Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
File: BGyntgTsCPb1Sw50iQZUfdN1Z00.mft (raw, json)
Hash identifier: B8nKgwPJw56X9IMpeQNqhFo33H2cuTCIS+SSQjdSAE4=
Subject key identifier: A5:13:71:74:B1:2F:90:B7:3F:DE:FB:70:8F:AD:46:DD:2B:EB:09:F0
Authority key identifier: 04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
Certificate issuer: /CN=046ca7b604ec08f6f54b0e748906547dd375674d
Certificate serial: 019D37C0F15BF34047C82B57DF1BF8381AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
Manifest number: 1552
Signing time: Sun 29 Mar 2026 04:01:24 +0000
Manifest this update: Sun 29 Mar 2026 04:01:24 +0000
Manifest next update: Mon 30 Mar 2026 04:01:24 +0000
Files and hashes: 1: BGyntgTsCPb1Sw50iQZUfdN1Z00.crl (hash: 6UpxowIgwAZuscCwP7RHI+oWSxINjLAwK8IUKATNO3s=)
2: MLeNfxLl71ZiEa-4ROMfKWY0HfE.roa (hash: Z2UBW5tUmk27eN0YD99HvRO7Fm7FnWica0sXE52jO9U=)
3: PtAGcm7_KHWDCz9aca-_lnbGDdw.roa (hash: kog+FbgStFH4bPMvqHeDVOD0owoRZw+UqxHeqF/7hj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f1:5b:f3:40:47:c8:2b:57:df:1b:f8:38:1a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046ca7b604ec08f6f54b0e748906547dd375674d
Validity
Not Before: Mar 29 04:01:24 2026 GMT
Not After : Mar 30 04:01:24 2026 GMT
Subject: CN=a5137174b12f90b73fdefb708fad46dd2beb09f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:24:ff:26:d8:5d:93:35:51:2e:fb:2b:d2:
e0:98:6d:16:3c:c0:02:26:c8:57:ca:da:3b:24:56:
ff:0a:87:b0:7b:b9:df:f8:5d:25:a1:95:44:be:1a:
f0:f9:36:74:c7:2f:0d:89:c9:f5:49:69:78:4e:11:
11:fe:79:f2:58:09:a5:25:8f:f8:71:df:c4:46:f2:
0b:0a:a8:3f:81:14:7d:ce:e4:71:bb:ae:a7:8e:e6:
3c:84:0f:ba:a9:5c:97:1c:7e:60:e9:91:eb:c6:b5:
ac:ee:f7:e8:7d:5c:2d:20:9e:12:9a:80:a5:8b:5f:
0c:68:57:6e:84:42:94:6c:06:e4:57:73:ef:d6:27:
33:d0:ee:fb:5c:12:66:5d:e8:85:4b:f5:2b:00:77:
88:f4:b3:4c:cd:b4:8a:36:38:36:b8:45:2e:99:0c:
5d:c5:42:ae:f5:2d:00:79:d8:79:aa:fb:c2:83:ef:
15:e0:93:07:62:ee:7d:7b:3c:c6:a2:51:27:28:3b:
f2:f7:31:ed:22:14:a4:5e:cb:78:f3:b3:35:98:53:
7b:ec:88:84:2c:35:4f:ba:78:0f:1c:32:44:87:96:
c6:ef:13:a3:2d:9d:fc:0e:d1:58:aa:48:77:8b:a9:
4f:93:64:ed:aa:14:d3:8f:f0:d4:c1:eb:c3:f8:b4:
ac:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:13:71:74:B1:2F:90:B7:3F:DE:FB:70:8F:AD:46:DD:2B:EB:09:F0
X509v3 Authority Key Identifier:
keyid:04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:55:fb:5e:dc:bb:4a:c2:33:1b:bd:e4:fc:6a:00:cb:90:6c:
46:b8:7d:c3:ec:e8:e6:a8:69:2a:60:91:b8:a7:f6:5e:57:17:
93:92:bc:ea:9a:06:5b:16:3e:a0:66:0f:ff:96:2e:3e:d3:41:
1b:89:16:f1:58:12:e7:04:f6:16:86:08:7e:c7:aa:13:9e:1e:
5d:0d:de:df:c4:d3:0f:52:6c:3c:56:d1:5e:16:6e:93:08:76:
d6:25:7d:3f:ab:fa:7e:28:84:66:5c:4a:cd:6d:a1:11:98:19:
21:f0:08:8d:2d:36:85:79:fb:2a:c4:ee:a8:72:f1:09:16:90:
a2:43:ad:7a:8b:de:85:d7:ec:ac:d5:0a:aa:45:9f:a5:a8:61:
3e:f5:83:3a:85:49:0c:9a:b6:fa:77:3f:50:47:9b:bf:67:b3:
9b:a1:e6:86:10:f1:41:0d:86:af:28:e6:fe:9d:bb:10:29:72:
97:f6:87:5f:eb:b4:47:f5:19:fb:a4:86:e8:23:2a:a8:31:cb:
e9:b4:cd:35:5a:9f:be:21:5d:da:c8:10:57:cb:c3:45:87:2e:
da:3e:93:a8:eb:46:8f:e0:2b:23:7d:2b:09:f1:63:ea:cb:2b:
85:ec:60:fc:90:af:56:a0:70:6a:56:c7:7e:4b:ff:0d:f7:65:
63:e9:14:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wPFb80BHyCtX3xv4OBrDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NmNhN2I2MDRlYzA4ZjZmNTRiMGU3NDg5MDY1NDdkZDM3
NTY3NGQwHhcNMjYwMzI5MDQwMTI0WhcNMjYwMzMwMDQwMTI0WjAzMTEwLwYDVQQD
EyhhNTEzNzE3NGIxMmY5MGI3M2ZkZWZiNzA4ZmFkNDZkZDJiZWIwOWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMIk/ybYXZM1US77K9LgmG0WPMAC
JshXyto7JFb/Coewe7nf+F0loZVEvhrw+TZ0xy8Nicn1SWl4ThER/nnyWAmlJY/4
cd/ERvILCqg/gRR9zuRxu66njuY8hA+6qVyXHH5g6ZHrxrWs7vfofVwtIJ4SmoCl
i18MaFduhEKUbAbkV3Pv1icz0O77XBJmXeiFS/UrAHeI9LNMzbSKNjg2uEUumQxd
xUKu9S0Aedh5qvvCg+8V4JMHYu59ezzGolEnKDvy9zHtIhSkXst487M1mFN77IiE
LDVPungPHDJEh5bG7xOjLZ38DtFYqkh3i6lPk2TtqhTTj/DUwevD+LSsOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUTcXSxL5C3P977cI+tRt0r6wnwMB8GA1UdIwQY
MBaAFARsp7YE7Aj29UsOdIkGVH3TdWdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkd5bnRnVHNDUGIxU3c1MGlRWlVmZE4xWjAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOTJlYTUtOWNhOC00YjBmLTkzODgt
MDkzOTYxZDM4Yzg2LzEvQkd5bnRnVHNDUGIxU3c1MGlRWlVmZE4xWjAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zOTJlYTUtOWNhOC00YjBmLTkzODgtMDkzOTYxZDM4Yzg2
LzEvQkd5bnRnVHNDUGIxU3c1MGlRWlVmZE4xWjAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1X7Xty7
SsIzG73k/GoAy5BsRrh9w+zo5qhpKmCRuKf2XlcXk5K86poGWxY+oGYP/5YuPtNB
G4kW8VgS5wT2FoYIfseqE54eXQ3e38TTD1JsPFbRXhZukwh21iV9P6v6fiiEZlxK
zW2hEZgZIfAIjS02hXn7KsTuqHLxCRaQokOteovehdfsrNUKqkWfpahhPvWDOoVJ
DJq2+nc/UEebv2ezm6HmhhDxQQ2Gryjm/p27EClyl/aHX+u0R/UZ+6SG6CMqqDHL
6bTNNVqfviFd2sgQV8vDRYcu2j6TqOtGj+ArI30rCfFj6ssrhexg/JCvVqBwalbH
fkv/DfdlY+kUEA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:13 2026 by rpki-client