Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
File: BgOecctxUgSoPMJTgi3CmmLHmeY.mft (raw, json)
Hash identifier: qkNS5ZtDWzEzHm9FIQht2HKfEMvVZHEC6wV0ZY5UrJQ=
Subject key identifier: 9A:7E:E3:1C:97:54:5A:67:88:48:AF:35:32:BA:B0:5A:87:FB:C7:67
Authority key identifier: 06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
Certificate issuer: /CN=06039e71cb715204a83cc253822dc29a62c799e6
Certificate serial: 01A0CD10C547280512A2CFB3A2D8CE3E239F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
Manifest number: 0B7B
Signing time: Wed 23 Sep 2026 07:00:23 +0000
Manifest this update: Wed 23 Sep 2026 07:00:23 +0000
Manifest next update: Thu 24 Sep 2026 07:00:23 +0000
Files and hashes: 1: BgOecctxUgSoPMJTgi3CmmLHmeY.crl (hash: UdNI8Fi+EqH5IvWcgYhEQKxkvBLzrPYOgWuXMUwVIQk=)
2: WsB2cpz5PeeV12FuRGXIMnfEpDA.roa (hash: RXGdsxXZdhMgqQg6njT8x//0fSXw5JT6Hs6Qaa1Fb6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:c5:47:28:05:12:a2:cf:b3:a2:d8:ce:3e:23:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06039e71cb715204a83cc253822dc29a62c799e6
Validity
Not Before: Sep 23 07:00:23 2026 GMT
Not After : Sep 24 07:00:23 2026 GMT
Subject: CN=9a7ee31c97545a678848af3532bab05a87fbc767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c1:15:cc:c4:04:1f:61:55:c4:54:e8:bf:9c:
31:e2:92:e0:65:f5:37:ab:ff:5d:80:4e:95:c7:79:
38:1e:a4:09:e8:97:b3:04:e1:6d:b2:94:20:4a:98:
23:cf:d9:e4:7c:b6:07:15:4b:c1:5b:d1:73:73:ec:
53:b5:4f:ff:50:b2:fb:3e:aa:bf:8b:4d:9f:1b:7a:
8a:a4:6c:a3:8c:58:06:4c:19:f2:df:f9:11:ee:6b:
46:e0:85:1f:57:41:47:c4:bb:8d:59:ff:71:14:0f:
c4:75:89:0d:d9:7c:cb:f6:5b:fe:55:d9:6c:75:27:
62:4b:79:67:77:44:61:be:a8:86:04:bb:e0:0e:c9:
91:db:56:53:34:02:ca:8a:90:dd:d3:20:ec:ba:5c:
e3:d9:5e:d5:21:8a:89:c0:3d:18:35:34:f0:29:73:
57:e4:ad:b8:d3:28:78:36:b9:45:5b:d0:c2:77:ac:
54:58:1d:bc:10:7c:2b:ef:d9:d9:af:7a:90:2d:39:
63:35:d6:fa:a7:d8:86:bf:00:ef:44:31:1f:18:2a:
6b:d0:83:b8:04:63:f1:38:b3:17:37:84:a0:f7:4e:
bc:6d:9a:3d:65:10:b0:51:35:e4:e1:69:36:36:b2:
3e:4b:bf:53:18:aa:31:df:65:a8:e3:be:8d:ab:4e:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7E:E3:1C:97:54:5A:67:88:48:AF:35:32:BA:B0:5A:87:FB:C7:67
X509v3 Authority Key Identifier:
keyid:06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4e:13:ba:59:ad:e8:a7:ff:44:e0:b6:fa:5d:52:3c:f8:9a:
e4:4c:ee:0b:ae:4b:8d:67:21:cc:a9:f9:bc:33:ec:16:1b:e3:
dd:62:89:91:e4:11:c0:3f:cd:9c:b9:ed:59:fa:1d:ae:05:f7:
71:23:fa:b0:d9:40:91:df:b7:e8:8b:f8:94:39:74:f9:e8:34:
46:69:d8:19:d1:7f:64:c1:56:cd:7d:5d:98:b9:36:18:9d:d7:
dd:8a:47:30:b3:f3:9e:ca:08:d7:c7:4e:89:2c:32:04:67:fc:
62:25:a6:7a:f9:a5:83:8c:5f:7b:2c:fd:ba:24:22:a4:a8:31:
3f:ae:4c:37:6a:42:32:b6:54:93:84:ca:b3:1d:3e:6e:11:2c:
64:9b:ff:77:fb:4c:17:cc:dd:89:f4:83:15:7e:5a:d9:4e:19:
d1:78:41:f9:b3:17:2a:5d:f0:49:9b:da:17:9d:9b:e6:0d:53:
ef:25:43:57:f0:eb:63:e3:de:5a:1a:3e:f7:4d:25:30:d7:01:
cd:d1:11:a8:7b:e9:3d:85:fc:4e:a3:44:a4:33:a5:f3:cd:85:
04:bd:7b:76:5a:c4:4f:24:aa:68:e0:9a:c3:59:fb:82:ab:7e:
e6:e8:8a:cc:6b:ad:55:28:1f:4e:19:9b:7d:56:d7:d1:11:46:
d2:02:9f:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNEMVHKAUSos+zotjOPiOfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDM5ZTcxY2I3MTUyMDRhODNjYzI1MzgyMmRjMjlhNjJj
Nzk5ZTYwHhcNMjYwOTIzMDcwMDIzWhcNMjYwOTI0MDcwMDIzWjAzMTEwLwYDVQQD
Eyg5YTdlZTMxYzk3NTQ1YTY3ODg0OGFmMzUzMmJhYjA1YTg3ZmJjNzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8EVzMQEH2FVxFTov5wx4pLgZfU3
q/9dgE6Vx3k4HqQJ6JezBOFtspQgSpgjz9nkfLYHFUvBW9Fzc+xTtU//ULL7Pqq/
i02fG3qKpGyjjFgGTBny3/kR7mtG4IUfV0FHxLuNWf9xFA/EdYkN2XzL9lv+Vdls
dSdiS3lnd0RhvqiGBLvgDsmR21ZTNALKipDd0yDsulzj2V7VIYqJwD0YNTTwKXNX
5K240yh4NrlFW9DCd6xUWB28EHwr79nZr3qQLTljNdb6p9iGvwDvRDEfGCpr0IO4
BGPxOLMXN4Sg9068bZo9ZRCwUTXk4Wk2NrI+S79TGKox32Wo476Nq050RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJp+4xyXVFpniEivNTK6sFqH+8dnMB8GA1UdIwQY
MBaAFAYDnnHLcVIEqDzCU4Itwppix5nmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lNjI4NzktMmM2OS00MGMzLWIxMTYt
MGU0Njg3NWQ0NWZkLzEvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9lNjI4NzktMmM2OS00MGMzLWIxMTYtMGU0Njg3NWQ0NWZk
LzEvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATk4Tulmt
6Kf/ROC2+l1SPPia5EzuC65LjWchzKn5vDPsFhvj3WKJkeQRwD/NnLntWfodrgX3
cSP6sNlAkd+36Iv4lDl0+eg0RmnYGdF/ZMFWzX1dmLk2GJ3X3YpHMLPznsoI18dO
iSwyBGf8YiWmevmlg4xfeyz9uiQipKgxP65MN2pCMrZUk4TKsx0+bhEsZJv/d/tM
F8zdifSDFX5a2U4Z0XhB+bMXKl3wSZvaF52b5g1T7yVDV/DrY+PeWho+900lMNcB
zdERqHvpPYX8TqNEpDOl882FBL17dlrETySqaOCaw1n7gqt+5uiKzGutVSgfThmb
fVbX0RFG0gKfJQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:40:55 2026 by rpki-client