Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
File: BG5SgQdApuwTSZPbya0RtkVNmno.mft (raw, json)
Hash identifier: fYjW/+t1vPMFCXgyH7VW1bqm7bECvWuwVVWSZFxEMKg=
Subject key identifier: DA:57:F3:58:A1:74:DC:B5:AD:BD:AC:5A:09:40:42:BF:25:6A:A8:EB
Authority key identifier: 04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
Certificate issuer: /CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Certificate serial: 019E1DC6F7D7E2DCB272902F2A1C6B77C0A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
Manifest number: 08FA
Signing time: Tue 12 May 2026 20:00:39 +0000
Manifest this update: Tue 12 May 2026 20:00:39 +0000
Manifest next update: Wed 13 May 2026 20:00:39 +0000
Files and hashes: 1: BG5SgQdApuwTSZPbya0RtkVNmno.crl (hash: kMwtF5rOAkrHH8CE6EoMdIsbb4CsBv4YqPSIylztrY4=)
2: a9jZwxcqI34mhuCt3thAAI-XO7Q.roa (hash: aj2CjjO2duZcrFHfSQxM4wde7HcT3fufS42YR1B/tQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c6:f7:d7:e2:dc:b2:72:90:2f:2a:1c:6b:77:c0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Validity
Not Before: May 12 20:00:39 2026 GMT
Not After : May 13 20:00:39 2026 GMT
Subject: CN=da57f358a174dcb5adbdac5a094042bf256aa8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5d:70:af:1f:33:7a:e8:d3:2d:e7:4d:d4:9b:
15:26:1c:21:88:9a:d7:bc:15:d5:83:4c:ea:76:d6:
f2:a0:74:08:b2:a5:9b:f3:93:8d:77:1d:35:c2:7e:
f6:5d:c5:00:3e:ef:31:68:e8:95:46:42:1c:98:cf:
f9:9b:3b:93:1b:57:6e:0c:19:d1:ca:a4:2c:66:af:
70:03:df:68:18:b5:8f:a1:65:ee:37:70:d5:ff:19:
37:36:44:5b:b3:c4:98:40:87:be:37:50:82:41:a8:
69:6b:6a:6c:6c:ed:9e:ce:ee:f5:0f:31:46:ec:68:
b4:ad:a0:62:9f:c5:6f:d2:61:b3:20:69:fd:58:9e:
eb:ab:d6:da:65:a8:07:50:88:2c:01:c0:fe:a9:7e:
20:34:ed:df:0d:4f:62:ef:42:47:35:37:fb:4e:3b:
77:6f:e8:20:84:6c:0b:d6:4f:6e:fb:71:5b:ce:88:
21:b9:66:e3:3b:40:8b:8a:2d:fa:dd:0c:50:28:6e:
ff:69:e0:0d:5a:b2:33:f6:e9:85:30:d5:b6:d0:34:
59:95:c8:6c:9f:12:4d:1e:da:99:26:96:e8:67:ab:
b3:5a:91:de:f8:1d:71:a1:b4:d5:35:70:47:d3:4d:
d5:06:df:b9:76:9d:a2:c0:f5:28:86:9e:31:ae:3d:
a3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:57:F3:58:A1:74:DC:B5:AD:BD:AC:5A:09:40:42:BF:25:6A:A8:EB
X509v3 Authority Key Identifier:
keyid:04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cb:1e:50:ab:2e:e6:b2:dd:fa:a8:08:f7:8b:30:9f:73:6d:
ca:3f:15:0f:e2:61:2a:c4:97:66:41:ac:32:94:51:69:e4:65:
b6:97:cb:a1:a3:a6:ce:35:0d:d9:18:9e:51:37:05:8d:a0:41:
6a:3c:7e:c1:0b:a7:41:a3:c7:31:67:0b:03:8d:14:2e:a2:3b:
36:4e:8b:1c:e0:e7:27:ad:a0:e4:86:60:c0:f6:ce:15:c5:de:
ea:32:5d:ad:f3:cc:e2:0f:8e:b5:bd:46:2e:7e:be:db:36:f2:
63:78:8f:8e:e3:d1:65:fa:9e:9b:9f:51:ea:dc:0e:7a:dc:b5:
fb:9c:06:d3:08:4a:74:74:b6:b4:b0:1c:30:1c:92:7f:2e:aa:
f0:fb:9d:4b:53:89:53:50:96:15:0e:73:67:ba:dc:a4:2a:20:
28:49:74:6c:9f:9e:75:4d:e6:e5:59:06:ab:75:78:52:c6:6d:
d1:fb:57:c3:1c:cf:f5:0f:38:dc:45:a3:3b:f7:3e:de:d6:50:
93:49:6e:c5:00:0a:3a:ef:18:ef:08:02:5c:78:fe:e0:7f:8e:
08:02:69:18:7b:bf:32:02:af:49:2d:12:88:5d:4b:b5:3d:eb:
d9:ae:c9:55:a2:1d:1c:d4:08:fb:3d:8e:52:00:4b:a2:bf:e0:
3e:12:6f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:43 2026 by rpki-client