:c2:b6:34:90:c5:
51:85:aa:9b:7f:ed:3e:c8:8e:bd:dd:65:25:b9:a4:
b1:2b:9c:f1:d3:11:dd:3f:b1:e4:e7:ee:1f:47:21:
e6:d6:84:03:1b:97:e0:73:01:a5:6d:c9:7b:35:6c:
3f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1D:E6:10:43:96:0C:AC:8E:AB:6D:2F:D0:34:92:1D:AC:01:3A:74
X509v3 Authority Key Identifier:
keyid:06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:82:a7:cc:5c:fb:af:e9:48:51:f6:c6:65:1e:ee:01:9c:69:
ef:75:09:e2:69:cd:7f:f9:69:1c:d1:b3:40:fd:68:1c:f8:47:
9f:af:b2:5c:94:0c:c7:53:4b:6a:ec:39:7e:cb:d1:22:60:e8:
00:a1:95:0d:46:a6:ab:ac:50:4d:be:13:e5:32:4b:19:3a:58:
1a:ff:c5:ed:90:c8:3d:df:97:3e:8e:2c:38:0a:65:8d:bb:06:
2f:86:1e:17:28:28:67:97:28:07:7c:26:5c:ac:01:c4:24:17:
5b:de:2e:bc:1d:eb:38:ee:69:6d:0b:75:07:01:bd:4c:7f:5a:
b6:46:7e:0c:fc:cf:fa:c4:dc:59:eb:11:ed:e5:41:36:9c:54:
d9:17:98:46:93:e0:42:4e:87:fc:83:c0:15:39:e9:8e:dd:1c:
bd:91:b8:78:49:de:07:64:0c:48:93:5b:c5:ee:a6:ac:1e:e2:
4b:64:75:48:d0:29:b9:81:ef:02:a3:f0:74:26:7a:0f:67:2c:
a9:fe:01:71:39:cf:bc:16:13:09:41:cf:3a:ac:f8:8f:f4:a5:
be:d4:f7:ba:c6:37:0a:9e:16:b3:33:56:de:53:13:f7:8a:99:
2a:ca:17:b9:99:65:8c:4a:c3:14:3d:f2:77:73:c4:3b:97:1f:
08:1f:10:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:55:55 2026 by rpki-client