Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
File: BGrKxxMSOFbUrmwWBUYCaE39B8s.mft (raw, json)
Hash identifier: OXdUlbXpa3+eVcVv99+Vsz/4w4n1almrdbnrMJl0ffk=
Subject key identifier: A3:76:C2:DD:F3:A8:C0:20:3F:E8:3E:CD:91:96:B2:15:3A:CD:80:D8
Authority key identifier: 04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
Certificate issuer: /CN=046acac713123856d4ae6c16054602684dfd07cb
Certificate serial: 019D284DA3B9D4C8BDFD0B1749F0BFCE208B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
Manifest number: 06D0
Signing time: Thu 26 Mar 2026 04:01:10 +0000
Manifest this update: Thu 26 Mar 2026 04:01:10 +0000
Manifest next update: Fri 27 Mar 2026 04:01:10 +0000
Files and hashes: 1: BGrKxxMSOFbUrmwWBUYCaE39B8s.crl (hash: n5XUc4Twmk/SKkz7Ixgaa6IjjGsuNuAFB3Q5be/y01k=)
2: QJ1HkdAXItAzxlhFaHYQmHmX4Xs.roa (hash: MUkecizqv3eYRM3Ng4C7CpXSwUounW1ENydthr9OUwA=)
3: hDQul7piZLbpWbBlOifimJQ2VkY.roa (hash: o6sQbndgLUFB0FZlM1NF6tMiqg+wB0oHdManJlFqalo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:a3:b9:d4:c8:bd:fd:0b:17:49:f0:bf:ce:20:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046acac713123856d4ae6c16054602684dfd07cb
Validity
Not Before: Mar 26 04:01:10 2026 GMT
Not After : Mar 27 04:01:10 2026 GMT
Subject: CN=a376c2ddf3a8c0203fe83ecd9196b2153acd80d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:48:c6:02:c8:67:fb:0e:b3:47:a9:65:b0:03:
25:23:9e:28:00:03:09:8f:1c:92:24:3e:f2:5b:41:
4e:ab:89:f4:d3:ab:23:e3:aa:3c:cd:b9:d9:32:28:
b6:53:40:7a:85:8a:e7:f7:23:2e:9e:11:92:4d:29:
9b:c5:b6:f8:e7:f8:dc:33:dc:ff:4c:a7:20:f3:f9:
40:e7:36:8e:fa:24:6b:6d:c4:06:cb:a0:0d:ff:7f:
74:d9:70:81:f8:3f:27:77:d0:e1:f9:5c:3e:c1:d4:
bc:d4:03:df:c8:f2:dd:63:72:b3:8d:87:f3:bb:34:
4d:5e:d5:27:ff:85:61:30:d2:ab:0c:0e:9d:2d:cc:
6b:b8:36:f7:9f:f0:cc:d6:77:5a:b4:bd:ec:36:12:
e0:86:43:bf:e6:d1:06:7f:ad:11:b0:84:36:9e:28:
87:d8:fe:1b:5a:30:dc:d8:6c:7d:a3:43:cd:b8:66:
ae:63:ec:9c:86:07:49:0f:21:7b:5e:62:a5:f3:61:
67:33:c2:5e:77:e1:5c:61:b7:06:8b:e9:7b:6d:ec:
27:fe:0c:48:98:f9:92:f0:93:70:97:5e:94:34:e5:
49:5b:85:9d:b8:06:df:81:fb:6d:2b:ef:0b:98:99:
c4:b5:70:b8:50:f8:be:c8:fa:80:d8:c3:2e:de:f8:
f4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:76:C2:DD:F3:A8:C0:20:3F:E8:3E:CD:91:96:B2:15:3A:CD:80:D8
X509v3 Authority Key Identifier:
keyid:04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:34:8f:bc:2d:ef:a3:1a:91:ee:1d:c0:03:60:82:38:4a:c3:
ca:ad:20:4f:40:ba:ea:55:b8:3e:a6:a2:89:f7:28:5c:e7:94:
f9:d7:f1:e0:04:f5:20:21:d4:66:df:6e:98:de:e0:c2:4b:56:
86:69:99:e7:cb:66:39:2e:0d:dd:57:2b:57:d6:70:bc:83:43:
f0:20:66:89:a0:07:8a:50:c4:44:33:6f:35:9c:2b:d4:6d:ab:
96:2b:e3:0b:84:04:83:22:64:cb:e3:e8:65:52:7d:1f:ef:8f:
94:fc:2d:94:aa:fd:52:97:2b:88:0b:61:6d:40:b9:40:4a:11:
56:03:e1:42:a6:ef:77:5c:d8:6e:3a:90:e4:4c:76:3e:23:e8:
1a:1a:9a:17:33:37:a2:1f:3b:cb:c4:5e:a4:c8:f7:b6:8a:20:
a6:4a:c7:3b:ef:88:bf:b0:ee:9b:bf:a4:af:e4:20:33:aa:57:
99:da:3f:97:52:97:a6:4e:2b:92:af:79:9c:02:4c:00:b0:2c:
ae:2e:59:d4:b3:c4:82:90:a5:5a:7e:2e:a6:cb:c5:d6:e0:0d:
c8:ee:4a:19:bc:24:0f:71:fc:b2:c1:de:71:b7:46:d2:0c:af:
2e:21:c1:75:a6:fb:03:fc:29:10:ca:07:e9:03:94:0a:4c:e1:
54:31:3a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:36:30 2026 by rpki-client