Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File: Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier: Zyvt2vnoVPtyBV2vded92RY54uyIHrcLVEI4RYZk5Wk=
Subject key identifier: F1:21:C3:84:02:A8:10:3C:6E:B7:DE:46:E5:CB:79:A1:5D:BC:4E:B9
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer: /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial: 019D28BB4B140BC89505556957C64969B2CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:00:56 +0000
Manifest this update: Thu 26 Mar 2026 06:00:56 +0000
Manifest next update: Fri 27 Mar 2026 06:00:56 +0000
Files and hashes: 1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: /LqXHvzBehYvEO9ncIyJR5X7j8TZwHldrYhQpq0A3jI=)
2: YQOC7uY6FRNmBO9ZN7PiM76yo6I.roa (hash: F4wrLCo6AyKDL70hM0i0er3GASQZx9E2NWI72xLZxxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:4b:14:0b:c8:95:05:55:69:57:c6:49:69:b2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Validity
Not Before: Mar 26 06:00:56 2026 GMT
Not After : Mar 27 06:00:56 2026 GMT
Subject: CN=f121c38402a8103c6eb7de46e5cb79a15dbc4eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:22:f1:7c:d9:1b:47:19:51:f2:55:3a:57:1c:
5e:ad:83:18:56:a7:cd:ab:a7:c1:3a:5b:52:db:21:
59:17:4d:1c:0a:bb:d0:46:d2:7d:d1:a1:27:17:b0:
63:ee:52:5b:09:43:af:d3:60:a3:ea:d7:3b:a8:dc:
fc:d4:1c:7d:05:64:78:5c:33:88:ba:a4:39:c6:38:
eb:22:9f:ff:55:67:7f:ba:68:74:dd:f4:d6:88:c1:
9f:1c:67:69:71:13:30:b3:5c:8f:85:92:2e:af:c2:
6e:fa:54:7a:2e:5f:5b:95:d5:31:e6:b2:06:8c:0a:
dd:79:de:d4:cc:e7:a0:a0:26:b6:70:a7:85:bc:d0:
21:20:e9:a3:70:20:9a:17:68:ec:18:18:7f:4b:d7:
26:08:0d:4f:55:3c:51:64:0d:ca:21:fd:bb:c1:c8:
b2:8b:29:f4:b9:1e:4a:12:3c:eb:fd:9b:02:ed:ca:
df:4f:a7:1c:77:29:c9:3d:15:2d:20:84:43:8d:20:
87:d9:61:31:17:6d:5b:0a:e0:6d:aa:19:0d:8c:49:
85:0c:93:18:fc:45:89:5d:08:f6:67:51:04:17:35:
19:60:f7:19:27:e9:35:b6:ac:1b:aa:ae:7b:f1:95:
b5:9c:49:b8:72:ab:47:84:c8:c4:39:64:1f:e0:3f:
87:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:21:C3:84:02:A8:10:3C:6E:B7:DE:46:E5:CB:79:A1:5D:BC:4E:B9
X509v3 Authority Key Identifier:
keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:de:5b:9f:2c:3e:4e:0c:b7:a6:1a:42:f5:27:91:e5:fa:4d:
2b:41:13:fa:ff:f5:a6:d9:5b:34:1a:11:be:f3:80:53:c7:b0:
35:cc:b9:8b:77:0a:8f:a0:af:42:a3:53:5e:f6:df:36:ac:31:
34:7e:ad:3a:7f:58:39:91:16:57:b7:bc:05:c3:b5:0c:b3:53:
b8:1d:20:38:f0:d3:95:31:0e:26:4b:00:fc:68:da:2c:50:f3:
c9:35:5d:10:61:65:52:22:6d:bf:1e:35:2f:29:9b:38:21:08:
a8:75:1c:07:7e:61:67:b7:8a:fa:4a:15:5b:54:a7:fb:07:f6:
51:19:91:a4:aa:3b:6f:33:36:e1:17:87:4b:49:6b:8d:96:ac:
56:c3:a4:39:61:f3:c6:47:f6:2e:2e:51:f2:0e:cd:19:9c:87:
77:2d:54:f4:7f:d5:56:02:51:cf:d2:67:33:ae:7f:c1:62:1c:
c1:c5:29:64:a2:21:b6:87:14:df:ac:0f:72:2e:78:15:24:df:
84:1f:43:42:4d:d5:b7:e5:5b:73:f4:e6:39:a3:3a:e5:92:90:
d0:34:15:c8:e7:63:1a:49:de:a8:d7:c0:98:7c:9e:57:f0:bf:
8d:fa:38:74:10:8c:17:c9:59:33:c4:95:78:11:05:45:4e:6e:
f6:7c:d7:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou0sUC8iVBVVpV8ZJabLNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDhhZGU4NmExY2NmN2E0ODNiNGMyOTYyMDQ1ZGI4ZDBl
ZjgyNmQwHhcNMjYwMzI2MDYwMDU2WhcNMjYwMzI3MDYwMDU2WjAzMTEwLwYDVQQD
EyhmMTIxYzM4NDAyYTgxMDNjNmViN2RlNDZlNWNiNzlhMTVkYmM0ZWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CLxfNkbRxlR8lU6VxxerYMYVqfN
q6fBOltS2yFZF00cCrvQRtJ90aEnF7Bj7lJbCUOv02Cj6tc7qNz81Bx9BWR4XDOI
uqQ5xjjrIp//VWd/umh03fTWiMGfHGdpcRMws1yPhZIur8Ju+lR6Ll9bldUx5rIG
jArded7UzOegoCa2cKeFvNAhIOmjcCCaF2jsGBh/S9cmCA1PVTxRZA3KIf27wciy
iyn0uR5KEjzr/ZsC7crfT6ccdynJPRUtIIRDjSCH2WExF21bCuBtqhkNjEmFDJMY
/EWJXQj2Z1EEFzUZYPcZJ+k1tqwbqq578ZW1nEm4cqtHhMjEOWQf4D+HHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEhw4QCqBA8brfeRuXLeaFdvE65MB8GA1UdIwQY
MBaAFAYIrehqHM96SDtMKWIEXbjQ74JtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTk4ZmItZTY3MC00Y2Y0LTgxYTQt
NDIxOTAyMjM1MGZhLzEvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yYTk4ZmItZTY3MC00Y2Y0LTgxYTQtNDIxOTAyMjM1MGZh
LzEvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOd5bnyw+
Tgy3phpC9SeR5fpNK0ET+v/1ptlbNBoRvvOAU8ewNcy5i3cKj6CvQqNTXvbfNqwx
NH6tOn9YOZEWV7e8BcO1DLNTuB0gOPDTlTEOJksA/GjaLFDzyTVdEGFlUiJtvx41
LymbOCEIqHUcB35hZ7eK+koVW1Sn+wf2URmRpKo7bzM24ReHS0lrjZasVsOkOWHz
xkf2Li5R8g7NGZyHdy1U9H/VVgJRz9JnM65/wWIcwcUpZKIhtocU36wPci54FSTf
hB9DQk3Vt+Vbc/TmOaM65ZKQ0DQVyOdjGkneqNfAmHyeV/C/jfo4dBCMF8lZM8SV
eBEFRU5u9nzXBQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:15:45 2026 by rpki-client