Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
File: BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json)
Hash identifier: +BFVazwRfq3rN1vJCkbNds8lRqX7aCNv/WMcAp6vIDU=
Subject key identifier: D7:06:8E:DE:6B:4F:B3:95:B7:C1:5C:9B:59:1A:E8:03:BC:2D:70:9F
Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
Certificate issuer: /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Certificate serial: 01A0F720228BB02BE8F966DDF144F23D3478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
Manifest number: 0F36
Signing time: Thu 01 Oct 2026 11:01:13 +0000
Manifest this update: Thu 01 Oct 2026 11:01:13 +0000
Manifest next update: Fri 02 Oct 2026 11:01:13 +0000
Files and hashes: 1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: tH8Gv6rqoJJSrJhkRQG17s6tpPhgHFOxRac/+2eI7VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:20:22:8b:b0:2b:e8:f9:66:dd:f1:44:f2:3d:34:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Validity
Not Before: Oct 1 11:01:13 2026 GMT
Not After : Oct 2 11:01:13 2026 GMT
Subject: CN=d7068ede6b4fb395b7c15c9b591ae803bc2d709f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5a:94:64:21:d5:3f:a3:b4:df:db:53:d9:ad:
05:50:93:45:b4:61:af:31:e7:51:3b:38:1d:43:62:
4d:c0:7d:63:83:c1:b0:92:d2:02:11:f6:b1:ee:4f:
de:72:a7:dd:95:75:31:67:0b:16:0d:12:6c:aa:aa:
d0:8e:41:af:d6:ac:b0:01:a1:07:38:b9:91:79:b5:
ae:38:de:e5:50:25:5a:14:27:80:a4:36:2f:44:3b:
e5:62:48:cd:14:be:18:c4:4f:5c:d1:fa:66:03:89:
f2:66:aa:52:18:17:1d:47:50:52:c7:c0:1f:f6:63:
47:0e:4e:cb:35:6a:06:3c:dc:67:72:13:2c:3e:bc:
49:fd:d1:e5:e0:29:6e:0d:1d:5f:76:9c:f8:b6:c9:
22:83:71:e4:0b:dc:60:91:47:06:98:d0:1d:9a:e7:
bc:00:ac:54:6f:f2:7a:0f:37:4e:d2:0c:62:90:35:
8a:8f:d7:cc:59:64:53:6c:df:b8:33:c3:88:bb:fe:
93:4a:e8:cd:25:e0:fb:8f:d3:e3:bf:6a:4e:31:4a:
49:ea:06:da:97:25:9d:ec:50:56:a3:d2:80:67:ba:
69:6d:d4:67:0d:90:8c:4b:96:62:43:3c:ff:5e:c2:
3d:57:d5:b4:33:1e:62:48:e5:fd:9c:8d:56:6c:03:
79:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:06:8E:DE:6B:4F:B3:95:B7:C1:5C:9B:59:1A:E8:03:BC:2D:70:9F
X509v3 Authority Key Identifier:
keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e8:6e:15:46:e0:8b:f6:2b:68:36:23:66:32:7e:9d:90:28:
d7:29:d3:1d:0a:58:53:3b:b7:28:a4:cb:ed:94:a3:1e:b3:46:
b6:7e:66:26:d1:05:68:36:bc:a5:08:c7:3f:0e:c6:26:e4:60:
24:05:af:cb:15:67:b4:cc:d4:e1:d4:3b:62:fd:ad:03:63:50:
7c:d6:65:72:8e:87:1a:86:d1:e6:6b:8d:d8:79:65:37:0d:91:
87:54:08:f7:9a:81:bc:8a:60:cd:20:b1:ea:1c:f9:ed:fd:5e:
28:b9:f8:41:45:96:84:76:e7:6a:78:b2:b3:2d:22:7e:6a:f7:
74:cb:79:7e:db:cb:01:8d:73:78:e1:bd:7e:26:ab:d4:d8:58:
ab:04:72:22:19:16:ac:1b:c8:3f:2c:ee:6e:06:dd:21:fb:ac:
46:17:50:33:21:97:85:f9:91:e9:c7:3b:0b:60:4f:2b:e4:56:
03:d8:9f:81:48:75:db:2f:e9:4a:f2:1f:24:f2:73:e7:01:7a:
d7:12:ee:62:30:6d:d1:05:18:48:82:0e:07:b5:40:5c:b0:20:
cc:7e:7e:3d:2f:06:8b:e3:b4:03:9e:33:33:a5:29:29:a3:31:
e4:d5:35:d5:39:49:f3:15:ec:e2:b2:22:f0:36:88:14:e4:54:
20:71:7a:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD3ICKLsCvo+Wbd8UTyPTR4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NjY5NDBiNmJhNDdmOGNjMTBhN2I0NzhlNDA1NjNjYmI4
YWI3ZjAwHhcNMjYxMDAxMTEwMTEzWhcNMjYxMDAyMTEwMTEzWjAzMTEwLwYDVQQD
EyhkNzA2OGVkZTZiNGZiMzk1YjdjMTVjOWI1OTFhZTgwM2JjMmQ3MDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVqUZCHVP6O039tT2a0FUJNFtGGv
MedROzgdQ2JNwH1jg8GwktICEfax7k/ecqfdlXUxZwsWDRJsqqrQjkGv1qywAaEH
OLmRebWuON7lUCVaFCeApDYvRDvlYkjNFL4YxE9c0fpmA4nyZqpSGBcdR1BSx8Af
9mNHDk7LNWoGPNxnchMsPrxJ/dHl4CluDR1fdpz4tskig3HkC9xgkUcGmNAdmue8
AKxUb/J6DzdO0gxikDWKj9fMWWRTbN+4M8OIu/6TSujNJeD7j9Pjv2pOMUpJ6gba
lyWd7FBWo9KAZ7ppbdRnDZCMS5ZiQzz/XsI9V9W0Mx5iSOX9nI1WbAN5cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcGjt5rT7OVt8Fcm1ka6AO8LXCfMB8GA1UdIwQY
MBaAFARmlAtrpH+MwQp7R45AVjy7irfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdhVUMydWtmNHpCQ250SGprQldQTHVLdF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83YjI0ODEtZWMxNC00MzY4LTgzODAt
NTUyNjEwMjZmNTIzLzEvQkdhVUMydWtmNHpCQ250SGprQldQTHVLdF9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83YjI0ODEtZWMxNC00MzY4LTgzODAtNTUyNjEwMjZmNTIz
LzEvQkdhVUMydWtmNHpCQ250SGprQldQTHVLdF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuehuFUbg
i/YraDYjZjJ+nZAo1ynTHQpYUzu3KKTL7ZSjHrNGtn5mJtEFaDa8pQjHPw7GJuRg
JAWvyxVntMzU4dQ7Yv2tA2NQfNZlco6HGobR5muN2HllNw2Rh1QI95qBvIpgzSCx
6hz57f1eKLn4QUWWhHbnaniysy0ifmr3dMt5ftvLAY1zeOG9fiar1NhYqwRyIhkW
rBvIPyzubgbdIfusRhdQMyGXhfmR6cc7C2BPK+RWA9ifgUh12y/pSvIfJPJz5wF6
1xLuYjBt0QUYSIIOB7VAXLAgzH5+PS8Gi+O0A54zM6UpKaMx5NU11TlJ8xXs4rIi
8DaIFORUIHF6HQ==
-----END CERTIFICATE-----
Generated at Thu Oct 1 20:59:04 2026 by rpki-client