Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
File: BgPfkU3wTkf1a9li8vncPwQ0pdM.mft (raw, json)
Hash identifier: /G6vM/lLeztSys34/0aVPVBIdjuE6p7dIIzKakjVSio=
Subject key identifier: CA:D5:2F:A7:CF:33:64:4B:DF:2C:B4:66:97:1A:EF:05:8C:03:90:D7
Authority key identifier: 06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
Certificate issuer: /CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
Certificate serial: 019F916CAA4E4CF7C22382F1F6CB4027E605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
Manifest number: 0C11
Signing time: Fri 24 Jul 2026 00:00:45 +0000
Manifest this update: Fri 24 Jul 2026 00:00:45 +0000
Manifest next update: Sat 25 Jul 2026 00:00:45 +0000
Files and hashes: 1: BgPfkU3wTkf1a9li8vncPwQ0pdM.crl (hash: agjq7aA0noB5em83yQjY996jcY/nocFHSUE6+kegMn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:aa:4e:4c:f7:c2:23:82:f1:f6:cb:40:27:e6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
Validity
Not Before: Jul 24 00:00:45 2026 GMT
Not After : Jul 25 00:00:45 2026 GMT
Subject: CN=cad52fa7cf33644bdf2cb466971aef058c0390d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:65:72:51:13:90:b4:6d:4b:9e:c5:bb:a4:
49:d3:43:95:93:bb:20:f2:f8:c1:19:a0:21:26:ef:
ef:3f:f9:57:39:c9:bb:57:3e:d1:87:e0:d7:fb:b8:
c3:6e:6c:d4:f4:78:4d:44:c1:cd:68:af:fc:e4:f6:
c7:ff:16:3b:9b:06:94:2f:a3:22:b0:48:d7:c4:bd:
e2:ba:2f:bf:94:73:10:21:9a:b1:43:68:05:ed:c9:
f2:e3:ec:ed:b2:e4:47:80:67:fd:fa:41:fd:1c:a2:
ed:19:95:ae:7c:d5:36:cf:54:29:17:c9:4e:84:a3:
a9:81:5e:9e:3c:a9:12:f8:54:f0:8f:e3:b2:97:4d:
a2:2a:c5:1a:26:9b:58:db:35:b0:fc:28:07:15:52:
9e:97:27:6d:bc:6f:2e:93:d1:a6:a7:bd:a0:ee:e0:
53:5c:f3:6f:93:53:5a:19:c0:b6:e2:62:78:a4:7e:
42:e7:ce:d0:10:ce:13:50:1e:ea:8f:75:9c:3a:c5:
63:05:76:45:e9:6b:c7:fc:25:d7:57:ae:c1:77:98:
8a:4d:63:93:8b:cd:d8:70:ee:38:6e:ca:27:12:b6:
2b:2b:e2:6b:f4:bc:d1:3c:1b:cb:06:d8:e2:7e:6e:
f1:0e:18:bd:7c:d7:4b:75:87:49:16:79:dc:84:f6:
f3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D5:2F:A7:CF:33:64:4B:DF:2C:B4:66:97:1A:EF:05:8C:03:90:D7
X509v3 Authority Key Identifier:
keyid:06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ba:96:d9:b7:1f:28:6b:04:40:34:4d:98:af:ba:51:e2:fe:
46:84:ef:88:cb:67:e6:cc:34:44:cf:88:5f:01:32:5c:44:9d:
9b:86:07:f6:a4:4b:7e:4d:41:09:60:d0:b5:22:e4:e7:a8:de:
76:2b:a2:38:0e:5a:5f:12:d1:22:82:67:f5:ff:78:cd:58:28:
3e:05:11:2b:63:54:3f:59:98:f2:60:26:83:20:73:66:dc:f1:
74:0f:2e:36:94:4d:00:10:b2:61:0a:14:1e:04:67:71:2d:94:
b0:cf:ed:73:af:c8:92:a0:55:dc:d7:7e:c8:82:ba:73:9c:3c:
5a:0c:7c:83:51:53:2b:48:5f:d7:3d:48:ab:e4:b0:07:f1:cd:
ff:1f:87:9a:96:5d:5e:b8:62:c4:c0:57:16:14:e2:68:f3:db:
24:8f:32:22:36:c5:a8:c9:3d:34:ef:af:ec:e8:4e:ec:62:58:
2f:d3:00:e2:41:e8:25:12:9d:71:a4:a6:cd:70:6f:15:c0:d2:
66:f9:37:3e:54:29:c3:f6:fb:eb:18:ca:6c:cb:37:b4:4a:8d:
0f:14:c7:01:b2:5c:a2:ab:25:65:ef:9e:62:57:0f:ee:7e:5e:
d5:f7:41:2a:66:ec:3d:a1:d6:ee:7b:90:2e:71:07:af:79:7b:
fa:bd:00:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbKpOTPfCI4Lx9stAJ+YFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDNkZjkxNGRmMDRlNDdmNTZiZDk2MmYyZjlkYzNmMDQz
NGE1ZDMwHhcNMjYwNzI0MDAwMDQ1WhcNMjYwNzI1MDAwMDQ1WjAzMTEwLwYDVQQD
EyhjYWQ1MmZhN2NmMzM2NDRiZGYyY2I0NjY5NzFhZWYwNThjMDM5MGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSJlclETkLRtS57Fu6RJ00OVk7sg
8vjBGaAhJu/vP/lXOcm7Vz7Rh+DX+7jDbmzU9HhNRMHNaK/85PbH/xY7mwaUL6Mi
sEjXxL3iui+/lHMQIZqxQ2gF7cny4+ztsuRHgGf9+kH9HKLtGZWufNU2z1QpF8lO
hKOpgV6ePKkS+FTwj+Oyl02iKsUaJptY2zWw/CgHFVKelydtvG8uk9Gmp72g7uBT
XPNvk1NaGcC24mJ4pH5C587QEM4TUB7qj3WcOsVjBXZF6WvH/CXXV67Bd5iKTWOT
i83YcO44bsonErYrK+Jr9LzRPBvLBtjifm7xDhi9fNdLdYdJFnnchPbzOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrVL6fPM2RL3yy0Zpca7wWMA5DXMB8GA1UdIwQY
MBaAFAYD35FN8E5H9WvZYvL53D8ENKXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdQZmtVM3dUa2YxYTlsaTh2bmNQd1EwcGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85YjVlMjYtMDE0OC00ZjlmLWE0NmEt
YmM4NDI1YzYwNjA0LzEvQmdQZmtVM3dUa2YxYTlsaTh2bmNQd1EwcGRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS85YjVlMjYtMDE0OC00ZjlmLWE0NmEtYmM4NDI1YzYwNjA0
LzEvQmdQZmtVM3dUa2YxYTlsaTh2bmNQd1EwcGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrqW2bcf
KGsEQDRNmK+6UeL+RoTviMtn5sw0RM+IXwEyXESdm4YH9qRLfk1BCWDQtSLk56je
diuiOA5aXxLRIoJn9f94zVgoPgURK2NUP1mY8mAmgyBzZtzxdA8uNpRNABCyYQoU
HgRncS2UsM/tc6/IkqBV3Nd+yIK6c5w8Wgx8g1FTK0hf1z1Iq+SwB/HN/x+HmpZd
XrhixMBXFhTiaPPbJI8yIjbFqMk9NO+v7OhO7GJYL9MA4kHoJRKdcaSmzXBvFcDS
Zvk3PlQpw/b76xjKbMs3tEqNDxTHAbJcoqslZe+eYlcP7n5e1fdBKmbsPaHW7nuQ
LnEHr3l7+r0AzQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:01 2026 by rpki-client