Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
File: BGelYhGyHprHzcj7Y58xCpLCEEw.mft (raw, json)
Hash identifier: M5HnXa2htKzLL3uQuC63QxjEPwyzedGTPLpazDUJjaI=
Subject key identifier: EB:BB:C5:19:47:F2:C3:27:E4:BB:AD:79:32:54:8F:14:9F:54:BE:19
Authority key identifier: 04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
Certificate issuer: /CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Certificate serial: 01A13DEF240E7FCD1D5B41CC9F43D1C8DD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
Manifest number: 1186
Signing time: Thu 15 Oct 2026 05:00:44 +0000
Manifest this update: Thu 15 Oct 2026 05:00:44 +0000
Manifest next update: Fri 16 Oct 2026 05:00:44 +0000
Files and hashes: 1: 1-WmJXUzndEvurHNC9z-EdX-GqLg.roa (hash: k4/qUPEWtP0yhAjTXryxItYMnfRgWY9Qd/ypPo+vPZA=)
2: BGelYhGyHprHzcj7Y58xCpLCEEw.crl (hash: j+AH4y3iVqbxtYDEPA7Yf+89nh5LaN53Llnn5YBExZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:24:0e:7f:cd:1d:5b:41:cc:9f:43:d1:c8:dd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Validity
Not Before: Oct 15 05:00:44 2026 GMT
Not After : Oct 16 05:00:44 2026 GMT
Subject: CN=ebbbc51947f2c327e4bbad7932548f149f54be19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:2f:b5:97:86:b2:71:42:83:4b:f7:71:72:
13:ee:0b:b3:50:c5:9b:83:0b:cd:d4:f8:f5:00:4b:
90:5c:41:4d:02:f8:1c:6b:86:a2:3d:d5:3b:24:f2:
f4:c7:0c:95:d6:bd:97:b6:62:8b:83:6a:c1:25:42:
12:61:c7:a5:26:ba:98:56:d0:da:80:45:a0:02:f8:
31:09:6a:23:eb:47:0f:32:81:47:42:01:cc:97:c7:
6e:67:37:60:16:03:a6:a1:d8:d8:86:2c:4a:c8:a5:
66:80:cc:8a:98:b7:7d:6a:d8:71:00:d3:08:b8:b2:
97:c5:da:ef:c4:69:3a:46:82:b5:95:7b:34:34:31:
33:14:bd:d1:c7:5c:db:bc:aa:80:2b:51:be:0b:aa:
62:1e:eb:93:2d:ed:90:d4:05:e9:86:9a:0e:02:67:
5f:73:3b:98:da:2f:03:1c:bf:c0:de:b0:f4:79:5d:
45:d0:09:58:71:49:e9:1e:3d:f3:98:42:d7:b4:6a:
a1:a0:bb:96:51:ab:7b:52:4f:22:7b:2d:2b:e8:b4:
7b:73:00:ca:c6:1c:85:49:2d:31:31:5a:67:b4:56:
d9:71:02:63:dc:5d:4d:5a:c3:d9:f7:58:9a:44:88:
71:0b:db:e9:fb:10:62:34:3b:f6:d9:a3:f3:e1:73:
27:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BB:C5:19:47:F2:C3:27:E4:BB:AD:79:32:54:8F:14:9F:54:BE:19
X509v3 Authority Key Identifier:
keyid:04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:69:9d:aa:5c:7a:56:3e:13:a9:c2:84:66:3a:4e:97:b5:8f:
3f:85:11:7e:c2:ab:f8:23:19:17:a3:5e:31:e5:2f:9b:69:60:
a9:a9:a5:52:17:a1:3c:76:28:9a:79:3c:6e:34:f0:86:75:7c:
77:2a:d7:88:f2:92:b5:18:b2:79:47:b6:0f:f2:d1:e1:2e:f3:
77:85:fe:4a:29:74:27:5b:d2:ec:8a:de:c4:a8:84:44:79:09:
9b:cf:41:cc:88:f4:1b:d6:c7:bf:43:70:ab:7d:bc:d2:9d:e4:
74:44:51:49:5a:f5:e5:7a:8b:e9:34:19:a6:0e:90:05:ec:c7:
c2:9c:48:79:8b:9e:9c:ad:05:da:e7:04:6e:b7:32:45:4e:cb:
bf:7c:37:b8:30:6c:32:d5:99:24:d0:2d:69:5d:54:a1:34:42:
95:23:ee:80:4b:83:46:19:7b:e3:9c:25:91:d9:a4:74:c3:a0:
5a:c2:10:e8:75:48:75:6e:8f:b2:b3:70:d7:25:cb:e7:b5:4e:
ea:79:aa:4c:26:22:9a:e3:21:e4:4a:86:1b:f7:2b:9c:cb:b0:
d1:8d:db:73:21:78:04:d2:62:36:14:f3:4e:1a:b2:28:fc:ba:
1c:a3:1f:12:a3:10:49:f2:5a:a0:e1:0c:be:48:ed:10:a4:8a:
5a:5f:d6:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE97yQOf80dW0HMn0PRyN0eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NjdhNTYyMTFiMjFlOWFjN2NkYzhmYjYzOWYzMTBhOTJj
MjEwNGMwHhcNMjYxMDE1MDUwMDQ0WhcNMjYxMDE2MDUwMDQ0WjAzMTEwLwYDVQQD
EyhlYmJiYzUxOTQ3ZjJjMzI3ZTRiYmFkNzkzMjU0OGYxNDlmNTRiZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojEvtZeGsnFCg0v3cXIT7guzUMWb
gwvN1Pj1AEuQXEFNAvgca4aiPdU7JPL0xwyV1r2XtmKLg2rBJUISYcelJrqYVtDa
gEWgAvgxCWoj60cPMoFHQgHMl8duZzdgFgOmodjYhixKyKVmgMyKmLd9athxANMI
uLKXxdrvxGk6RoK1lXs0NDEzFL3Rx1zbvKqAK1G+C6piHuuTLe2Q1AXphpoOAmdf
czuY2i8DHL/A3rD0eV1F0AlYcUnpHj3zmELXtGqhoLuWUat7Uk8iey0r6LR7cwDK
xhyFSS0xMVpntFbZcQJj3F1NWsPZ91iaRIhxC9vp+xBiNDv22aPz4XMnkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOu7xRlH8sMn5LuteTJUjxSfVL4ZMB8GA1UdIwQY
MBaAFARnpWIRsh6ax83I+2OfMQqSwhBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdlbFloR3lIcHJIemNqN1k1OHhDcExDRUV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wNDVjNGItYzBkNy00Nzc4LTlmNDQt
ODIzYWQyYzJmNWYxLzEvQkdlbFloR3lIcHJIemNqN1k1OHhDcExDRUV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wNDVjNGItYzBkNy00Nzc4LTlmNDQtODIzYWQyYzJmNWYx
LzEvQkdlbFloR3lIcHJIemNqN1k1OHhDcExDRUV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWmdqlx6
Vj4TqcKEZjpOl7WPP4URfsKr+CMZF6NeMeUvm2lgqamlUhehPHYomnk8bjTwhnV8
dyrXiPKStRiyeUe2D/LR4S7zd4X+Sil0J1vS7IrexKiERHkJm89BzIj0G9bHv0Nw
q3280p3kdERRSVr15XqL6TQZpg6QBezHwpxIeYuenK0F2ucEbrcyRU7Lv3w3uDBs
MtWZJNAtaV1UoTRClSPugEuDRhl745wlkdmkdMOgWsIQ6HVIdW6PsrNw1yXL57VO
6nmqTCYimuMh5EqGG/crnMuw0Y3bcyF4BNJiNhTzThqyKPy6HKMfEqMQSfJaoOEM
vkjtEKSKWl/W2g==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:15 2026 by rpki-client