Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File: Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier: lBxCidiZocffKu5AgRWeMBenftRl6sj/KPKdDucYb64=
Subject key identifier: C9:2B:26:3D:2A:88:2A:27:53:17:02:FC:4E:72:E9:FB:B6:10:75:D6
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer: /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial: 019E1C0F85434AB6336384F537801C953F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 12:00:39 +0000
Manifest this update: Tue 12 May 2026 12:00:39 +0000
Manifest next update: Wed 13 May 2026 12:00:39 +0000
Files and hashes: 1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: +vfRjaeXxHApbq3P8PyVBphU10T+zhIB+9ETSBLSsJo=)
2: YQOC7uY6FRNmBO9ZN7PiM76yo6I.roa (hash: F4wrLCo6AyKDL70hM0i0er3GASQZx9E2NWI72xLZxxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:85:43:4a:b6:33:63:84:f5:37:80:1c:95:3f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Validity
Not Before: May 12 12:00:39 2026 GMT
Not After : May 13 12:00:39 2026 GMT
Subject: CN=c92b263d2a882a27531702fc4e72e9fbb61075d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:43:75:2d:5a:d2:04:d3:f5:79:77:95:42:48:
7a:12:3b:8b:5d:2a:b7:e4:25:39:d8:2a:03:a0:bd:
34:90:ab:9f:e7:12:06:1b:39:5e:a0:22:09:ed:75:
d4:9b:4a:c8:59:20:b3:c3:de:69:a0:0a:63:60:0a:
8e:21:82:21:9e:ad:ca:a3:f6:48:e3:36:c8:f0:e1:
4b:9b:9c:78:61:77:d5:eb:c6:34:03:af:c5:83:ca:
38:69:68:f3:ac:72:30:3b:7e:5e:29:85:f3:0d:4c:
ff:8f:17:a4:bd:59:3c:67:f3:89:b0:f3:0d:78:72:
ac:93:be:a5:7a:07:a5:d1:ed:8a:58:0a:7d:59:f3:
23:3c:2d:2b:c5:04:a1:46:6a:ea:7e:f0:9d:15:43:
ac:a0:71:6a:2e:fd:a2:1c:9d:27:ad:7d:64:89:ce:
44:40:a2:51:80:23:67:08:05:ca:9f:ab:67:24:f1:
15:40:4b:d5:e0:42:4c:8f:af:10:4b:d8:61:56:f7:
94:fe:2a:5b:6a:be:94:94:20:21:e9:48:0d:9c:d5:
66:67:9b:2c:fb:4c:df:fb:9f:bb:86:a6:a7:7b:28:
bc:6f:05:45:a8:af:93:cd:52:d4:3c:2b:4d:3d:8d:
e6:e1:75:1c:b6:13:7e:e2:28:10:50:33:3b:86:d4:
03:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2B:26:3D:2A:88:2A:27:53:17:02:FC:4E:72:E9:FB:B6:10:75:D6
X509v3 Authority Key Identifier:
keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:92:85:dc:ab:0b:e8:ee:b4:e8:9e:4f:e1:a2:3b:60:2e:49:
2f:e1:9e:4a:90:bf:9d:b1:25:bc:f8:13:71:4e:f4:d4:26:5e:
cd:66:15:52:fd:cd:c6:e4:e9:af:fa:5b:0e:22:96:72:5d:33:
d4:aa:af:ac:54:a8:4d:b0:1a:d6:8f:eb:a9:66:b3:e2:8e:bf:
4d:fa:de:19:cd:f9:f4:2b:d4:41:17:3d:bf:28:f3:85:75:05:
4f:70:e7:c7:65:05:35:3b:9d:ae:3b:85:54:cf:30:42:0a:2d:
c6:6f:2c:13:5f:06:2d:52:ce:dc:6c:3e:72:fe:73:d8:c2:64:
18:80:4d:95:a1:66:e3:ed:fc:73:0e:c9:1d:68:9b:46:06:60:
fe:ff:96:2b:3f:21:9c:cc:93:24:83:e6:3c:80:1e:08:4d:73:
5b:80:8f:ee:ad:0a:e0:a0:31:41:a7:dc:90:5c:54:15:fb:33:
0a:a1:f6:8e:0f:86:fb:65:bf:7a:6d:f2:de:2d:6e:85:7e:16:
bf:4b:3c:ab:57:8a:2e:9b:3b:3f:bf:bc:6b:48:8e:26:e3:d2:
d6:fa:16:eb:10:da:57:84:13:85:76:15:e3:0f:49:9f:a7:31:
98:d9:d0:4d:b9:21:0f:c1:fa:30:af:c6:7d:c8:b3:87:84:6d:
bb:2a:a4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:30 2026 by rpki-client