Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
File: BGrKxxMSOFbUrmwWBUYCaE39B8s.mft (raw, json)
Hash identifier: nOhn46bprSjeSy2vWMrp1VIY2G6kz4C/iU0t6y8fqJo=
Subject key identifier: AB:6A:B5:6B:DF:CC:DB:47:1C:CE:EE:F1:6F:A5:24:4B:84:D9:09:9B
Authority key identifier: 04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
Certificate issuer: /CN=046acac713123856d4ae6c16054602684dfd07cb
Certificate serial: 019F905A6671CE4B5E8AF69353101FE86AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
Manifest number: 080F
Signing time: Thu 23 Jul 2026 19:01:11 +0000
Manifest this update: Thu 23 Jul 2026 19:01:11 +0000
Manifest next update: Fri 24 Jul 2026 19:01:11 +0000
Files and hashes: 1: BGrKxxMSOFbUrmwWBUYCaE39B8s.crl (hash: tB0dKPpbc0NHLWyAQVHzbRshIjntJM/ppaBAw40Hjww=)
2: QJ1HkdAXItAzxlhFaHYQmHmX4Xs.roa (hash: MUkecizqv3eYRM3Ng4C7CpXSwUounW1ENydthr9OUwA=)
3: hDQul7piZLbpWbBlOifimJQ2VkY.roa (hash: o6sQbndgLUFB0FZlM1NF6tMiqg+wB0oHdManJlFqalo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:66:71:ce:4b:5e:8a:f6:93:53:10:1f:e8:6a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046acac713123856d4ae6c16054602684dfd07cb
Validity
Not Before: Jul 23 19:01:11 2026 GMT
Not After : Jul 24 19:01:11 2026 GMT
Subject: CN=ab6ab56bdfccdb471cceeef16fa5244b84d9099b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:55:c9:27:de:11:8b:31:6f:ba:e6:45:f0:
8f:d0:57:51:89:11:aa:a7:d4:69:10:a5:5e:c7:4c:
c9:77:96:b2:e0:c6:f4:c5:e5:4e:38:d6:55:9e:80:
44:07:80:22:c3:b3:fa:b9:5c:79:c5:cf:cf:0b:d6:
3b:81:85:62:6f:ef:18:15:a6:45:d0:bf:cf:9f:d6:
61:51:48:95:8f:93:88:d2:de:85:cd:78:98:49:0b:
f5:48:f3:e1:6f:a4:2f:0d:51:14:0a:8f:c6:dc:bb:
ed:da:ab:79:df:1d:9a:18:ed:6d:41:30:5a:b5:d2:
68:38:2a:4f:a6:c2:c3:14:09:90:20:67:bc:18:4b:
e3:78:a3:7f:06:96:7e:55:d1:c9:ea:2a:c2:98:33:
62:cb:73:96:2b:a6:39:be:5b:82:86:71:0d:c8:f5:
1d:e6:06:c4:eb:37:7e:1a:39:9a:cd:fc:b1:1a:34:
6f:04:d9:69:87:81:2c:4f:f2:72:34:34:72:9a:50:
0f:ed:fe:12:5e:f7:39:b9:97:e2:e9:5f:ba:82:5c:
21:55:bf:7f:45:44:6d:95:5c:3d:3e:0c:ad:64:16:
ef:07:70:19:4a:83:23:f7:c8:46:ec:61:0e:52:c7:
e5:fa:96:b5:3d:a9:0d:c2:da:e3:12:11:ec:4f:62:
02:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6A:B5:6B:DF:CC:DB:47:1C:CE:EE:F1:6F:A5:24:4B:84:D9:09:9B
X509v3 Authority Key Identifier:
keyid:04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:50:25:72:2c:6f:28:92:3a:b7:e1:44:15:a1:03:ec:c4:0f:
5e:3d:e1:f4:6d:9a:05:95:3e:67:d0:ca:7f:17:e6:a1:e3:b0:
a6:54:7b:4c:88:c3:94:79:1e:fd:1c:4d:d9:72:33:29:f0:be:
20:6d:14:57:e4:99:ba:40:33:7f:75:b6:6b:0b:8a:71:be:92:
45:f2:2f:cf:ef:76:01:43:0c:d9:73:e4:c6:08:cd:a7:ca:db:
a1:a7:09:53:76:cb:86:83:76:2f:b2:04:67:24:7f:da:f4:84:
19:35:77:a5:ee:06:b9:2a:bb:05:8c:41:8e:d4:5c:7c:e5:2c:
e2:34:32:a8:07:7e:15:1f:50:72:84:47:1e:c6:93:70:2d:25:
a3:f8:ba:1f:09:36:60:86:e8:a6:af:90:56:c7:90:86:c4:09:
db:34:9b:76:8b:22:17:b7:00:97:ca:ab:d0:d5:92:6f:1c:d8:
9b:9f:79:08:cc:62:ec:59:11:ed:ca:17:e1:33:2d:c3:27:5c:
00:a7:f8:0e:81:3b:05:26:30:af:58:81:8a:a4:e0:2e:96:45:
be:f2:c6:58:44:07:e3:f8:c8:f1:7c:4c:99:c5:8f:77:83:7c:
2a:6e:79:b0:06:b4:8e:a2:a6:01:e8:82:c4:fd:03:05:bd:e2:
e0:18:d6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:16:40 2026 by rpki-client