Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
File: BG82Rli2TivxUNIPyDjDZCB5deI.mft (raw, json)
Hash identifier: 7J9d2CqA621ylggi+gOgUDoW1hTye5Qp0ajd0bWG6/s=
Subject key identifier: 31:4E:D3:37:50:E7:F4:C5:11:60:72:AE:20:16:14:E8:3E:95:0C:8D
Authority key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
Certificate issuer: /CN=046f364658b64e2bf150d20fc838c364207975e2
Certificate serial: 019D27E02E6282DCD3E1D6DF282CF485E314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:01:36 +0000
Manifest this update: Thu 26 Mar 2026 02:01:36 +0000
Manifest next update: Fri 27 Mar 2026 02:01:36 +0000
Files and hashes: 1: BG82Rli2TivxUNIPyDjDZCB5deI.crl (hash: 8MZxI8hJkMUeDlipld7wHWBS4TntuhPdobJEWjbKKpw=)
2: MrmdJdrahes4YHrf8GzXfXRAQTo.roa (hash: KDHItLe9nk7zEElA0XEEmNLAdVnKqz0qSQ47JBnQBmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:2e:62:82:dc:d3:e1:d6:df:28:2c:f4:85:e3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046f364658b64e2bf150d20fc838c364207975e2
Validity
Not Before: Mar 26 02:01:36 2026 GMT
Not After : Mar 27 02:01:36 2026 GMT
Subject: CN=314ed33750e7f4c5116072ae201614e83e950c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:a3:d9:22:6d:f1:49:62:d5:34:5f:9a:7c:
e5:8a:84:c5:6c:41:55:03:fb:ca:8d:10:20:1e:f1:
d2:b9:03:3f:eb:af:2f:0b:2f:12:61:83:09:fa:0d:
14:40:5c:c7:5d:47:a7:22:19:f5:43:e3:ef:22:c1:
37:96:74:e1:bd:6e:ff:aa:c1:3f:97:1c:23:95:d1:
5d:8b:a8:48:99:de:09:a1:e9:3c:f2:97:13:68:44:
61:0a:3d:0a:75:9b:25:23:67:56:5a:9b:4a:8c:36:
c5:ac:15:4e:08:af:2b:0d:d0:f9:de:36:83:d1:1f:
be:ba:70:eb:de:ba:9a:ac:97:f0:e3:ec:66:5b:37:
da:cd:62:b4:2c:ff:f3:6a:d4:65:3f:15:f3:af:90:
ef:48:e5:74:b5:3a:ef:49:6a:95:93:44:80:3b:4e:
8b:8e:ca:8f:99:da:b4:63:99:c3:30:f1:9d:97:4e:
40:b6:e6:7d:81:db:d5:a4:1d:7c:c5:a0:00:d5:e1:
63:34:6a:f7:62:a8:0a:c7:68:c4:e8:44:13:9d:1c:
b2:4d:c3:a5:42:59:3e:c0:8d:74:49:64:f6:da:e5:
94:7a:91:0b:40:60:7d:94:f5:d7:d5:4e:77:35:90:
f6:30:5e:f0:31:b0:a4:22:6a:75:ca:25:67:41:1a:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4E:D3:37:50:E7:F4:C5:11:60:72:AE:20:16:14:E8:3E:95:0C:8D
X509v3 Authority Key Identifier:
keyid:04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fc:20:24:b1:3d:68:7a:9d:24:74:c1:55:9a:04:ad:25:a5:
07:c9:7a:2a:25:df:7b:34:0e:94:81:99:fd:39:98:ac:8e:9c:
ad:a8:c3:42:81:af:1c:19:e0:97:23:88:02:23:78:1a:66:c5:
8a:4e:b4:a0:51:d9:c7:05:61:f7:fb:1c:8f:e0:3a:65:47:bc:
ca:63:0e:d2:43:e2:09:e8:c1:7e:82:98:52:ca:71:b2:f2:2d:
96:aa:62:a9:ad:be:31:0b:6d:3c:fa:2a:72:78:94:fc:80:cc:
c8:19:26:ad:88:25:5a:85:d4:87:44:04:c8:1b:2b:b9:ea:1a:
cc:be:d6:5a:e5:c8:54:0a:47:89:3f:a1:de:34:b1:c5:81:8b:
ce:8b:8b:79:40:c3:f2:fd:60:3c:91:11:6c:fb:06:d6:2d:5a:
84:7f:ac:c3:e8:93:66:ef:8a:46:de:5c:4b:b6:92:2c:3a:a5:
ea:55:45:15:d2:dc:04:23:1b:73:6e:65:b3:e5:da:5e:c7:96:
80:d7:e4:81:f6:0a:0a:85:28:bb:87:3d:ee:3c:33:c8:00:45:
f5:8b:71:c6:92:ce:76:b7:25:68:19:25:67:d0:3c:15:7e:6e:
0b:d9:f2:01:c0:a3:6a:e3:23:46:47:65:4f:5e:a5:49:64:e4:
72:20:c0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:54:33 2026 by rpki-client