Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
File: BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json)
Hash identifier: coSF2jAjnYkCGx1M1toOls6ungGdC/vi5nY/srm2ZaY=
Subject key identifier: C1:86:2F:DB:47:9D:2A:D1:C1:05:07:0D:9F:AD:B6:EA:2B:C0:65:D0
Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
Certificate issuer: /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Certificate serial: 019E1D2292C0A113AF43F53A02A639A9260C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
Manifest number: 0DBC
Signing time: Tue 12 May 2026 17:01:05 +0000
Manifest this update: Tue 12 May 2026 17:01:05 +0000
Manifest next update: Wed 13 May 2026 17:01:05 +0000
Files and hashes: 1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: pGviCckM5P2zUq8J3EjTgqZCOPeau9Re4SC/Tg0HJJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:92:c0:a1:13:af:43:f5:3a:02:a6:39:a9:26:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Validity
Not Before: May 12 17:01:05 2026 GMT
Not After : May 13 17:01:05 2026 GMT
Subject: CN=c1862fdb479d2ad1c105070d9fadb6ea2bc065d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8a:dc:0c:2e:7e:36:2c:fd:b4:27:79:3c:c6:
22:7d:8c:19:ed:a9:08:b9:02:3a:1f:2c:28:54:c9:
cd:e2:bf:f6:dc:1f:ae:7e:91:8a:7b:1c:6f:02:16:
ec:b7:34:d7:f2:ad:83:6e:c1:4b:fa:2b:35:00:6a:
18:8d:63:87:9a:d4:28:1f:42:05:7f:9b:16:eb:80:
8a:dd:c1:66:da:31:0a:ba:14:8d:61:a1:d4:65:a5:
ce:5f:e6:3d:12:52:d8:f6:1c:34:4f:d0:56:e7:4b:
17:25:d7:7c:7f:89:49:2e:f1:88:cf:c7:2c:d1:f5:
eb:3b:62:47:8d:91:6b:04:bd:71:a7:3e:1a:53:08:
b5:56:7c:62:7f:74:df:f4:f6:e1:25:f9:e3:e4:ca:
c5:c9:2f:25:c3:53:3a:cc:7f:05:d5:9e:6b:19:c2:
88:65:1d:67:f9:45:bd:8b:37:1d:cc:d2:e8:c9:15:
a9:6a:38:e3:0c:7d:fe:3d:bf:63:9d:44:6d:9b:16:
8f:7d:1a:e2:cd:91:e3:81:a0:ee:63:70:af:c4:63:
21:44:77:68:09:ff:19:ed:c8:e8:57:dc:c5:e9:a9:
e1:4f:ef:0b:13:e0:70:ce:92:77:f2:d9:7b:a4:ce:
77:a6:33:90:26:5f:0b:88:e2:43:c2:53:90:78:05:
69:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:86:2F:DB:47:9D:2A:D1:C1:05:07:0D:9F:AD:B6:EA:2B:C0:65:D0
X509v3 Authority Key Identifier:
keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b3:59:f7:e4:11:3d:95:cf:24:b4:71:3c:ca:24:6a:f6:b8:
c9:09:36:3e:45:51:f1:1a:02:53:a2:8e:49:ce:10:b2:5b:4c:
16:ba:bc:1d:d3:67:53:53:78:8b:47:61:4c:2c:0f:0f:80:e9:
eb:b2:64:62:09:f8:1e:1f:d5:3f:7a:1e:43:3f:c1:fc:67:6f:
be:83:43:0b:14:88:6d:0a:f3:cc:98:1f:ec:b2:44:6f:18:5c:
db:29:2d:e9:34:b4:54:95:87:15:e1:a1:5e:69:5e:d7:d4:db:
5d:df:fe:fd:76:5e:37:85:09:4c:2e:58:60:72:bb:de:c3:2a:
b5:45:be:e1:ea:c3:db:a1:2c:9a:0b:35:da:22:7c:de:89:59:
f3:a0:d5:a4:c8:de:84:41:be:dd:7f:92:0b:15:37:92:16:f1:
4b:a0:fd:04:ad:0e:65:af:9d:6d:d8:6e:d3:63:c0:fe:ed:a9:
3a:a6:c2:ca:c1:7d:5b:fe:e9:c6:ee:ab:36:2c:bd:a6:f4:1c:
02:e1:c2:7a:c2:58:3d:76:66:c0:7e:cc:b1:19:45:a7:4d:5c:
49:14:8c:1e:ae:26:dc:d8:db:4c:59:68:3f:92:db:aa:d9:68:
83:88:80:52:3e:2f:6c:8a:a5:b6:b3:9f:bb:4f:74:e3:8a:20:
be:41:89:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIpLAoROvQ/U6AqY5qSYMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NjY5NDBiNmJhNDdmOGNjMTBhN2I0NzhlNDA1NjNjYmI4
YWI3ZjAwHhcNMjYwNTEyMTcwMTA1WhcNMjYwNTEzMTcwMTA1WjAzMTEwLwYDVQQD
EyhjMTg2MmZkYjQ3OWQyYWQxYzEwNTA3MGQ5ZmFkYjZlYTJiYzA2NWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IrcDC5+Niz9tCd5PMYifYwZ7akI
uQI6HywoVMnN4r/23B+ufpGKexxvAhbstzTX8q2DbsFL+is1AGoYjWOHmtQoH0IF
f5sW64CK3cFm2jEKuhSNYaHUZaXOX+Y9ElLY9hw0T9BW50sXJdd8f4lJLvGIz8cs
0fXrO2JHjZFrBL1xpz4aUwi1Vnxif3Tf9PbhJfnj5MrFyS8lw1M6zH8F1Z5rGcKI
ZR1n+UW9izcdzNLoyRWpajjjDH3+Pb9jnURtmxaPfRrizZHjgaDuY3CvxGMhRHdo
Cf8Z7cjoV9zF6anhT+8LE+BwzpJ38tl7pM53pjOQJl8LiOJDwlOQeAVpYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGGL9tHnSrRwQUHDZ+ttuorwGXQMB8GA1UdIwQY
MBaAFARmlAtrpH+MwQp7R45AVjy7irfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdhVUMydWtmNHpCQ250SGprQldQTHVLdF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83YjI0ODEtZWMxNC00MzY4LTgzODAt
NTUyNjEwMjZmNTIzLzEvQkdhVUMydWtmNHpCQ250SGprQldQTHVLdF9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83YjI0ODEtZWMxNC00MzY4LTgzODAtNTUyNjEwMjZmNTIz
LzEvQkdhVUMydWtmNHpCQ250SGprQldQTHVLdF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbNZ9+QR
PZXPJLRxPMokava4yQk2PkVR8RoCU6KOSc4QsltMFrq8HdNnU1N4i0dhTCwPD4Dp
67JkYgn4Hh/VP3oeQz/B/GdvvoNDCxSIbQrzzJgf7LJEbxhc2ykt6TS0VJWHFeGh
Xmle19TbXd/+/XZeN4UJTC5YYHK73sMqtUW+4erD26Esmgs12iJ83olZ86DVpMje
hEG+3X+SCxU3khbxS6D9BK0OZa+dbdhu02PA/u2pOqbCysF9W/7pxu6rNiy9pvQc
AuHCesJYPXZmwH7MsRlFp01cSRSMHq4m3NjbTFloP5Lbqtlog4iAUj4vbIqltrOf
u09044ogvkGJKw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:23:01 2026 by rpki-client