Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
File: BgPfkU3wTkf1a9li8vncPwQ0pdM.mft (raw, json)
Hash identifier: dNuCMTVT/wTfoDhFs54vyO0eC6RTPQ1JC4pXU26/YCI=
Subject key identifier: A6:60:99:0D:65:35:7E:9F:4D:95:5B:2F:FC:EB:FD:3B:BA:C3:3C:AD
Authority key identifier: 06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
Certificate issuer: /CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
Certificate serial: 019D2772357600D6B1B7799CB57EE1DA15A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
Manifest number: 0AD1
Signing time: Thu 26 Mar 2026 00:01:29 +0000
Manifest this update: Thu 26 Mar 2026 00:01:29 +0000
Manifest next update: Fri 27 Mar 2026 00:01:29 +0000
Files and hashes: 1: BgPfkU3wTkf1a9li8vncPwQ0pdM.crl (hash: tHI4p16YkjclRYjGQmVvJkGhv+5rseI9nUpxbsAa8mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:35:76:00:d6:b1:b7:79:9c:b5:7e:e1:da:15:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
Validity
Not Before: Mar 26 00:01:29 2026 GMT
Not After : Mar 27 00:01:29 2026 GMT
Subject: CN=a660990d65357e9f4d955b2ffcebfd3bbac33cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:25:66:f6:83:53:b6:32:c2:cb:7a:be:4a:
8a:e0:82:d1:ee:9a:b4:af:4a:22:04:9a:e6:8e:c6:
75:f9:65:36:80:bb:50:69:0f:1f:7b:d2:dd:57:b7:
1d:7a:6e:83:40:f6:db:27:f0:ce:1a:47:03:a6:04:
bf:30:d9:10:6c:cb:fd:3c:f4:c6:47:b7:9d:cf:62:
df:ed:cc:fd:d1:a4:14:13:48:96:eb:61:77:24:e2:
dd:f5:61:22:fa:1f:92:bf:9a:8f:3b:4d:78:9b:a7:
af:a4:6b:ca:29:fb:d8:1f:20:39:70:28:a6:49:29:
c5:ac:77:04:fd:89:1d:92:df:14:74:b7:66:d3:11:
e9:19:73:f2:2a:6e:a0:50:93:30:f0:a9:9a:8a:7b:
3d:66:3c:99:56:6f:4f:05:c2:64:6a:8d:91:ea:c9:
0f:5d:69:18:fe:f4:f6:ca:e9:61:7c:8d:b0:61:b7:
47:43:d3:77:e9:c7:6c:62:a8:99:e8:22:23:67:c2:
3d:a1:35:1f:f4:1f:ea:3a:9d:fd:23:fe:a1:0b:2a:
e4:46:84:ce:dc:20:3d:01:b8:d1:0b:9a:2b:f2:ca:
0b:03:16:e2:3d:30:d1:b8:76:8b:da:46:ee:89:3a:
c4:4c:4d:c4:45:ba:b8:60:d6:71:6f:7c:63:26:3f:
3c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:60:99:0D:65:35:7E:9F:4D:95:5B:2F:FC:EB:FD:3B:BA:C3:3C:AD
X509v3 Authority Key Identifier:
keyid:06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:af:f8:27:ad:59:30:50:d3:8d:5e:e8:7d:51:6f:c7:ea:57:
a6:4b:5d:32:5f:c7:ae:da:dd:e7:cc:f0:eb:99:01:40:c8:0d:
1a:3b:ec:c9:87:0a:c6:6c:e4:96:23:bb:df:c1:a6:31:28:89:
ec:b5:99:1b:50:f1:4c:45:33:e4:e7:fb:96:78:5c:8d:d1:66:
ac:03:a7:39:bd:51:63:af:e2:c7:0e:56:b7:19:f4:f6:80:e7:
0a:bb:af:56:9f:f3:52:17:b8:1a:41:bf:31:79:8a:83:5c:81:
03:1f:4a:bd:d6:8b:cf:9a:68:9f:98:25:b3:df:7e:e0:13:d9:
3d:c3:88:02:e5:24:35:0a:d5:7d:ba:ff:7f:4e:eb:4f:fb:c3:
13:74:50:c9:e7:12:18:4d:1c:47:00:ce:f0:f7:d9:51:b8:7c:
07:c6:88:48:8f:cc:2c:ec:b7:0b:21:58:3e:d1:da:fa:b6:8f:
ae:52:c7:a0:73:c2:7e:62:59:eb:d3:8f:3c:dd:b7:b1:0c:c7:
50:e2:23:a0:96:db:62:84:87:3d:ca:6e:c8:0f:b5:c4:26:9f:
ea:40:b6:a2:56:f1:fd:eb:6f:20:6a:fd:39:b0:2a:24:5f:40:
f5:52:be:cd:c2:94:52:67:e3:1f:00:24:43:e9:ae:d6:37:64:
2e:b7:26:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncjV2ANaxt3mctX7h2hWlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDNkZjkxNGRmMDRlNDdmNTZiZDk2MmYyZjlkYzNmMDQz
NGE1ZDMwHhcNMjYwMzI2MDAwMTI5WhcNMjYwMzI3MDAwMTI5WjAzMTEwLwYDVQQD
EyhhNjYwOTkwZDY1MzU3ZTlmNGQ5NTViMmZmY2ViZmQzYmJhYzMzY2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs18lZvaDU7Yywst6vkqK4ILR7pq0
r0oiBJrmjsZ1+WU2gLtQaQ8fe9LdV7cdem6DQPbbJ/DOGkcDpgS/MNkQbMv9PPTG
R7edz2Lf7cz90aQUE0iW62F3JOLd9WEi+h+Sv5qPO014m6evpGvKKfvYHyA5cCim
SSnFrHcE/Ykdkt8UdLdm0xHpGXPyKm6gUJMw8Kmains9ZjyZVm9PBcJkao2R6skP
XWkY/vT2yulhfI2wYbdHQ9N36cdsYqiZ6CIjZ8I9oTUf9B/qOp39I/6hCyrkRoTO
3CA9AbjRC5or8soLAxbiPTDRuHaL2kbuiTrETE3ERbq4YNZxb3xjJj88JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZgmQ1lNX6fTZVbL/zr/Tu6wzytMB8GA1UdIwQY
MBaAFAYD35FN8E5H9WvZYvL53D8ENKXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdQZmtVM3dUa2YxYTlsaTh2bmNQd1EwcGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85YjVlMjYtMDE0OC00ZjlmLWE0NmEt
YmM4NDI1YzYwNjA0LzEvQmdQZmtVM3dUa2YxYTlsaTh2bmNQd1EwcGRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS85YjVlMjYtMDE0OC00ZjlmLWE0NmEtYmM4NDI1YzYwNjA0
LzEvQmdQZmtVM3dUa2YxYTlsaTh2bmNQd1EwcGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6/4J61Z
MFDTjV7ofVFvx+pXpktdMl/Hrtrd58zw65kBQMgNGjvsyYcKxmzkliO738GmMSiJ
7LWZG1DxTEUz5Of7lnhcjdFmrAOnOb1RY6/ixw5Wtxn09oDnCruvVp/zUhe4GkG/
MXmKg1yBAx9KvdaLz5pon5gls99+4BPZPcOIAuUkNQrVfbr/f07rT/vDE3RQyecS
GE0cRwDO8PfZUbh8B8aISI/MLOy3CyFYPtHa+raPrlLHoHPCfmJZ69OPPN23sQzH
UOIjoJbbYoSHPcpuyA+1xCaf6kC2olbx/etvIGr9ObAqJF9A9VK+zcKUUmfjHwAk
Q+mu1jdkLrcmhg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:50 2026 by rpki-client