Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
File: Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft (raw, json)
Hash identifier: udJoCwzNp8IXmH7T6PRAIKzCkX70RKssFs7NkvE7gYs=
Subject key identifier: 46:C3:8D:64:DF:91:DA:FF:6A:AD:BB:36:79:E0:97:83:8E:80:A0:E6
Authority key identifier: 06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
Certificate issuer: /CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Certificate serial: 019FA117088D6FEE4B96C962A326C80BE1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
Manifest number: 05F2
Signing time: Mon 27 Jul 2026 01:01:08 +0000
Manifest this update: Mon 27 Jul 2026 01:01:08 +0000
Manifest next update: Tue 28 Jul 2026 01:01:08 +0000
Files and hashes: 1: 5OH9MU3n5jnbsFQihGMju6cfMP8.roa (hash: ebl8kR+bOvw+VlEIFx9Aju1goGA4RN7+C5LqHyAwZJ4=)
2: Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl (hash: FV5SzS1VlxGmzQjUM5jDt3N7vyiToamvQ3ADFdpvkWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:17:08:8d:6f:ee:4b:96:c9:62:a3:26:c8:0b:e1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Validity
Not Before: Jul 27 01:01:08 2026 GMT
Not After : Jul 28 01:01:08 2026 GMT
Subject: CN=46c38d64df91daff6aadbb3679e097838e80a0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:6e:b1:75:59:36:6f:0a:2d:3a:a8:d6:bc:
be:b2:0f:cb:0b:d5:32:c3:03:8c:51:03:be:0d:5d:
de:0e:ca:26:cd:e3:95:53:f0:bf:ca:72:08:e5:18:
49:62:56:57:b3:f8:a5:e0:6f:f6:06:8a:0a:05:5a:
a2:2c:9e:41:ff:7d:9e:c5:58:d9:98:08:7e:68:8b:
dc:d3:bc:11:eb:05:e7:c9:53:0d:b5:3e:65:1f:66:
53:c0:db:0d:9d:5c:c3:7f:09:e5:6c:8f:dc:78:66:
af:10:32:fb:fc:22:be:d9:c8:d0:f8:62:d1:d7:e6:
f9:dc:6d:f4:46:d5:4a:75:f0:bf:d0:6a:8b:3b:79:
24:7e:da:e6:ea:12:72:55:e8:15:93:f1:18:20:f8:
d7:c0:7a:1b:b7:7f:5b:60:f4:fa:3c:70:fe:d9:94:
5b:ea:3f:63:c9:62:a0:cf:32:d3:16:38:2e:66:60:
f4:58:b7:b2:31:d2:2b:54:b0:00:b7:00:82:8c:e9:
4e:e2:b5:e8:65:c2:bd:70:b2:4d:77:38:de:2d:79:
a0:a9:fd:5e:4d:cf:1f:d8:e4:c4:ed:dd:74:a8:04:
27:62:e9:47:67:8f:87:d8:e1:f3:be:43:f2:91:77:
b9:66:0e:fc:5a:ce:76:bc:b1:29:00:b7:fb:a8:97:
84:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C3:8D:64:DF:91:DA:FF:6A:AD:BB:36:79:E0:97:83:8E:80:A0:E6
X509v3 Authority Key Identifier:
keyid:06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f5:bc:b2:76:0e:aa:4d:23:ba:25:33:df:2d:d3:65:df:98:
2f:6f:8d:1f:d5:df:f9:a0:09:97:c4:ce:97:86:c2:03:25:65:
28:d5:9d:03:1a:00:bc:d2:00:e1:c0:1f:38:2d:12:34:64:55:
6a:c5:2f:cf:e2:91:41:15:51:b2:2a:12:75:4f:52:c0:04:d6:
f9:d4:42:bb:4a:ea:e0:68:25:ba:24:8a:b0:8c:68:c1:bd:1d:
d3:71:8a:6e:7b:cb:e6:ec:a5:68:8f:f9:79:f7:f4:69:48:d3:
22:c3:c8:8d:16:02:08:21:0a:9e:80:76:d7:ba:94:19:a1:11:
50:b9:cc:34:2b:30:24:35:80:fe:dc:22:2d:8d:f3:31:0a:81:
8b:17:7a:63:a0:93:12:21:2f:31:6b:5b:52:b3:6e:12:18:5d:
8c:7a:97:77:eb:fd:7b:ed:6d:14:59:fb:16:6f:71:d6:df:e0:
67:a1:91:0a:da:b3:c9:fd:88:61:c6:cc:5b:cb:a9:41:2a:eb:
9a:d0:45:45:45:f0:5e:91:59:59:63:14:a4:c4:5c:66:48:ba:
56:53:20:68:98:f1:2c:2f:a3:38:41:0b:58:c5:21:04:23:91:
b1:e6:be:24:ba:81:2e:05:c8:6f:c8:16:10:90:41:3a:16:f1:
9c:2a:32:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:47:35 2026 by rpki-client