Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
File: BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json)
Hash identifier: qvS0VqTtiyHThzR3E8mVl7EQxU6JQmAqNAsKGpuW0M8=
Subject key identifier: 68:1F:1D:FD:8C:C1:6E:21:43:6E:72:1F:60:88:98:4F:DD:9C:AB:FB
Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
Certificate issuer: /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Certificate serial: 019F8FEC78D5B52BAB0BA4D3461DEF8C052B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
Manifest number: 0E7C
Signing time: Thu 23 Jul 2026 17:01:06 +0000
Manifest this update: Thu 23 Jul 2026 17:01:06 +0000
Manifest next update: Fri 24 Jul 2026 17:01:06 +0000
Files and hashes: 1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: zBSjcoktMVnsRBs2QqKl4sRPH87N3iD4h56q3pFJvp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:78:d5:b5:2b:ab:0b:a4:d3:46:1d:ef:8c:05:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Validity
Not Before: Jul 23 17:01:06 2026 GMT
Not After : Jul 24 17:01:06 2026 GMT
Subject: CN=681f1dfd8cc16e21436e721f6088984fdd9cabfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:4d:28:84:d8:05:6c:5b:b0:25:57:09:8f:
d5:99:bb:41:0f:1c:e7:d8:6b:6d:0b:e4:42:ba:b4:
c4:cf:27:f8:08:af:3a:e6:2d:ba:45:8a:a1:88:14:
eb:83:c1:21:bf:9f:7d:c9:10:1d:9d:d5:3e:37:66:
ed:43:36:74:63:6d:3f:69:5c:f2:56:7a:04:ba:c3:
03:d2:fd:15:fa:05:3b:bd:90:ec:15:dc:de:d0:d0:
f4:30:20:8b:b5:64:40:f8:56:e5:a0:50:ee:21:88:
62:60:d4:ea:b7:f6:28:e4:2b:2e:da:c0:16:44:31:
41:ac:a3:24:fd:69:1b:34:dd:7c:ac:7c:6c:ad:85:
b8:a1:f8:c2:51:b0:c0:21:38:d3:16:41:fd:30:17:
db:2f:ad:12:48:fd:ef:00:21:64:ef:fc:33:ab:80:
7d:9a:60:bc:d7:dc:52:00:8f:4a:14:b2:76:2b:e1:
85:bb:df:11:f6:ab:ec:52:73:93:50:3b:a1:55:3f:
d9:f3:f4:e2:d6:35:2f:79:9c:36:1f:d0:75:5a:5b:
91:83:3e:13:73:42:e6:aa:10:d4:aa:a2:ae:51:60:
e3:91:24:0b:78:84:98:bd:ce:a2:e2:97:88:87:9c:
8b:08:55:20:01:c0:ed:dc:f3:10:44:0a:d6:1b:62:
6f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1F:1D:FD:8C:C1:6E:21:43:6E:72:1F:60:88:98:4F:DD:9C:AB:FB
X509v3 Authority Key Identifier:
keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c3:c9:81:5b:af:af:69:f9:b4:b3:86:73:3a:86:6f:7c:e1:
2f:e6:7e:29:f1:90:77:c4:f7:b6:ff:1e:f3:a5:a7:9b:42:2b:
c4:e6:35:d0:48:23:73:0c:ac:77:95:5c:a2:bd:64:ae:f6:0f:
e5:f5:09:e6:54:d0:f4:36:fc:30:7e:01:1b:e1:c2:b3:e8:98:
6b:f8:5f:a9:48:9b:32:bd:8a:ed:5b:5f:3c:3f:54:98:29:17:
f1:c7:f0:ba:03:9a:cc:cb:86:dd:83:93:78:cc:5f:86:d8:12:
f3:76:43:01:e7:50:a1:52:03:5f:a9:4d:d1:22:b2:2c:1c:01:
9e:1f:f2:ec:43:db:52:0d:51:91:d9:e6:a7:07:2e:b6:b6:08:
fc:f6:bd:0a:8c:07:17:fe:e1:63:5a:51:57:6f:2c:56:0a:a5:
64:5a:29:bc:87:08:b8:6f:a7:14:29:9f:1e:78:0d:36:37:4c:
ae:b6:3c:bb:60:75:17:de:e2:89:34:0b:62:6d:f4:04:bb:5e:
1f:bd:22:6d:08:69:37:ba:c2:bc:67:dd:49:61:05:24:f1:f5:
6f:57:6c:83:cc:52:23:9c:1f:e6:e3:4d:bb:12:d4:ec:54:e9:
1d:a9:75:d0:34:03:8b:d9:da:ba:77:66:25:ba:f5:70:14:da:
b4:62:45:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:38 2026 by rpki-client