
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File: Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier: lm1XkXC6PRSI4gdu52CIg/Y/XdV/62y8lWumj5sVxD4=
Subject key identifier: 09:7C:F1:22:B0:0A:21:7B:63:A5:C5:D5:10:97:77:48:F6:DE:D6:AA
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer: /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial: 01A0CD7F23E10D2FD911ED1235FFFB57A114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 09:00:56 +0000
Manifest this update: Wed 23 Sep 2026 09:00:56 +0000
Manifest next update: Thu 24 Sep 2026 09:00:56 +0000
Files and hashes: 1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: o5UZNERmcMh0HjQBGBQkvOwHUxt0guCADORZAdk9+i0=)
2: YQOC7uY6FRNmBO9ZN7PiM76yo6I.roa (hash: F4wrLCo6AyKDL70hM0i0er3GASQZx9E2NWI72xLZxxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7f:23:e1:0d:2f:d9:11:ed:12:35:ff:fb:57:a1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Validity
Not Before: Sep 23 09:00:56 2026 GMT
Not After : Sep 24 09:00:56 2026 GMT
Subject: CN=097cf122b00a217b63a5c5d510977748f6ded6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:ec:ea:64:0b:a5:19:ff:d2:7f:b7:e9:e5:
e3:39:9b:66:7a:4e:e1:e6:5d:e5:b7:93:6f:b0:44:
41:05:2f:50:59:fd:00:6f:a6:31:90:6f:8d:f3:b0:
d9:93:eb:d5:87:0a:ee:43:0f:7a:15:c4:27:4c:d0:
f0:9e:94:4d:5f:d6:76:46:35:f1:29:bb:1a:3c:d1:
01:6d:2c:86:d7:63:9e:1e:0d:36:2b:47:50:18:51:
a0:32:89:fc:8a:5f:15:b6:79:84:8d:01:f0:a6:77:
27:95:c1:ab:10:54:52:b9:18:4e:87:16:72:f8:e5:
90:dc:3f:34:ea:d4:a5:b1:ba:9a:cf:9f:e5:08:75:
83:55:49:18:83:33:2f:f7:e8:2f:00:b0:8a:db:a3:
05:71:0e:3f:58:2d:3f:d9:52:97:58:3e:44:a0:e1:
ae:54:26:0b:cf:6d:3a:e2:e1:cb:f2:3d:cb:b0:ed:
b2:58:c6:de:37:05:44:a7:86:80:bd:4e:12:0d:f0:
ea:3a:be:78:a9:a8:14:48:48:74:03:ea:84:3a:c3:
ae:ed:21:34:63:82:41:29:94:83:71:9c:97:30:ba:
cd:96:37:12:33:81:32:ae:be:28:ea:09:e6:3d:c4:
78:c9:c9:60:26:7e:ae:80:9a:7c:7e:ab:7d:23:96:
13:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7C:F1:22:B0:0A:21:7B:63:A5:C5:D5:10:97:77:48:F6:DE:D6:AA
X509v3 Authority Key Identifier:
keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0e:e6:94:7a:48:5c:8f:e2:df:d7:43:12:df:ee:a9:81:fc:
02:33:46:46:76:74:61:c9:01:e8:bc:1f:12:97:a9:23:df:43:
6d:c2:0d:49:aa:22:0c:aa:8e:b1:73:fa:6f:c5:46:71:19:4e:
84:5a:da:38:fa:17:4f:fe:69:87:c7:d4:0a:2d:0d:5b:70:bd:
14:04:6d:34:a5:61:a8:49:e1:ad:88:a4:ea:51:c1:48:52:00:
8e:d7:33:fc:8d:b9:7a:1c:35:b6:85:45:f4:d2:2d:52:92:7e:
47:bc:f6:83:e6:b0:fa:da:eb:42:19:df:69:dd:0b:70:29:cc:
28:87:7b:cb:6d:4f:9a:a7:c6:f8:78:29:4e:e6:45:75:04:e0:
61:3d:4e:c8:c1:8f:f2:4f:a3:9c:10:1a:8d:8c:24:17:c7:73:
eb:1f:af:48:18:3e:b1:ab:4a:ad:27:55:9b:e6:33:ed:86:48:
48:d7:4a:63:5e:f4:ba:b1:6b:c9:74:72:fe:ac:93:c8:fe:93:
eb:2e:8c:0b:82:65:e4:14:45:11:00:91:89:d2:f3:a9:79:cb:
9d:27:fd:68:4b:24:eb:4f:89:ca:71:ae:35:4e:28:a8:b2:6c:
d5:a1:ef:9a:c1:f4:a5:ba:b8:5b:ea:fd:e6:19:bd:1d:27:1b:
d7:f1:44:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:53:08 2026 by rpki-client