Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
File: BGK247pQCQLmPuFOXKyREoMqLCc.mft (raw, json)
Hash identifier: FEW3Rv0oD4Z9KruRe7XIMV7uhSk1da6QNTGkcdiL6NE=
Subject key identifier: 54:DA:5A:E1:0D:89:C9:EF:99:86:DF:82:A7:18:B3:B0:38:CA:53:7B
Authority key identifier: 04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
Certificate issuer: /CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Certificate serial: 019D38D296AA471FE76358355D55A8F2D461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
Manifest number: 0415
Signing time: Sun 29 Mar 2026 09:00:18 +0000
Manifest this update: Sun 29 Mar 2026 09:00:18 +0000
Manifest next update: Mon 30 Mar 2026 09:00:18 +0000
Files and hashes: 1: BGK247pQCQLmPuFOXKyREoMqLCc.crl (hash: h3ThylZaGpA9JYDgRJ2IusoUBvbkU/O063FJ7HRqMSI=)
2: XM1JyfkvL8GQlIDWNsypURBRDIQ.roa (hash: E9RkLX7TB/4zizaYko106pLHCoP05WAm/iO/6rgM8Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:96:aa:47:1f:e7:63:58:35:5d:55:a8:f2:d4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Validity
Not Before: Mar 29 09:00:18 2026 GMT
Not After : Mar 30 09:00:18 2026 GMT
Subject: CN=54da5ae10d89c9ef9986df82a718b3b038ca537b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:16:d3:b1:e9:55:db:66:28:9d:3f:80:34:33:
00:17:71:01:c7:05:72:3d:fb:96:04:b0:f6:61:20:
38:28:25:0f:4d:ec:05:19:ef:04:f5:c0:55:8a:a5:
b5:38:fc:5f:de:4c:64:d8:0d:76:84:f3:7d:d2:7f:
34:25:55:22:6e:17:22:e6:48:a1:31:63:64:07:19:
18:20:12:98:c4:ab:ef:0b:dc:43:0e:c9:af:9a:56:
5e:36:4d:b8:4e:37:62:43:cc:60:73:df:8e:52:63:
a2:c7:c5:21:9b:15:75:f5:8f:b8:8c:b7:95:c1:84:
65:4e:a9:2a:6e:40:9b:15:93:28:bf:90:04:57:b0:
af:37:23:68:86:95:0e:3f:9e:5e:ee:6a:b2:5d:80:
63:b9:fa:63:d5:00:52:10:55:59:fd:97:29:2b:f9:
85:50:35:ea:15:28:ef:01:b6:90:9a:6c:99:3c:1d:
18:d6:5d:ff:a2:a6:d7:51:02:87:c2:89:a1:a4:c5:
01:84:b1:3d:19:bc:a5:30:08:46:6e:22:cd:b3:db:
b1:95:f6:2c:ab:c3:5a:14:4b:a9:7d:60:6e:8d:f1:
7f:bb:78:19:6b:c9:1e:bf:f3:68:95:0a:fb:14:5f:
c1:42:9e:b8:ee:3e:d3:4f:e2:a8:3a:d9:d4:cc:66:
88:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DA:5A:E1:0D:89:C9:EF:99:86:DF:82:A7:18:B3:B0:38:CA:53:7B
X509v3 Authority Key Identifier:
keyid:04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:49:0f:11:74:70:f9:2a:8b:5e:6f:32:9e:50:23:b9:1a:12:
55:95:fe:d6:1f:e6:8e:60:f9:14:70:cc:93:9a:59:0d:53:b7:
71:be:cd:b6:1b:d3:83:4f:bd:f4:20:d1:02:54:1c:dd:ea:f7:
1e:f1:f3:f9:01:25:78:d3:61:51:14:7f:35:df:a7:fc:cc:16:
36:d9:14:d6:dc:a3:c7:f0:b5:b6:eb:62:5d:0a:24:6e:c9:df:
8b:ef:37:a3:2b:cd:4d:1a:eb:a5:72:c7:18:d6:95:32:36:98:
0b:f5:f3:a2:42:7f:c9:cc:0d:2c:d4:a4:e6:7c:a5:7f:2e:03:
b9:7e:7e:fa:de:a4:a6:54:29:87:30:9c:d3:67:57:94:8b:07:
4b:b5:ce:33:d0:c4:1e:1e:f8:8d:a3:50:6f:2a:b0:e4:1f:56:
51:1b:bc:43:83:22:b4:eb:5d:bc:1c:0d:12:23:5f:87:27:5f:
dc:69:3a:f2:8b:66:d7:46:70:a9:f5:68:1a:7a:19:6c:78:1d:
c6:97:70:c2:9a:79:7a:52:d6:1b:2f:b6:7e:c3:36:e5:88:db:
fb:b6:12:8b:59:75:52:d7:4e:e2:0b:f3:9c:68:8a:e6:30:b4:
56:0f:d0:90:9e:4a:22:7d:a6:13:99:69:f4:c3:49:ff:8f:1d:
31:35:4c:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040paqRx/nY1g1XVWo8tRhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NjJiNmUzYmE1MDA5MDJlNjNlZTE0ZTVjYWM5MTEyODMy
YTJjMjcwHhcNMjYwMzI5MDkwMDE4WhcNMjYwMzMwMDkwMDE4WjAzMTEwLwYDVQQD
Eyg1NGRhNWFlMTBkODljOWVmOTk4NmRmODJhNzE4YjNiMDM4Y2E1MzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xbTselV22YonT+ANDMAF3EBxwVy
PfuWBLD2YSA4KCUPTewFGe8E9cBViqW1OPxf3kxk2A12hPN90n80JVUibhci5kih
MWNkBxkYIBKYxKvvC9xDDsmvmlZeNk24TjdiQ8xgc9+OUmOix8UhmxV19Y+4jLeV
wYRlTqkqbkCbFZMov5AEV7CvNyNohpUOP55e7mqyXYBjufpj1QBSEFVZ/ZcpK/mF
UDXqFSjvAbaQmmyZPB0Y1l3/oqbXUQKHwomhpMUBhLE9GbylMAhGbiLNs9uxlfYs
q8NaFEupfWBujfF/u3gZa8kev/NolQr7FF/BQp647j7TT+KoOtnUzGaIBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTaWuENicnvmYbfgqcYs7A4ylN7MB8GA1UdIwQY
MBaAFARituO6UAkC5j7hTlyskRKDKiwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lZTFiMDEtNTFhZC00YTAyLWIyNzgt
NjQxNmNkMzc3YjQ4LzEvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9lZTFiMDEtNTFhZC00YTAyLWIyNzgtNjQxNmNkMzc3YjQ4
LzEvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUkPEXRw
+SqLXm8ynlAjuRoSVZX+1h/mjmD5FHDMk5pZDVO3cb7NthvTg0+99CDRAlQc3er3
HvHz+QEleNNhURR/Nd+n/MwWNtkU1tyjx/C1tutiXQokbsnfi+83oyvNTRrrpXLH
GNaVMjaYC/XzokJ/ycwNLNSk5nylfy4DuX5++t6kplQphzCc02dXlIsHS7XOM9DE
Hh74jaNQbyqw5B9WURu8Q4MitOtdvBwNEiNfhydf3Gk68otm10ZwqfVoGnoZbHgd
xpdwwpp5elLWGy+2fsM25Yjb+7YSi1l1UtdO4gvznGiK5jC0Vg/QkJ5KIn2mE5lp
9MNJ/48dMTVMeA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:42 2026 by rpki-client