Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
File: BGLgBWSpNA_0c505USFsRqjvxk8.mft (raw, json)
Hash identifier: Q6c7H/aHo3m8iokJ5AlIC34XTkvAboeZvl3n+8L028A=
Subject key identifier: 7C:75:D1:6C:47:3F:A1:C7:A6:89:C9:CD:EB:7B:99:6C:A0:FB:41:8F
Authority key identifier: 04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
Certificate issuer: /CN=0462e00564a9340ff4739d3951216c46a8efc64f
Certificate serial: 01A0CD7E7CE4DA95B4D8E41B87B899001E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
Manifest number: 1A70
Signing time: Wed 23 Sep 2026 09:00:13 +0000
Manifest this update: Wed 23 Sep 2026 09:00:13 +0000
Manifest next update: Thu 24 Sep 2026 09:00:13 +0000
Files and hashes: 1: BGLgBWSpNA_0c505USFsRqjvxk8.crl (hash: Cn/4onvtKlawmB6v2SrLpJb+pjGsY3EbhMWUajTrLLU=)
2: z_uY0nt7eJVyCANwyDj8BAg2RVg.roa (hash: 1bTh66Er+RN00waAHAn1g3FpOreT0tO5hfBMyC9roWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:7c:e4:da:95:b4:d8:e4:1b:87:b8:99:00:1e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462e00564a9340ff4739d3951216c46a8efc64f
Validity
Not Before: Sep 23 09:00:13 2026 GMT
Not After : Sep 24 09:00:13 2026 GMT
Subject: CN=7c75d16c473fa1c7a689c9cdeb7b996ca0fb418f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:98:c5:dd:5c:8c:12:f1:58:42:61:7e:25:
74:d7:77:85:d3:8e:1c:6c:4f:c1:65:a3:90:4b:0b:
fc:f5:6f:3d:f3:05:3c:33:21:ea:d1:6a:2f:c8:dc:
1e:0d:43:18:6a:94:60:e3:73:f6:0a:b7:a3:ed:b3:
c2:da:66:f6:d4:ea:7e:0a:13:98:b6:e5:77:3e:a2:
db:38:90:f2:11:bc:4a:7b:18:cd:1a:46:a1:48:7c:
b8:9e:41:c7:a8:28:c0:c3:8a:41:0d:8a:30:ff:fc:
bb:21:e1:c5:95:f1:60:d1:fc:7c:53:1d:26:43:69:
31:36:5d:15:28:b5:43:2b:2e:bc:47:6c:b9:72:25:
67:53:df:5f:48:0d:90:a7:e3:c5:34:7d:6b:d0:b0:
6e:11:d3:d6:d8:2c:ab:b0:d1:f2:a7:25:bf:fc:70:
6e:1d:a6:31:a1:23:88:00:08:8c:b8:ab:3e:60:06:
c8:89:e9:90:a3:d9:3e:4c:bd:4c:cc:eb:c0:41:7f:
55:47:d9:e3:e9:61:c8:5b:5e:c9:a8:68:ed:59:aa:
b1:5f:9c:58:f3:16:ed:d3:d7:07:5e:4a:c6:66:4b:
80:4b:28:85:92:9d:3f:aa:28:6d:dd:31:fb:30:1c:
d5:92:f6:f8:07:46:86:8f:0e:56:e5:23:e3:c5:22:
22:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:75:D1:6C:47:3F:A1:C7:A6:89:C9:CD:EB:7B:99:6C:A0:FB:41:8F
X509v3 Authority Key Identifier:
keyid:04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fa:70:9a:ce:f4:f5:1e:b1:34:e2:38:48:ff:56:88:8f:67:
dd:a6:a2:83:80:3e:6d:ec:e5:94:ac:ad:4b:9b:f2:cb:94:57:
95:6a:1f:3b:25:8b:80:2a:b8:4f:61:49:88:a5:9c:39:6b:74:
01:bb:6f:dd:84:1b:ee:95:91:34:02:9c:cc:aa:b6:47:00:cf:
67:24:ae:40:3d:a2:23:48:89:6a:48:c0:d6:d7:f2:95:1a:eb:
ea:91:4c:f6:4c:04:18:ad:eb:9d:a8:69:8f:9b:c9:f9:5e:db:
39:34:bb:a7:ae:e9:04:22:87:58:c6:2d:fe:21:00:9c:3a:c9:
7d:6e:99:26:8c:09:ab:a8:86:6f:8e:bb:40:11:52:5e:44:d2:
77:2e:a3:a3:76:3b:67:f3:60:ee:73:76:7c:a3:5c:b3:b8:2a:
42:bb:6a:d4:eb:5e:37:11:de:b1:8d:66:0f:ea:c5:9c:e4:a8:
1d:5d:05:ed:91:3d:6b:55:81:01:b6:d4:22:fe:2b:3c:22:fc:
5b:b6:ce:f6:25:72:08:29:95:33:25:36:76:22:3c:35:4a:09:
3a:04:24:f8:63:66:31:b8:b9:fe:48:c3:b2:06:4f:0b:ce:f2:
eb:a5:4a:98:d9:22:2a:c2:f5:12:d3:e4:06:78:80:0f:51:a6:
5b:0c:62:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:53:54 2026 by rpki-client