Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
File: BgOecctxUgSoPMJTgi3CmmLHmeY.mft (raw, json)
Hash identifier: GaVVr7X7osEz6FMfNO4UqmyOiSfrHcESieaJo1vNvLg=
Subject key identifier: D2:45:A1:0D:15:49:E9:BE:1B:59:96:68:FE:1A:A3:09:D2:A8:F7:11
Authority key identifier: 06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
Certificate issuer: /CN=06039e71cb715204a83cc253822dc29a62c799e6
Certificate serial: 019E1D90EBB27623E69315E1AF4D1033A2A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
Manifest number: 0A17
Signing time: Tue 12 May 2026 19:01:37 +0000
Manifest this update: Tue 12 May 2026 19:01:37 +0000
Manifest next update: Wed 13 May 2026 19:01:37 +0000
Files and hashes: 1: BgOecctxUgSoPMJTgi3CmmLHmeY.crl (hash: 6WX8A3K5zV8/E8mz6swBk6NHZs+lIB+TpgI64c6yZT0=)
2: WsB2cpz5PeeV12FuRGXIMnfEpDA.roa (hash: RXGdsxXZdhMgqQg6njT8x//0fSXw5JT6Hs6Qaa1Fb6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:eb:b2:76:23:e6:93:15:e1:af:4d:10:33:a2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06039e71cb715204a83cc253822dc29a62c799e6
Validity
Not Before: May 12 19:01:37 2026 GMT
Not After : May 13 19:01:37 2026 GMT
Subject: CN=d245a10d1549e9be1b599668fe1aa309d2a8f711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:25:07:1e:60:98:1e:ee:3e:3e:86:e9:40:b4:
9f:45:aa:c3:03:65:12:cd:f6:f6:59:66:33:4d:c4:
0c:00:77:84:0d:10:38:e8:07:6e:81:25:0d:5d:55:
15:17:68:2c:58:c4:f5:d3:33:36:70:3e:64:1a:02:
63:e0:57:55:ba:97:fa:94:bb:07:54:7d:86:04:0e:
0a:a8:de:e6:5e:d2:4e:1f:35:e1:27:a1:7e:7a:18:
49:45:e1:50:44:60:87:75:26:bd:af:69:be:be:f5:
8e:c3:7c:d7:19:4b:a5:f8:c9:77:f4:67:df:1a:0a:
f8:fe:af:7e:7c:b0:58:41:f0:eb:58:e1:0d:3f:ed:
19:d3:c0:70:fb:be:12:9b:b6:3b:1e:c2:ab:d1:cc:
20:af:f8:63:44:54:af:dd:d7:51:75:76:d6:f4:09:
b8:17:73:d7:9e:e6:8a:94:83:eb:90:fa:cd:ec:f8:
cc:59:9c:8a:45:2c:2b:25:46:9b:46:6a:3d:d7:27:
44:7b:5a:85:bb:75:49:21:b7:7d:b6:63:0e:08:24:
18:cc:b2:f2:3c:4d:dc:86:a3:97:46:ee:7c:cb:28:
cc:15:88:19:d8:a8:2c:d7:86:51:b7:42:44:b0:9e:
0c:05:29:40:fb:bf:4d:0e:7a:bb:ec:33:00:80:88:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:45:A1:0D:15:49:E9:BE:1B:59:96:68:FE:1A:A3:09:D2:A8:F7:11
X509v3 Authority Key Identifier:
keyid:06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2c:b1:aa:08:78:b5:eb:63:0f:a2:e5:d1:c4:c4:89:ec:e8:
4f:0d:19:dc:0f:e6:f9:a8:97:76:fb:8d:9f:af:5d:e8:d7:4b:
0a:60:e6:ac:dc:43:58:53:0b:c8:30:2c:02:bd:f4:8d:dc:f1:
ee:2d:e2:d5:eb:05:84:70:7f:81:21:c5:67:49:9d:42:a4:91:
35:b7:45:20:24:5e:c5:6d:fe:c4:e5:2c:8e:2b:7d:78:f3:1d:
b6:97:26:49:55:86:8e:de:83:df:b0:22:aa:6f:b8:34:ef:a7:
42:9b:6c:83:d3:35:7c:70:b4:8b:f9:cc:e2:43:2b:83:1a:45:
6c:53:df:cc:25:fa:5c:8e:15:4c:51:3d:cf:fb:4b:13:54:0f:
9f:33:4c:16:44:59:5f:27:25:4b:f7:e2:88:18:7c:67:82:99:
c6:12:c7:1d:2a:67:4d:d7:9e:eb:12:f4:a9:e4:af:d4:f8:74:
ae:32:0b:9e:a4:cd:1d:b6:8a:02:8e:94:15:b4:e5:db:52:03:
4d:7f:24:17:08:20:f3:3c:f1:3c:f4:3e:9e:63:de:93:2e:3e:
b7:27:d7:0e:99:0a:7a:8e:58:bf:d2:a3:0b:5f:13:a2:ee:9a:
fb:1f:1f:e9:b9:90:5d:f5:e3:6e:85:f2:e6:0f:df:35:77:9e:
53:7f:31:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:49:44 2026 by rpki-client