Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
File: BG5SgQdApuwTSZPbya0RtkVNmno.mft (raw, json)
Hash identifier: V7Q91UkUpjQnJUIJjD1FRwUpaQhfsf+S+nZpF9NQBZ4=
Subject key identifier: 98:D1:C4:1B:94:87:E7:B4:2C:D1:7B:CC:03:B8:5C:D4:AF:0C:7E:05
Authority key identifier: 04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
Certificate issuer: /CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Certificate serial: 019D37F71DD679674FA68C0CFB1B89174A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
Manifest number: 0883
Signing time: Sun 29 Mar 2026 05:00:34 +0000
Manifest this update: Sun 29 Mar 2026 05:00:34 +0000
Manifest next update: Mon 30 Mar 2026 05:00:34 +0000
Files and hashes: 1: BG5SgQdApuwTSZPbya0RtkVNmno.crl (hash: 1kI3CAZ4szRVRxa7L2rUQxavSEnmGmvicmtKJ6r7gUk=)
2: a9jZwxcqI34mhuCt3thAAI-XO7Q.roa (hash: aj2CjjO2duZcrFHfSQxM4wde7HcT3fufS42YR1B/tQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:1d:d6:79:67:4f:a6:8c:0c:fb:1b:89:17:4a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Validity
Not Before: Mar 29 05:00:34 2026 GMT
Not After : Mar 30 05:00:34 2026 GMT
Subject: CN=98d1c41b9487e7b42cd17bcc03b85cd4af0c7e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f9:21:94:ae:91:1f:a7:17:1e:03:f6:ef:bf:
0d:ca:bc:93:79:8c:f0:ae:e0:c2:e7:4e:6a:f5:91:
7f:d0:3c:d5:c7:a8:df:7e:57:84:c2:f5:87:1c:b2:
f5:93:e2:3c:9f:fa:37:ae:15:1e:b3:c8:af:5d:32:
3b:07:a7:fe:69:83:e3:fc:cd:d7:c1:59:8b:58:de:
57:ba:26:b9:fa:11:31:3c:f3:d2:18:f3:f8:14:09:
cd:38:17:39:6b:5a:a1:1c:70:50:ee:a0:9c:42:a3:
dd:90:53:d8:ca:72:8e:26:6b:4d:7f:8e:55:c7:f4:
be:35:cb:ec:16:08:80:ed:59:29:ba:df:36:01:f2:
8d:6b:48:2c:f4:74:66:a7:31:6e:c9:8d:67:b9:85:
56:96:60:7d:de:a0:6a:ac:10:b7:7f:68:21:63:a8:
ff:51:1f:54:35:3d:b6:6e:e1:e0:73:f7:ac:b4:13:
4d:84:2b:64:1e:e9:d9:02:3d:3f:46:e5:c5:05:c6:
03:60:c6:91:67:df:0f:ff:7c:f9:9d:ee:ff:74:07:
ba:db:8b:e8:1d:95:70:f9:6f:c6:49:1c:06:ee:de:
76:40:64:17:f0:b3:2b:06:aa:bb:f7:f4:d3:3c:ac:
d2:57:5f:03:ea:3e:a6:1d:ab:a7:5b:4b:c5:09:7f:
6b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D1:C4:1B:94:87:E7:B4:2C:D1:7B:CC:03:B8:5C:D4:AF:0C:7E:05
X509v3 Authority Key Identifier:
keyid:04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:bb:f8:ba:06:62:77:85:b4:51:c4:5f:42:e4:fa:7a:7b:b4:
f4:a5:fa:bf:a9:26:44:51:c9:63:1a:44:ee:09:89:45:f1:c5:
2c:5c:1e:b2:f6:04:c2:3a:47:12:a0:9c:d7:46:2f:ea:07:9c:
31:0e:c3:af:06:e7:d0:b2:40:90:35:7e:7e:c5:41:17:c0:1d:
53:46:56:84:13:fd:72:32:25:02:a5:d9:35:f3:00:82:26:6b:
9c:4a:66:5e:74:75:52:58:55:6c:23:2a:dc:dc:48:d3:d4:99:
09:4b:40:c7:0c:71:2e:73:3c:cd:2b:28:44:b8:07:dd:c6:c8:
0a:b8:01:1e:75:e7:8a:f8:8e:b2:f3:32:fd:1b:78:04:57:74:
84:8e:c7:87:e4:d2:0c:2a:08:6e:53:7f:3f:f9:e6:81:d6:dd:
78:53:28:7b:db:12:50:a6:17:61:ad:33:72:2d:7a:b2:f6:21:
32:ae:88:f0:4d:61:b6:d7:d5:47:4d:8f:26:f0:21:5e:67:01:
25:e6:31:0e:b1:ef:aa:4d:f6:23:1d:63:9e:ad:16:1d:f6:b8:
05:26:cf:ab:77:c3:40:e5:70:1d:d7:85:6a:97:5f:f6:af:fe:
90:a5:9c:90:18:02:49:aa:c0:cb:7d:c2:9f:00:5d:46:c8:94:
38:0b:d3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:22 2026 by rpki-client