Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
File: bgC7pk9Ra41jNaAc8wS4It7hrtA.mft (raw, json)
Hash identifier: GfPp+epMkox/neUJfu8rfwBSRn62dQXxTw85i0o1pGs=
Subject key identifier: 25:02:35:0E:DF:99:4B:2D:23:FD:93:0E:0C:9D:F5:92:10:40:3C:20
Authority key identifier: 6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0
Certificate issuer: /CN=6e00bba64f516b8d6335a01cf304b822dee1aed0
Certificate serial: 019D3940A4FF2F22E8D6785C744FFEDC3883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 11:00:30 +0000
Manifest this update: Sun 29 Mar 2026 11:00:30 +0000
Manifest next update: Mon 30 Mar 2026 11:00:30 +0000
Files and hashes: 1: bgC7pk9Ra41jNaAc8wS4It7hrtA.crl (hash: sr37/lEQPhJLoclhf1hjahH/endm1cQtCPuZYFP9qFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:a4:ff:2f:22:e8:d6:78:5c:74:4f:fe:dc:38:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e00bba64f516b8d6335a01cf304b822dee1aed0
Validity
Not Before: Mar 29 11:00:30 2026 GMT
Not After : Mar 30 11:00:30 2026 GMT
Subject: CN=2502350edf994b2d23fd930e0c9df59210403c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:1e:7d:93:8f:2d:5f:99:d2:a7:e8:91:be:
52:c7:b8:5f:57:99:22:ba:aa:97:df:b3:80:5c:9e:
cc:e0:66:0f:c6:0a:c2:f1:7f:de:e6:61:db:55:dd:
4b:6f:fd:0f:12:95:be:1f:09:f3:56:0c:66:08:78:
16:b3:b7:90:5b:7f:3a:15:c6:dc:a4:4b:97:a1:be:
b8:7a:40:af:93:52:65:a0:83:2d:81:41:0b:bd:e5:
fd:e8:88:ee:f6:60:57:e1:79:bd:29:65:28:18:b7:
be:06:df:f8:c9:05:5d:70:a1:20:b8:c8:bd:c0:41:
bd:c3:73:e2:8c:7e:c3:ff:a2:1e:48:da:d8:17:dd:
ca:2a:8d:01:81:71:05:ac:20:ff:b4:22:f0:8f:16:
4e:33:4d:ad:cf:e6:3d:f1:89:49:59:f9:b3:df:0f:
cc:78:09:da:fc:f5:aa:4b:56:02:a3:59:ad:f1:79:
32:bc:8b:6a:7b:87:d2:ee:bb:20:32:6e:78:00:07:
46:9f:9b:3c:8f:a7:4f:76:70:dc:c3:a3:67:01:8e:
73:de:ee:fa:70:8b:40:9d:ec:c8:d4:5c:e4:6e:72:
a8:b1:e9:db:88:4f:29:a8:b8:28:38:b4:7b:8c:0c:
49:8e:f1:fc:61:51:ca:f9:75:d4:70:02:16:b1:c3:
b6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:02:35:0E:DF:99:4B:2D:23:FD:93:0E:0C:9D:F5:92:10:40:3C:20
X509v3 Authority Key Identifier:
keyid:6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:27:3d:61:07:e5:84:cf:9b:7c:99:cf:d2:4b:e5:a7:91:3b:
72:96:11:0a:80:df:ef:50:94:2d:19:df:7d:f3:d9:e8:48:e5:
e5:94:4f:e3:3b:c8:47:5b:ca:f1:09:1b:2b:6c:4c:19:b2:4b:
a8:35:f6:56:f5:f2:8c:d9:13:7b:f0:ac:13:1c:6f:f5:cf:a5:
48:4c:1f:c2:78:dc:7b:c9:5b:a2:18:83:b0:4c:96:bc:0b:38:
db:82:4b:5c:cc:da:c5:2a:47:54:0d:ee:35:4f:f4:71:35:b5:
5d:f3:33:3b:7c:f5:0d:00:e2:1f:a3:78:e9:8c:49:cf:5d:99:
f6:26:7e:83:95:1b:00:0f:f4:18:41:09:96:a1:a8:bf:96:10:
ca:43:ad:d0:cd:8f:34:29:b8:51:bc:a3:f1:eb:d6:59:37:7e:
0f:47:81:df:c6:66:ea:96:9a:2e:eb:9f:12:de:87:a6:95:37:
67:af:92:fe:66:d6:11:1f:ec:00:d5:98:17:a0:7a:fc:df:84:
ad:6a:4f:18:8f:ca:7b:92:4f:0f:14:01:4c:c7:62:36:b5:69:
6d:40:5d:53:2d:df:34:85:f6:7d:03:fa:82:c5:ad:92:35:81:
de:82:3d:c0:e4:44:e5:74:9f:33:cc:dd:93:96:3a:d1:7b:78:
01:f5:3a:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QKT/LyLo1nhcdE/+3DiDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMDBiYmE2NGY1MTZiOGQ2MzM1YTAxY2YzMDRiODIyZGVl
MWFlZDAwHhcNMjYwMzI5MTEwMDMwWhcNMjYwMzMwMTEwMDMwWjAzMTEwLwYDVQQD
EygyNTAyMzUwZWRmOTk0YjJkMjNmZDkzMGUwYzlkZjU5MjEwNDAzYzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwgefZOPLV+Z0qfokb5Sx7hfV5ki
uqqX37OAXJ7M4GYPxgrC8X/e5mHbVd1Lb/0PEpW+HwnzVgxmCHgWs7eQW386Fcbc
pEuXob64ekCvk1JloIMtgUELveX96Iju9mBX4Xm9KWUoGLe+Bt/4yQVdcKEguMi9
wEG9w3PijH7D/6IeSNrYF93KKo0BgXEFrCD/tCLwjxZOM02tz+Y98YlJWfmz3w/M
eAna/PWqS1YCo1mt8XkyvItqe4fS7rsgMm54AAdGn5s8j6dPdnDcw6NnAY5z3u76
cItAnezI1FzkbnKosenbiE8pqLgoOLR7jAxJjvH8YVHK+XXUcAIWscO2EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUCNQ7fmUstI/2TDgyd9ZIQQDwgMB8GA1UdIwQY
MBaAFG4Au6ZPUWuNYzWgHPMEuCLe4a7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmdDN3BrOVJhNDFqTmFBYzh3UzRJdDdocnRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hZTVlNmMtYzcwZi00MGYyLTg5MGQt
NTc1Y2Y1ZDMzNWU0LzEvYmdDN3BrOVJhNDFqTmFBYzh3UzRJdDdocnRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9hZTVlNmMtYzcwZi00MGYyLTg5MGQtNTc1Y2Y1ZDMzNWU0
LzEvYmdDN3BrOVJhNDFqTmFBYzh3UzRJdDdocnRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtic9YQfl
hM+bfJnP0kvlp5E7cpYRCoDf71CULRnfffPZ6Ejl5ZRP4zvIR1vK8QkbK2xMGbJL
qDX2VvXyjNkTe/CsExxv9c+lSEwfwnjce8lbohiDsEyWvAs424JLXMzaxSpHVA3u
NU/0cTW1XfMzO3z1DQDiH6N46YxJz12Z9iZ+g5UbAA/0GEEJlqGov5YQykOt0M2P
NCm4Ubyj8evWWTd+D0eB38Zm6paaLuufEt6HppU3Z6+S/mbWER/sANWYF6B6/N+E
rWpPGI/Ke5JPDxQBTMdiNrVpbUBdUy3fNIX2fQP6gsWtkjWB3oI9wORE5XSfM8zd
k5Y60Xt4AfU6ZA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:39 2026 by rpki-client