Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
File: BgOecctxUgSoPMJTgi3CmmLHmeY.mft (raw, json)
Hash identifier: OSWWc/jLuAlNn/Imsp7M1eur8O2PAIsS+p24Ghxiqb8=
Subject key identifier: 86:63:CF:D0:88:93:0B:6A:42:10:4F:F8:C7:EC:2A:B2:CC:22:10:FA
Authority key identifier: 06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
Certificate issuer: /CN=06039e71cb715204a83cc253822dc29a62c799e6
Certificate serial: 019F924802483AD8281BB9996000D70A015B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
Manifest number: 0AD8
Signing time: Fri 24 Jul 2026 04:00:20 +0000
Manifest this update: Fri 24 Jul 2026 04:00:20 +0000
Manifest next update: Sat 25 Jul 2026 04:00:20 +0000
Files and hashes: 1: BgOecctxUgSoPMJTgi3CmmLHmeY.crl (hash: iLHbnlx+W9lkel3jWQm06d0w5ismtbS9rwc4YLdWQ00=)
2: WsB2cpz5PeeV12FuRGXIMnfEpDA.roa (hash: RXGdsxXZdhMgqQg6njT8x//0fSXw5JT6Hs6Qaa1Fb6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:02:48:3a:d8:28:1b:b9:99:60:00:d7:0a:01:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06039e71cb715204a83cc253822dc29a62c799e6
Validity
Not Before: Jul 24 04:00:20 2026 GMT
Not After : Jul 25 04:00:20 2026 GMT
Subject: CN=8663cfd088930b6a42104ff8c7ec2ab2cc2210fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:06:bb:ca:9a:c2:e9:86:32:45:e2:40:90:09:
74:e7:f3:9a:0a:70:8e:e9:c2:a5:29:49:41:e7:13:
17:08:86:32:77:fa:3a:ac:3a:a5:06:76:44:a3:ff:
57:c4:1e:d8:56:02:2a:eb:8b:6e:e9:6b:63:29:5b:
95:a5:0f:47:17:08:99:85:15:6f:b9:0a:e6:4b:a8:
8b:82:74:9f:86:00:9b:a8:9b:f8:5c:14:17:2c:55:
81:8b:ee:62:dc:d2:4a:65:f3:94:fc:8d:4b:2c:ba:
d5:5f:26:8d:f3:73:67:90:50:2a:fd:d2:0b:18:b0:
88:e5:c8:59:49:e1:53:17:10:46:d7:02:5e:2c:62:
52:80:03:ca:7d:fb:e3:52:cf:3c:05:f8:fb:70:ba:
0a:df:27:57:26:b7:43:c5:0c:a3:8c:f0:eb:eb:a3:
70:90:fb:97:32:34:3c:1f:77:e0:e1:03:48:15:19:
4a:a6:a9:64:64:ce:63:e4:e3:32:65:9e:e1:6d:42:
74:bf:41:f8:a0:6e:aa:97:87:86:55:f3:68:83:dd:
b2:99:e2:58:c7:e9:6d:d6:20:ec:a0:a9:38:7f:25:
2c:20:7f:4d:23:2a:62:e3:0b:bd:69:79:11:41:a1:
61:68:e4:38:fb:df:22:a4:aa:e4:5d:ae:c1:ea:a1:
83:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:63:CF:D0:88:93:0B:6A:42:10:4F:F8:C7:EC:2A:B2:CC:22:10:FA
X509v3 Authority Key Identifier:
keyid:06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a1:a0:de:32:94:9c:59:b4:7b:bf:8d:d4:4b:07:5b:78:ce:
ec:aa:6b:ea:57:b7:a4:45:57:57:ec:53:45:4e:72:d1:ed:11:
42:e8:70:8a:e8:95:1e:9b:ad:7d:d1:7c:89:cc:d5:bc:ab:28:
eb:dc:fb:c7:a3:46:1d:e3:3c:91:3e:6b:2b:94:6c:21:5d:a3:
e5:72:91:79:12:9b:bb:85:18:92:3e:ab:fd:b1:85:90:bc:8a:
94:40:e2:91:ef:3a:41:60:df:4c:17:a6:cf:dc:08:2b:a4:fd:
37:af:3a:bf:83:55:15:10:09:f1:14:57:1a:f3:90:6a:f4:5f:
82:b4:e4:ca:5d:f6:eb:8a:fd:c6:36:de:67:0c:91:9e:82:a0:
fd:21:a9:dd:c1:ea:72:ef:06:df:c8:52:07:b5:00:80:a9:cc:
71:83:59:78:47:d3:4d:a6:cd:9a:25:40:c7:ab:da:ea:1e:ca:
28:7d:33:a4:3c:ae:9c:10:52:e7:60:72:74:29:d0:da:b8:37:
8c:1a:de:3a:f5:39:ee:f0:bd:40:96:0c:4d:8c:8a:bd:e1:db:
a7:be:ec:c4:c8:5e:17:41:b8:54:90:ea:36:b0:c3:39:1b:8a:
3a:54:6a:ce:b4:53:e8:ef:3d:1e:0c:b5:04:a1:ce:b3:bd:c8:
9d:94:87:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSAJIOtgoG7mZYADXCgFbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDM5ZTcxY2I3MTUyMDRhODNjYzI1MzgyMmRjMjlhNjJj
Nzk5ZTYwHhcNMjYwNzI0MDQwMDIwWhcNMjYwNzI1MDQwMDIwWjAzMTEwLwYDVQQD
Eyg4NjYzY2ZkMDg4OTMwYjZhNDIxMDRmZjhjN2VjMmFiMmNjMjIxMGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ga7yprC6YYyReJAkAl05/OaCnCO
6cKlKUlB5xMXCIYyd/o6rDqlBnZEo/9XxB7YVgIq64tu6WtjKVuVpQ9HFwiZhRVv
uQrmS6iLgnSfhgCbqJv4XBQXLFWBi+5i3NJKZfOU/I1LLLrVXyaN83NnkFAq/dIL
GLCI5chZSeFTFxBG1wJeLGJSgAPKffvjUs88Bfj7cLoK3ydXJrdDxQyjjPDr66Nw
kPuXMjQ8H3fg4QNIFRlKpqlkZM5j5OMyZZ7hbUJ0v0H4oG6ql4eGVfNog92ymeJY
x+lt1iDsoKk4fyUsIH9NIypi4wu9aXkRQaFhaOQ4+98ipKrkXa7B6qGDZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZjz9CIkwtqQhBP+MfsKrLMIhD6MB8GA1UdIwQY
MBaAFAYDnnHLcVIEqDzCU4Itwppix5nmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lNjI4NzktMmM2OS00MGMzLWIxMTYt
MGU0Njg3NWQ0NWZkLzEvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9lNjI4NzktMmM2OS00MGMzLWIxMTYtMGU0Njg3NWQ0NWZk
LzEvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6Gg3jKU
nFm0e7+N1EsHW3jO7Kpr6le3pEVXV+xTRU5y0e0RQuhwiuiVHputfdF8iczVvKso
69z7x6NGHeM8kT5rK5RsIV2j5XKReRKbu4UYkj6r/bGFkLyKlEDike86QWDfTBem
z9wIK6T9N686v4NVFRAJ8RRXGvOQavRfgrTkyl3264r9xjbeZwyRnoKg/SGp3cHq
cu8G38hSB7UAgKnMcYNZeEfTTabNmiVAx6va6h7KKH0zpDyunBBS52BydCnQ2rg3
jBreOvU57vC9QJYMTYyKveHbp77sxMheF0G4VJDqNrDDORuKOlRqzrRT6O89Hgy1
BKHOs73InZSH8Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:18:59 2026 by rpki-client