Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
File: Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft (raw, json)
Hash identifier: FKNn0tVhRVkustp83qinmhLw5puAkIIjjymedd2rmWs=
Subject key identifier: 48:43:B2:01:6F:BE:94:11:2A:3A:F4:11:BB:A8:21:01:F8:65:2F:D1
Authority key identifier: 06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
Certificate issuer: /CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Certificate serial: 01A185D1EC662157FEE0D9C10C4F9513342D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
Manifest number: 06ED
Signing time: Thu 29 Oct 2026 04:01:29 +0000
Manifest this update: Thu 29 Oct 2026 04:01:29 +0000
Manifest next update: Fri 30 Oct 2026 04:01:29 +0000
Files and hashes: 1: 5OH9MU3n5jnbsFQihGMju6cfMP8.roa (hash: ebl8kR+bOvw+VlEIFx9Aju1goGA4RN7+C5LqHyAwZJ4=)
2: Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl (hash: i9Bhjeuc72pkrqWL+9G/yLPlQmldL72OQvvXkAhEhoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:d1:ec:66:21:57:fe:e0:d9:c1:0c:4f:95:13:34:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Validity
Not Before: Oct 29 04:01:29 2026 GMT
Not After : Oct 30 04:01:29 2026 GMT
Subject: CN=4843b2016fbe94112a3af411bba82101f8652fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:91:91:24:a8:24:21:21:dd:8f:13:ca:95:1f:
9e:54:a1:ae:ae:5c:dc:36:67:32:05:23:c4:62:97:
53:c3:91:7f:72:1a:b5:cd:9d:31:f4:24:53:2c:2c:
3c:27:d6:1c:93:3f:92:3b:42:15:4d:f5:8b:da:fe:
70:2b:7f:13:45:ac:2c:a9:83:bb:22:d6:ba:63:a8:
e3:2b:7a:65:77:a0:c0:49:d8:36:0d:ac:c3:d6:b5:
a2:21:ad:b3:b3:f7:79:6f:81:db:1c:15:a5:eb:db:
19:75:f9:e4:04:26:ac:7e:02:14:20:af:96:28:10:
4f:4c:7c:7e:19:1f:a2:f6:93:22:94:c9:1f:2b:18:
d2:94:67:2b:30:af:3a:11:a4:66:bb:63:97:5c:f5:
ff:7f:94:a2:48:73:bd:7e:2c:39:34:f5:bc:fa:ee:
81:4e:cc:1b:ce:89:f4:98:36:4b:43:41:40:50:72:
ee:16:8b:e6:8e:d2:c8:bc:c8:7b:28:bc:1a:ba:00:
da:d7:2c:45:29:38:89:5b:40:e9:07:c3:88:fd:3a:
fe:f8:82:ca:28:02:7d:cd:30:dc:3a:10:e7:07:2f:
51:6f:45:6a:a8:f1:f2:f1:be:6c:fa:4f:c3:43:c3:
24:ec:fb:1c:97:9e:ae:1b:9c:f3:84:e6:35:f7:a8:
8d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:43:B2:01:6F:BE:94:11:2A:3A:F4:11:BB:A8:21:01:F8:65:2F:D1
X509v3 Authority Key Identifier:
keyid:06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0d:68:b1:af:89:2d:5e:6a:5c:37:58:c7:24:f3:04:a1:44:
a7:eb:aa:f5:73:15:5d:3f:69:ec:33:47:d7:42:e9:18:74:58:
90:16:b0:92:c3:64:27:76:18:39:13:c3:3f:03:f6:cd:29:c3:
ea:ae:ee:de:1f:8f:a8:a3:e4:9e:14:2b:1d:30:05:4b:ca:aa:
af:01:aa:1d:55:43:b0:75:a8:bf:7c:d7:4f:c5:27:00:ad:c9:
67:eb:3e:c3:29:57:44:5f:e9:14:8c:09:b0:cb:43:b6:96:a2:
0b:10:f6:0b:a0:f0:c2:58:51:94:f9:3d:74:f6:d8:ec:ea:d5:
6b:d1:2d:b0:b4:48:10:cd:46:c0:d3:de:3c:b1:00:74:22:cb:
cd:6a:73:45:7c:3c:bc:5b:76:30:a6:8b:88:1b:c1:82:24:6a:
40:d7:df:ca:cf:4e:dd:0e:4c:2d:3e:28:05:55:a5:37:38:60:
fa:9d:0e:74:51:36:55:7c:72:82:40:bc:e1:af:43:64:5d:f3:
76:b2:45:cb:64:42:92:18:2d:be:00:ed:fe:26:1a:f5:f8:7d:
e5:3b:96:b5:6f:8d:68:eb:20:6e:84:24:c6:46:90:32:f6:d2:
4d:27:84:d8:42:fc:b4:78:c4:5a:58:2f:eb:40:d8:e6:42:91:
46:fa:6a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:57:26 2026 by rpki-client