Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
File: BGWHkB8TB5vtiYL2KendFUaM_vE.mft (raw, json)
Hash identifier: QH7sWV6j/j4lj7+SOm8gNcdEdJLgM7x0xqZIxop7Wjk=
Subject key identifier: C0:27:1A:18:49:F4:51:82:21:BF:FB:EE:0A:6C:3C:8A:4E:E2:60:E2
Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
Certificate issuer: /CN=046587901f13079bed8982f629e9dd15468cfef1
Certificate serial: 019D37C108F7D0E9B2366B41D4899BD30088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
Manifest number: 1285
Signing time: Sun 29 Mar 2026 04:01:30 +0000
Manifest this update: Sun 29 Mar 2026 04:01:30 +0000
Manifest next update: Mon 30 Mar 2026 04:01:30 +0000
Files and hashes: 1: BGWHkB8TB5vtiYL2KendFUaM_vE.crl (hash: 8d+Fg8zvUrxBKfd4ZIZB7ZHRYDak/NM4gSuA+mHwvVk=)
2: fTPoxCe4jGfBgPBLkUKcm_JbirE.roa (hash: 02Sw+k6mgA2rz0rcR6vWe/Ze2n73fjDgyV/8LWMOJoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:08:f7:d0:e9:b2:36:6b:41:d4:89:9b:d3:00:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1
Validity
Not Before: Mar 29 04:01:30 2026 GMT
Not After : Mar 30 04:01:30 2026 GMT
Subject: CN=c0271a1849f4518221bffbee0a6c3c8a4ee260e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:f5:79:79:49:14:86:8c:32:a1:55:af:68:
0b:00:c4:10:e9:45:5e:a2:55:d0:6f:49:a4:62:8e:
79:61:5d:ae:0f:c9:a7:94:10:f9:3a:41:38:27:fb:
26:7b:a6:2f:f4:87:54:e8:58:bc:0b:93:89:dc:33:
91:0d:64:b3:76:58:6a:f5:50:d0:ec:3d:c1:48:22:
71:55:a3:fb:23:3d:3a:71:56:16:2a:6a:83:7c:6c:
fe:e4:b1:be:b1:f9:e8:be:0f:eb:00:75:be:55:e4:
b3:11:29:bf:1b:11:71:f2:c5:4c:22:3a:4b:f4:52:
52:19:99:f3:c7:21:3b:06:42:d3:d1:f4:39:de:97:
e9:40:30:52:e2:19:95:f3:4d:71:86:e4:fd:a6:6c:
d4:fb:8b:92:70:1f:32:0f:a7:4d:1e:83:ba:79:be:
3e:db:ea:ec:45:67:4d:c1:ac:92:55:7c:71:51:16:
be:cb:01:1d:ca:3f:a5:af:72:53:7b:b2:7a:ff:b4:
69:bd:27:97:a2:66:4c:30:99:b3:20:40:06:18:ed:
8b:4f:df:08:61:32:d1:3e:48:9a:a1:26:0c:aa:f7:
8a:e3:58:be:31:4a:d1:dd:36:f8:05:a5:ee:05:84:
1e:7c:af:53:75:0c:ba:ca:1b:7f:c4:0b:ac:0c:fb:
1b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:27:1A:18:49:F4:51:82:21:BF:FB:EE:0A:6C:3C:8A:4E:E2:60:E2
X509v3 Authority Key Identifier:
keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:2b:13:4d:42:4d:ba:a8:8b:41:4b:cc:55:4c:34:b3:4b:2d:
12:61:41:e0:2f:ca:d5:e1:86:6d:3e:00:18:0b:f1:3d:72:fe:
66:44:2a:d4:9d:f1:37:ac:6e:77:99:0e:5d:69:08:26:c7:04:
66:4d:84:f6:a8:c6:3e:f7:80:82:c5:75:84:7b:86:8b:69:9a:
04:77:b6:0c:44:44:e9:cc:5d:a1:77:14:21:49:65:35:12:9e:
88:d4:5c:b7:f9:59:cd:d6:db:72:04:46:2a:9d:88:8a:40:1e:
44:25:4e:fc:66:5f:76:ff:57:c6:1d:24:d2:39:c8:3b:1e:cc:
95:a9:7b:da:4c:e6:17:65:cc:e6:a1:9f:cd:99:ae:6e:9d:4b:
f5:d5:6c:6e:8d:7a:2b:c9:5e:91:c8:89:43:0c:30:b1:34:52:
ae:02:42:13:a0:b6:95:20:12:76:40:cd:9d:9d:cc:55:34:28:
90:3d:ad:c6:0e:09:9b:07:62:f0:42:a1:10:01:44:5f:40:34:
fa:55:dd:32:2e:3f:57:14:f7:03:bd:0e:03:32:b0:67:9c:b5:
cd:40:12:b1:de:99:eb:e8:7e:6d:58:91:ca:77:ca:bb:a5:2f:
80:e2:4f:41:40:7b:0e:6c:dc:80:9a:f2:91:d2:18:ea:d3:73:
70:5f:16:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wQj30OmyNmtB1Imb0wCIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NjU4NzkwMWYxMzA3OWJlZDg5ODJmNjI5ZTlkZDE1NDY4
Y2ZlZjEwHhcNMjYwMzI5MDQwMTMwWhcNMjYwMzMwMDQwMTMwWjAzMTEwLwYDVQQD
EyhjMDI3MWExODQ5ZjQ1MTgyMjFiZmZiZWUwYTZjM2M4YTRlZTI2MGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA31eXlJFIaMMqFVr2gLAMQQ6UVe
olXQb0mkYo55YV2uD8mnlBD5OkE4J/sme6Yv9IdU6Fi8C5OJ3DORDWSzdlhq9VDQ
7D3BSCJxVaP7Iz06cVYWKmqDfGz+5LG+sfnovg/rAHW+VeSzESm/GxFx8sVMIjpL
9FJSGZnzxyE7BkLT0fQ53pfpQDBS4hmV801xhuT9pmzU+4uScB8yD6dNHoO6eb4+
2+rsRWdNwaySVXxxURa+ywEdyj+lr3JTe7J6/7RpvSeXomZMMJmzIEAGGO2LT98I
YTLRPkiaoSYMqveK41i+MUrR3Tb4BaXuBYQefK9TdQy6yht/xAusDPsb6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAnGhhJ9FGCIb/77gpsPIpO4mDiMB8GA1UdIwQY
MBaAFARlh5AfEweb7YmC9inp3RVGjP7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdXSGtCOFRCNXZ0aVlMMktlbmRGVWFNX3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82M2QzOTQtNDJiZC00MGIxLWEyYTEt
NzRkNTkwMWE4YzU2LzEvQkdXSGtCOFRCNXZ0aVlMMktlbmRGVWFNX3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82M2QzOTQtNDJiZC00MGIxLWEyYTEtNzRkNTkwMWE4YzU2
LzEvQkdXSGtCOFRCNXZ0aVlMMktlbmRGVWFNX3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzysTTUJN
uqiLQUvMVUw0s0stEmFB4C/K1eGGbT4AGAvxPXL+ZkQq1J3xN6xud5kOXWkIJscE
Zk2E9qjGPveAgsV1hHuGi2maBHe2DERE6cxdoXcUIUllNRKeiNRct/lZzdbbcgRG
Kp2IikAeRCVO/GZfdv9Xxh0k0jnIOx7Mlal72kzmF2XM5qGfzZmubp1L9dVsbo16
K8lekciJQwwwsTRSrgJCE6C2lSASdkDNnZ3MVTQokD2txg4Jmwdi8EKhEAFEX0A0
+lXdMi4/VxT3A70OAzKwZ5y1zUASsd6Z6+h+bViRynfKu6UvgOJPQUB7DmzcgJry
kdIY6tNzcF8WMA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:18 2026 by rpki-client