Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
File: BGelYhGyHprHzcj7Y58xCpLCEEw.mft (raw, json)
Hash identifier: OXAz6NVVE7Z/ZoNaOzXFxlRD0FJI8a0YE8a7HLZ3nBw=
Subject key identifier: 67:F9:39:63:E1:7D:40:5E:B4:48:3E:88:EE:3A:24:C3:A5:B5:45:45
Authority key identifier: 04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
Certificate issuer: /CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Certificate serial: 01A001381677067DB82874AD152698C2CFDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
Manifest number: 10E2
Signing time: Fri 14 Aug 2026 17:00:47 +0000
Manifest this update: Fri 14 Aug 2026 17:00:47 +0000
Manifest next update: Sat 15 Aug 2026 17:00:47 +0000
Files and hashes: 1: 1-WmJXUzndEvurHNC9z-EdX-GqLg.roa (hash: k4/qUPEWtP0yhAjTXryxItYMnfRgWY9Qd/ypPo+vPZA=)
2: BGelYhGyHprHzcj7Y58xCpLCEEw.crl (hash: qkKZ9ddCOEgANi3OWqKssGWYk3Eym2lpXDJCbls4/p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:16:77:06:7d:b8:28:74:ad:15:26:98:c2:cf:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Validity
Not Before: Aug 14 17:00:47 2026 GMT
Not After : Aug 15 17:00:47 2026 GMT
Subject: CN=67f93963e17d405eb4483e88ee3a24c3a5b54545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1c:63:1e:b8:73:2c:3a:54:d4:55:4a:24:ba:
4a:4e:05:fc:d2:09:fd:b6:2e:18:3d:65:b9:ec:57:
44:b6:8e:f1:bc:2c:a7:d8:e1:07:f9:63:d9:07:87:
e6:a5:32:5e:bc:da:e2:f9:e7:0d:8d:1c:98:eb:66:
93:7c:c9:92:f0:23:92:a3:4c:3c:54:e9:da:29:9e:
32:6a:e5:f8:e0:d6:b6:2a:a3:5d:fe:01:72:45:b2:
c1:cf:7e:25:aa:08:bc:93:5f:d3:04:e5:db:bd:46:
3b:06:89:81:f9:63:16:7c:9c:53:b9:5f:a9:af:59:
74:61:8c:c5:01:b9:f1:ad:a0:c5:23:6b:98:91:80:
e2:67:73:40:3e:76:75:92:c2:d3:cc:64:5f:c2:b4:
54:70:6a:50:d5:47:94:f2:6a:d4:d4:b9:8f:14:07:
2a:6c:e4:df:7d:bb:68:1e:9e:74:62:3f:ee:20:6d:
45:b7:21:0d:89:35:bc:b3:19:a3:96:15:9e:75:fb:
2f:ab:44:0f:89:49:28:3c:98:0e:20:ab:1f:bb:f7:
ee:bc:07:71:be:3e:41:78:bc:a7:d2:de:cd:24:e9:
9b:e9:18:12:ad:52:d3:d6:e2:b2:e9:c4:e8:e6:d1:
bc:96:3b:6e:03:df:7e:7a:75:91:d9:05:41:c5:2c:
6a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F9:39:63:E1:7D:40:5E:B4:48:3E:88:EE:3A:24:C3:A5:B5:45:45
X509v3 Authority Key Identifier:
keyid:04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:70:fb:6c:89:20:60:c4:bb:a8:59:60:17:15:61:1a:e1:97:
7a:55:73:53:be:96:e8:a8:32:58:5b:6d:e9:dc:18:3d:04:d8:
1a:5c:10:0f:7f:18:e2:d3:e5:71:e2:87:85:c8:0a:b4:c1:d5:
98:71:7d:44:62:bf:22:b2:3b:ba:3e:5b:fa:66:3f:5f:e8:8e:
53:b6:b7:cc:33:19:7f:2e:fa:35:16:5d:de:29:19:c3:21:54:
a0:7b:35:03:72:11:92:e1:0d:04:a6:15:66:e1:04:fd:cb:aa:
7f:3d:6f:09:a6:16:e6:bd:6b:e1:3c:1e:f2:ca:c5:77:99:fb:
e5:90:46:e8:fc:3c:06:c2:6f:f4:e1:9c:67:81:53:cf:0c:50:
91:51:ea:c0:6f:5e:18:18:0e:01:ba:46:a5:9e:e2:b7:bd:98:
05:81:81:ff:82:51:f6:f2:a4:ed:b8:ef:46:92:37:ff:b1:a4:
67:c0:43:78:55:5b:66:e5:40:31:17:d1:56:ce:76:c6:db:b3:
d8:f4:5e:bf:c7:13:87:33:e3:96:cf:f1:52:cd:e2:ad:53:43:
7f:ab:2f:8e:44:4c:05:aa:e7:08:c9:87:bf:7b:74:35:bf:f9:
29:a7:3f:cc:ae:66:f0:07:b9:90:30:9b:f4:4a:17:f3:a6:e9:
38:c6:0c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:08 2026 by rpki-client