Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
File: BG5SgQdApuwTSZPbya0RtkVNmno.mft (raw, json)
Hash identifier: 8WHebbJiSRIdYe2YpX4SCrRM57x/nBA3f4YA1f4nlek=
Subject key identifier: 64:72:32:B3:6C:7E:DB:CD:9F:4C:FF:46:F0:72:61:8F:DB:DB:75:E2
Authority key identifier: 04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
Certificate issuer: /CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Certificate serial: 019FA1F22D8B35B4C5C98490C76ACD29ADF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
Manifest number: 09C3
Signing time: Mon 27 Jul 2026 05:00:30 +0000
Manifest this update: Mon 27 Jul 2026 05:00:30 +0000
Manifest next update: Tue 28 Jul 2026 05:00:30 +0000
Files and hashes: 1: BG5SgQdApuwTSZPbya0RtkVNmno.crl (hash: V+FsayJL4jPQCdWmmlHh8uo4HHEA/Fsubxb1nTGPOhY=)
2: a9jZwxcqI34mhuCt3thAAI-XO7Q.roa (hash: aj2CjjO2duZcrFHfSQxM4wde7HcT3fufS42YR1B/tQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:2d:8b:35:b4:c5:c9:84:90:c7:6a:cd:29:ad:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Validity
Not Before: Jul 27 05:00:30 2026 GMT
Not After : Jul 28 05:00:30 2026 GMT
Subject: CN=647232b36c7edbcd9f4cff46f072618fdbdb75e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:9b:03:67:70:50:4c:4a:24:5a:46:11:36:
1d:3f:7e:82:d8:99:1a:a7:54:d9:fa:46:ad:48:a9:
9d:ef:c4:86:97:1a:71:05:8a:db:26:7f:cb:0d:60:
a1:04:b2:57:f5:34:0a:66:ed:e3:81:df:1d:5d:ab:
be:97:54:7c:cd:14:7a:4f:78:8a:66:e8:e6:91:e9:
c0:de:f7:e9:5b:8f:a4:54:61:07:06:3c:4b:17:58:
d7:2d:ad:ca:d5:50:7b:a1:9e:72:99:f2:c6:90:c3:
0f:75:10:f3:8c:ca:f9:3e:24:3d:6b:75:95:d0:31:
f6:c8:77:15:2a:d7:0e:68:69:94:85:19:23:55:f1:
30:16:fb:69:fc:05:72:c1:a1:3d:d3:62:0b:47:79:
6b:c6:70:9d:86:0a:51:fb:9d:4c:9d:45:d7:9f:38:
90:b1:a5:cd:ce:78:da:6d:ff:7e:e5:cf:cc:4a:13:
00:11:a7:53:cc:81:c2:f9:de:3e:90:e4:6c:c9:4f:
8f:ba:b0:b7:1a:de:f5:38:10:75:55:ec:4b:1c:76:
7f:dc:e7:5c:80:26:15:b4:0d:d4:c8:0e:67:a2:04:
06:70:d9:b0:3e:f0:cb:30:98:f5:71:4d:16:83:22:
9b:98:33:99:d4:18:02:ca:32:c8:6c:50:df:58:7c:
3a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:72:32:B3:6C:7E:DB:CD:9F:4C:FF:46:F0:72:61:8F:DB:DB:75:E2
X509v3 Authority Key Identifier:
keyid:04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:9c:6c:e3:cb:d7:1d:a7:15:e9:c2:32:61:d4:1f:67:16:fd:
9a:3a:16:ff:25:a0:93:4b:92:56:18:82:62:f1:ef:93:c9:e5:
82:e9:01:9d:32:7d:82:ca:3a:2c:36:bf:02:c3:91:44:c5:c0:
4c:11:65:f2:15:2a:87:40:b8:9f:21:db:a7:43:26:21:42:1a:
a6:d9:48:02:96:e7:38:07:d5:eb:c6:9d:18:f4:dc:cd:ab:71:
b4:06:7d:fe:6c:c3:6d:92:87:09:bf:9d:3f:44:8f:71:ae:14:
d4:27:7f:0f:d5:25:80:cb:85:04:6d:09:2e:80:21:64:86:0f:
38:6a:b5:b0:7c:bd:e3:89:01:69:11:8f:56:80:71:17:4f:79:
47:52:48:e0:d5:3d:25:88:38:4b:61:32:0e:1a:66:8c:81:27:
68:ae:9e:34:12:63:6a:52:bb:01:48:39:85:1d:92:2d:c1:d2:
76:f7:75:5a:39:3e:70:48:49:b4:17:94:38:69:34:d9:93:9e:
0d:31:6e:1a:62:62:2b:94:2f:68:94:c3:50:13:dc:c1:4b:37:
0c:4b:04:a0:02:b4:21:05:0e:fa:a7:7e:31:6f:37:8f:7b:1e:
57:8a:16:44:ac:b6:79:3d:f8:e0:9c:73:02:16:07:de:44:7a:
4a:2f:17:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:47:06 2026 by rpki-client