Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
File: BGK247pQCQLmPuFOXKyREoMqLCc.mft (raw, json)
Hash identifier: C6gJtSUNOMRqHUFcYuDvmqISebA0oNSHEToGJ0z3MS0=
Subject key identifier: 27:13:0A:EB:02:F5:B7:DA:38:79:6A:7F:72:A7:CD:77:0A:78:33:41
Authority key identifier: 04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
Certificate issuer: /CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Certificate serial: 01A0035E4A0B03913A658CA2F5AB45825D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
Manifest number: 0587
Signing time: Sat 15 Aug 2026 03:01:45 +0000
Manifest this update: Sat 15 Aug 2026 03:01:45 +0000
Manifest next update: Sun 16 Aug 2026 03:01:45 +0000
Files and hashes: 1: BGK247pQCQLmPuFOXKyREoMqLCc.crl (hash: qPguULL6KW6BWzGbAOYRKeDjONszBqauF4pAkHDCPxE=)
2: XM1JyfkvL8GQlIDWNsypURBRDIQ.roa (hash: E9RkLX7TB/4zizaYko106pLHCoP05WAm/iO/6rgM8Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5e:4a:0b:03:91:3a:65:8c:a2:f5:ab:45:82:5d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Validity
Not Before: Aug 15 03:01:45 2026 GMT
Not After : Aug 16 03:01:45 2026 GMT
Subject: CN=27130aeb02f5b7da38796a7f72a7cd770a783341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:a7:2e:5c:be:c8:1d:60:c1:23:72:66:fd:
61:bc:e7:31:db:c5:24:6d:9c:b0:30:ce:00:db:09:
7f:b8:dd:f8:6f:06:1a:24:a7:cc:78:53:15:0b:e0:
77:d2:95:53:bd:5e:c8:6d:fa:00:55:d8:de:b1:89:
c8:8b:b9:86:49:e0:5a:ee:48:b7:46:2e:86:f3:6d:
bc:f6:ea:9d:34:c2:f0:7a:43:a8:f7:72:e1:16:65:
ec:0f:02:5c:55:c5:60:ab:dd:6e:8e:53:29:9a:35:
20:d7:96:6a:54:e7:ef:18:60:63:c7:a4:26:fc:6e:
b4:87:21:2d:c1:23:c1:63:22:ae:d9:e8:8b:61:b5:
5d:e6:68:9f:b1:0f:09:a8:bd:09:00:7a:24:48:aa:
75:c0:81:01:2f:12:e3:e1:74:97:8d:be:29:4a:0b:
6d:9c:b7:58:0c:9b:6b:2d:f0:bc:8d:6f:93:c3:b1:
96:7f:e8:fc:bc:5a:fa:00:56:2a:f1:42:a1:fc:ad:
b0:61:57:2a:f4:ae:d3:a9:de:8b:cd:9e:de:9d:83:
cb:84:54:b4:7b:90:36:8d:ba:27:39:3c:61:fa:e0:
de:56:72:a2:a3:df:89:75:f0:49:21:10:ae:b9:08:
29:42:13:84:24:8d:e1:c2:cb:13:9b:b0:fb:f0:b0:
43:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:13:0A:EB:02:F5:B7:DA:38:79:6A:7F:72:A7:CD:77:0A:78:33:41
X509v3 Authority Key Identifier:
keyid:04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:43:45:3c:aa:7f:ce:01:b4:20:d4:97:6d:49:b4:00:81:b5:
64:48:fa:b6:4d:f1:0b:dc:fa:bd:74:eb:80:44:6a:8d:9e:37:
fb:a0:7d:6f:e8:1c:2a:e2:f7:90:75:b2:e0:9d:fe:63:fd:09:
1f:b8:45:43:fc:a1:9f:b7:a9:90:8f:55:3f:76:20:9d:fa:1a:
f5:1f:a0:7d:bf:25:1e:6f:10:ca:87:f5:05:33:53:9a:68:5a:
fe:56:57:73:d1:d1:86:73:34:d6:4e:f7:14:6c:4c:34:dd:7b:
f1:29:da:f6:25:44:6e:68:a6:4a:9d:cc:48:21:d9:d7:46:21:
20:bb:27:d7:ec:7c:ac:5a:74:20:3d:e8:11:53:58:2c:d4:06:
f8:59:a8:21:fd:9a:76:99:6d:40:57:2e:a6:f3:db:08:62:29:
5e:7f:68:c7:67:fc:f7:ea:43:ee:af:8b:e5:b9:2d:52:a8:5e:
92:84:cf:b9:bf:11:f6:ae:ec:7f:14:57:8c:fa:0b:03:a9:79:
f1:9d:d2:88:0f:52:d6:00:41:03:18:0c:da:d1:08:a2:d9:55:
e8:b6:eb:c4:3d:53:ac:0e:5e:ba:f0:71:27:cd:32:ca:0a:51:
b1:f2:ad:d7:91:9e:7e:ec:8e:1c:fb:dd:fa:b6:e9:8d:b4:92:
cf:75:9b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:07:42 2026 by rpki-client