Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
File: BGWHkB8TB5vtiYL2KendFUaM_vE.mft (raw, json)
Hash identifier: 0ZuRYGvTNsRaPs0d3yEvBpHDZperCelsuBf4Uk6u6SU=
Subject key identifier: E0:F8:CE:78:6D:97:D0:17:D4:8E:36:DB:28:8D:A7:9D:F8:2B:8D:BE
Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
Certificate issuer: /CN=046587901f13079bed8982f629e9dd15468cfef1
Certificate serial: 019E30E0D6AC6CE44479F8B14E47BD422A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
Manifest number: 1306
Signing time: Sat 16 May 2026 13:01:41 +0000
Manifest this update: Sat 16 May 2026 13:01:41 +0000
Manifest next update: Sun 17 May 2026 13:01:41 +0000
Files and hashes: 1: BGWHkB8TB5vtiYL2KendFUaM_vE.crl (hash: bzTeMuHu/oBp4peu6oY73Wqq5bg07waNwFzhdBqNtz8=)
2: fTPoxCe4jGfBgPBLkUKcm_JbirE.roa (hash: 02Sw+k6mgA2rz0rcR6vWe/Ze2n73fjDgyV/8LWMOJoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:d6:ac:6c:e4:44:79:f8:b1:4e:47:bd:42:2a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1
Validity
Not Before: May 16 13:01:41 2026 GMT
Not After : May 17 13:01:41 2026 GMT
Subject: CN=e0f8ce786d97d017d48e36db288da79df82b8dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bf:0c:d6:a7:07:3e:1e:5e:5d:dc:3e:43:48:
35:e2:b5:d8:1b:76:fc:af:a3:6d:9d:f6:55:92:bc:
14:fa:10:b7:b6:95:56:5f:35:6d:8d:42:c9:9c:41:
03:ab:02:4c:47:a1:80:15:59:79:4c:f0:87:a4:6a:
92:9f:b0:cd:d2:9c:d4:a2:47:2b:3e:37:71:4b:85:
0c:04:f8:c4:38:96:37:b4:c0:b6:f7:d4:d9:1c:2e:
0f:e6:70:7f:3c:3b:53:e1:ee:17:c4:8b:8e:51:17:
7c:52:77:82:5e:ee:8e:70:be:f9:b6:ac:d6:77:07:
a1:bd:69:a0:63:ff:6f:96:63:ee:5e:26:c6:13:24:
66:3d:b6:f3:26:19:2e:0e:c1:c6:3a:ea:9f:d4:f6:
aa:f0:ea:87:96:9b:ef:aa:3b:45:6c:6f:92:16:dd:
35:93:14:85:06:5f:4b:3c:7f:e4:f4:00:7c:ab:97:
79:ff:e1:94:30:66:27:14:5b:6e:fa:3b:66:f3:ee:
34:83:52:8d:ce:96:eb:2a:11:9f:f7:56:1b:fa:dd:
86:17:78:ad:74:fc:f5:e6:ea:8c:b7:fe:04:eb:e2:
2c:f3:b1:b1:90:58:87:cd:e8:0f:8a:ad:bf:80:08:
82:5c:7f:86:15:92:90:5e:da:2a:64:b5:2e:ad:50:
5f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F8:CE:78:6D:97:D0:17:D4:8E:36:DB:28:8D:A7:9D:F8:2B:8D:BE
X509v3 Authority Key Identifier:
keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:50:37:6f:eb:81:b5:1c:e4:57:ff:bc:16:af:b7:40:ba:6e:
5a:e8:31:65:f3:1c:94:4e:6e:f1:b6:5b:f7:bc:24:bb:26:2e:
fc:0c:9e:5e:4d:10:ea:c4:54:cb:90:0b:11:78:71:1d:ad:46:
6f:d7:fb:3d:c0:5d:61:85:9e:82:c4:8a:3b:82:0b:bb:01:9e:
1c:c2:97:21:64:4e:49:b2:89:2b:17:a0:3c:1f:ee:da:da:20:
d8:76:d3:c8:12:6e:24:5d:0f:39:ea:ff:67:ce:a4:78:d7:40:
51:0e:bc:8e:6d:3c:45:33:ec:0e:de:39:87:a9:ed:38:16:2f:
15:46:fb:a7:16:39:e0:7a:7b:3b:50:50:b6:3f:79:64:68:71:
59:84:77:e8:e4:b6:98:5b:26:b1:3e:c0:37:30:b6:88:9e:c9:
17:4c:51:45:69:fe:a2:66:04:eb:6f:20:e6:42:10:45:f2:c3:
0c:dc:9b:58:5b:e1:97:fd:09:0f:1d:b6:02:c1:f4:88:12:5a:
4e:d1:c5:c3:14:93:1f:d5:6b:f9:8b:c8:63:8f:37:0d:8c:4c:
47:0a:2b:fd:57:f9:2c:88:e4:30:e6:2d:c9:3f:7b:53:c1:ab:
c1:e7:af:b7:cb:b4:08:6f:eb:4d:80:25:66:4a:60:7c:82:70:
95:73:86:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:57 2026 by rpki-client