Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
File: BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json)
Hash identifier: ybqV/czgnw5KwY2jjNYdnGaH06VGwG/203CzDfp2OLw=
Subject key identifier: 09:4E:12:EA:FF:46:26:B7:42:6B:2E:79:31:09:D1:ED:8B:CB:26:A2
Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
Certificate issuer: /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Certificate serial: 019D29CE54308D7459BD674E45644F3995F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
Manifest number: 0D3E
Signing time: Thu 26 Mar 2026 11:01:20 +0000
Manifest this update: Thu 26 Mar 2026 11:01:20 +0000
Manifest next update: Fri 27 Mar 2026 11:01:20 +0000
Files and hashes: 1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: rGEFYYColqP3HWbOcaKRIpLp+UIfG40ub4qZpD/DbEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:54:30:8d:74:59:bd:67:4e:45:64:4f:39:95:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Validity
Not Before: Mar 26 11:01:20 2026 GMT
Not After : Mar 27 11:01:20 2026 GMT
Subject: CN=094e12eaff4626b7426b2e793109d1ed8bcb26a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:f9:28:82:fa:61:bb:03:fe:3a:80:b4:a5:
e3:57:35:b8:27:79:af:b8:f3:1e:41:bb:02:80:e4:
95:70:69:d5:15:4d:93:d6:67:4c:93:cf:cc:24:67:
5e:7f:27:7e:46:1b:14:a9:c2:13:b7:dd:bb:d7:c5:
27:a7:3a:80:e7:85:bf:d8:f0:49:fb:44:25:65:9c:
e7:26:83:84:ed:2e:50:98:f7:f3:82:16:41:19:59:
47:45:95:a5:94:da:07:9b:86:9f:07:4f:13:f3:12:
2d:d0:c7:92:48:03:d1:83:1e:f6:02:08:3d:f9:9d:
82:72:23:8a:85:99:58:7c:c3:28:8b:13:b7:f0:21:
9e:d0:2d:52:8a:23:a7:24:50:8c:e0:58:16:58:94:
e2:fd:84:c4:e0:6d:36:bc:bb:35:4c:77:e3:37:71:
a2:c7:a9:a2:e7:9e:ca:be:0b:d8:f4:2f:c5:8d:c2:
8d:b6:e6:49:c6:3a:87:9c:c0:18:09:21:11:4a:41:
14:10:11:39:dd:d1:08:c5:d8:89:fb:79:60:dc:a6:
69:9f:c5:c8:15:d1:90:b2:aa:18:69:a3:b2:a7:a0:
23:e9:e3:a8:c6:40:60:74:c5:9e:20:68:91:fc:10:
60:01:c5:ea:b6:04:0b:4a:9b:17:f0:b5:c3:76:50:
57:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4E:12:EA:FF:46:26:B7:42:6B:2E:79:31:09:D1:ED:8B:CB:26:A2
X509v3 Authority Key Identifier:
keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:07:02:53:3e:65:24:bf:65:05:2b:47:51:28:77:88:fe:35:
f0:ba:03:f6:1c:0c:9b:d2:5b:93:33:25:a9:cd:13:d1:28:53:
6a:cd:45:a9:84:7e:c1:ff:1e:df:66:5f:49:bb:9c:e6:ca:87:
e4:c7:90:c4:d7:7b:50:53:56:1b:80:8e:66:56:0e:7a:b8:d7:
bd:b0:9b:75:60:5b:7c:70:8b:bd:48:7a:fa:d1:af:c5:88:a7:
75:45:7a:16:9e:40:16:d6:53:98:1d:01:e6:46:8e:7a:9c:36:
1a:0c:6f:23:df:83:cb:6c:12:71:b7:b6:0c:30:58:90:a8:ef:
06:2c:2a:ff:9c:cb:79:b0:a9:63:75:7d:5a:3e:64:b2:eb:fa:
03:1a:70:e9:25:56:fd:4c:1a:9a:e2:d4:94:ca:af:d0:97:6c:
d2:26:a5:f2:a3:de:fc:60:d5:47:cf:b1:54:ee:c9:cd:8a:57:
9b:ce:5e:fa:dd:16:aa:41:57:5a:af:e1:d2:fa:8f:7c:d5:8c:
68:5c:80:c7:b7:42:4c:62:27:71:aa:07:c9:a7:b1:a6:8f:4e:
36:bd:a2:86:88:78:8f:ae:a5:be:4d:76:22:1e:7f:28:06:26:
05:b4:19:3a:75:a5:f9:72:a8:10:c1:ff:46:8e:80:64:05:43:
1a:eb:44:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:20:36 2026 by rpki-client