Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
File: BG5SgQdApuwTSZPbya0RtkVNmno.mft (raw, json)
Hash identifier: ELNgbQrPS6VYZHQwsJ6TX7OA4FF+9FYdDRMKrRGbmdo=
Subject key identifier: C5:92:CA:5A:26:EA:AE:FA:99:18:AF:0A:B6:3D:5D:63:FD:7F:C7:CB
Authority key identifier: 04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
Certificate issuer: /CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Certificate serial: 019D2A726CF62F0FB92F58085CFFA92D97A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
Manifest number: 087C
Signing time: Thu 26 Mar 2026 14:00:35 +0000
Manifest this update: Thu 26 Mar 2026 14:00:35 +0000
Manifest next update: Fri 27 Mar 2026 14:00:35 +0000
Files and hashes: 1: BG5SgQdApuwTSZPbya0RtkVNmno.crl (hash: bZkZDZ+QvfAOOJjDXVItMt/JbPPSL3aooP5R4o5m2N8=)
2: a9jZwxcqI34mhuCt3thAAI-XO7Q.roa (hash: aj2CjjO2duZcrFHfSQxM4wde7HcT3fufS42YR1B/tQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:6c:f6:2f:0f:b9:2f:58:08:5c:ff:a9:2d:97:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Validity
Not Before: Mar 26 14:00:35 2026 GMT
Not After : Mar 27 14:00:35 2026 GMT
Subject: CN=c592ca5a26eaaefa9918af0ab63d5d63fd7fc7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:75:bc:52:83:6b:cd:27:24:6a:12:d2:3e:43:
46:35:e0:2d:b2:a8:ff:d7:4c:ec:0b:79:81:e8:f6:
ba:36:0f:e4:63:5e:a4:4c:f8:41:09:7c:aa:ef:ac:
cd:13:53:4d:22:77:8e:9d:2c:0c:fc:6e:14:ba:92:
2e:ba:2c:41:85:8d:4f:ea:2c:f8:79:89:d3:ee:d2:
4b:7c:62:e8:b0:78:6d:45:e5:57:24:e8:2e:56:8c:
0d:eb:91:4a:f9:62:9b:dd:dc:e0:13:0b:93:73:ae:
91:11:01:7e:11:fe:45:c1:57:3a:66:48:a3:1d:07:
cf:96:4c:57:35:d2:f5:a5:6e:22:1b:93:03:2a:88:
21:db:b4:3f:8c:10:5e:b2:a8:69:09:1e:8a:8f:b5:
02:79:24:ab:fb:3d:60:a4:65:09:06:2d:56:b9:c3:
3e:9a:0e:c8:ac:a0:e2:80:ce:02:49:8d:93:a9:42:
bd:ae:24:82:36:8c:0d:7e:a7:29:44:32:78:5a:f4:
42:8c:4f:b0:7b:a4:f8:62:42:d8:bd:ca:e7:9b:f1:
91:b3:83:4a:59:10:1b:1d:ba:53:f6:7f:4a:43:ec:
e2:21:93:3c:e1:a2:cc:1b:7b:b6:3a:e8:6e:bd:3e:
f2:8f:ce:e4:2a:0c:e0:00:be:d2:df:d8:f8:00:28:
4c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:92:CA:5A:26:EA:AE:FA:99:18:AF:0A:B6:3D:5D:63:FD:7F:C7:CB
X509v3 Authority Key Identifier:
keyid:04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d1:c4:bc:b5:57:51:9d:1f:df:3e:57:cd:0e:8c:96:05:be:
8f:54:2e:3f:d6:29:e0:f8:18:ae:0a:73:54:45:57:b3:fa:ee:
9e:1c:c5:9b:7a:fe:09:3e:3a:4e:c6:11:83:fd:e8:f1:8c:07:
4b:36:14:af:8a:58:9e:93:a9:22:64:0d:7e:79:e4:e2:ac:59:
53:7e:a8:80:ed:6e:97:8f:50:5a:06:c5:13:e3:3a:57:0e:17:
6b:55:0a:1a:88:66:63:e5:53:fa:c9:11:5a:b5:b0:3d:1c:67:
b2:46:cc:fc:d7:79:8f:b7:ed:72:44:36:ca:14:e1:42:5c:b9:
83:32:12:69:6a:d9:69:fa:26:52:7b:9d:ab:1e:53:f2:93:00:
46:fc:73:ed:d7:b4:0a:63:21:37:78:c1:f1:2e:5b:71:04:d2:
4e:a0:f2:64:0d:83:c1:6c:d1:6f:c8:bb:f0:18:91:73:49:c5:
9d:04:e8:4c:87:91:7e:c8:5b:e0:29:d8:1b:96:9e:54:b8:0d:
81:d6:4d:98:fb:77:66:a4:1d:16:2f:c8:d8:61:df:8e:aa:82:
a8:b7:84:51:46:90:94:e4:09:16:11:9d:dc:70:0d:4c:45:95:
89:94:f4:c0:d8:55:3e:7c:3e:aa:9f:ef:24:d4:78:c1:39:e7:
da:b1:81:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:27:53 2026 by rpki-client