Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
File: BGelYhGyHprHzcj7Y58xCpLCEEw.mft (raw, json)
Hash identifier: r9pgked3Cxzjoi2SQpA9vYjXwQw6efMoLmG27sWmDOc=
Subject key identifier: 1D:48:6B:C0:1C:19:11:C6:47:EA:3B:DD:BD:E8:44:61:C8:5E:03:EF
Authority key identifier: 04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
Certificate issuer: /CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Certificate serial: 019D389BC953E4B717B30E05C3A2D791AD92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
Manifest number: 0F71
Signing time: Sun 29 Mar 2026 08:00:26 +0000
Manifest this update: Sun 29 Mar 2026 08:00:26 +0000
Manifest next update: Mon 30 Mar 2026 08:00:26 +0000
Files and hashes: 1: 1-WmJXUzndEvurHNC9z-EdX-GqLg.roa (hash: k4/qUPEWtP0yhAjTXryxItYMnfRgWY9Qd/ypPo+vPZA=)
2: BGelYhGyHprHzcj7Y58xCpLCEEw.crl (hash: SrG8UWTq9zjcrWdcomNzOXn1RTlaYCNlYlzkM2ZJ6cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c9:53:e4:b7:17:b3:0e:05:c3:a2:d7:91:ad:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Validity
Not Before: Mar 29 08:00:26 2026 GMT
Not After : Mar 30 08:00:26 2026 GMT
Subject: CN=1d486bc01c1911c647ea3bddbde84461c85e03ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6a:06:c8:35:8e:06:b6:c2:d6:03:27:de:4c:
62:aa:b6:8e:7f:be:f7:1f:13:7b:6d:78:5e:bf:ae:
88:0d:72:64:26:0e:7f:be:a0:9d:20:98:32:97:07:
48:6f:fa:99:2e:39:e2:b7:7f:0e:17:e2:4e:e2:c0:
e5:bf:2a:22:7e:81:04:96:fe:3b:0a:30:97:95:d3:
85:81:76:3d:c0:62:5e:1c:55:46:5c:3c:91:74:31:
b4:4d:be:eb:bb:f2:7a:e2:e1:0d:9f:17:25:8b:e7:
b3:91:c8:77:8b:02:69:18:de:d6:6a:1d:4a:6f:38:
87:ca:b1:54:bb:9a:e8:45:e2:a5:02:39:2d:6d:de:
20:9c:58:39:08:a0:b2:f8:11:f5:27:7d:5f:99:27:
6b:b9:59:f4:a5:6e:12:dc:1e:4f:28:09:4f:05:24:
02:c6:0e:5b:b3:45:84:a6:1d:64:3c:01:ef:88:89:
eb:44:1b:0c:8b:81:83:18:de:a4:19:4e:75:21:e6:
f7:93:41:3d:e0:31:3f:3a:af:04:2d:c5:c6:86:0f:
e5:17:fd:28:38:ff:c2:d4:71:93:3a:73:81:f3:10:
8f:02:9c:50:03:ee:7e:99:16:3e:2d:e4:f3:2e:59:
4b:b7:14:b1:36:5d:f5:4e:46:93:79:80:c6:a6:a5:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:48:6B:C0:1C:19:11:C6:47:EA:3B:DD:BD:E8:44:61:C8:5E:03:EF
X509v3 Authority Key Identifier:
keyid:04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:27:6f:07:ac:f0:94:28:4e:2c:d0:15:1c:ba:49:74:7d:78:
75:0a:40:6c:19:73:d5:36:be:b7:dd:44:2b:2a:e3:fd:07:7a:
f7:ad:89:c2:70:7b:36:20:38:8f:52:dc:d9:de:78:c9:ea:f0:
4e:83:30:6d:c7:b6:f6:a6:e8:4c:60:43:8e:bf:12:7c:9e:9e:
39:6c:60:b9:59:ce:a7:b1:5a:e8:24:24:4a:c7:6a:e8:de:95:
93:3a:d8:0d:2c:cc:1b:18:c4:0d:3b:64:16:8e:4a:1c:09:76:
99:49:8b:5f:53:d1:fc:ad:89:69:2e:8a:e9:67:52:b8:f1:0d:
94:b0:25:3f:fe:90:22:56:3c:0a:88:df:78:dd:b9:f5:59:43:
0d:ea:24:1c:22:e8:38:80:19:bf:09:57:15:24:4c:ff:fe:da:
f7:4e:58:71:d5:b4:66:4b:3b:42:bc:07:c2:e9:84:7a:97:36:
12:9d:8d:0f:2a:5e:22:30:9d:c7:8f:ec:ed:57:53:8e:f4:4c:
97:a5:13:6a:0d:52:04:53:84:08:87:a8:e9:b0:7c:fd:78:ca:
0c:bc:b7:2d:05:cc:3c:6c:ea:12:1e:9c:e1:33:ca:ee:da:ee:
c7:b7:ae:e7:ea:1e:ff:4d:3d:4b:62:43:a7:b3:ee:6f:a7:f9:
03:88:bd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:56 2026 by rpki-client