Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
File: BG5SgQdApuwTSZPbya0RtkVNmno.mft (raw, json)
Hash identifier: CDzT29PYrVk5aRqCmjdfIC647/C+440F/B000b9+yIA=
Subject key identifier: 34:81:6A:7D:2D:B4:8D:90:83:18:77:57:15:4B:47:DC:78:B7:FC:2C
Authority key identifier: 04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
Certificate issuer: /CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Certificate serial: 01A08D8DBF74643A052078EDE585D94DC4FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
Manifest number: 0A3D
Signing time: Thu 10 Sep 2026 23:01:12 +0000
Manifest this update: Thu 10 Sep 2026 23:01:12 +0000
Manifest next update: Fri 11 Sep 2026 23:01:12 +0000
Files and hashes: 1: BG5SgQdApuwTSZPbya0RtkVNmno.crl (hash: jneZpUctZGhPVqySPHzv69Ta5Qq/Tpta9ev4+pJ5PSk=)
2: a9jZwxcqI34mhuCt3thAAI-XO7Q.roa (hash: aj2CjjO2duZcrFHfSQxM4wde7HcT3fufS42YR1B/tQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:bf:74:64:3a:05:20:78:ed:e5:85:d9:4d:c4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Validity
Not Before: Sep 10 23:01:12 2026 GMT
Not After : Sep 11 23:01:12 2026 GMT
Subject: CN=34816a7d2db48d9083187757154b47dc78b7fc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8b:f4:1d:64:7c:3e:4a:64:b0:26:41:1a:e8:
24:99:ab:0d:fe:d9:46:94:c4:e7:0d:7d:2d:9f:c8:
62:6d:74:60:51:e1:f8:a1:8f:94:9e:b2:c5:fa:92:
66:79:06:0b:d0:3d:76:6b:08:6a:ae:30:37:a0:bc:
4e:64:f2:bc:2c:d6:3b:28:70:23:a5:b5:95:12:4c:
c3:78:94:7f:80:79:0c:99:cd:07:e2:c9:52:d6:24:
5e:10:4e:73:ae:6e:77:45:53:6c:6c:12:f2:1b:e5:
d9:ef:b1:5c:51:fd:50:5a:cc:a2:b9:3c:71:12:13:
32:2e:11:4e:78:84:a4:85:53:e0:6a:20:6f:98:ba:
a7:47:50:6d:f4:e5:cc:8c:02:6a:69:3a:09:18:b5:
11:1e:d8:2f:1d:41:8e:64:e7:4d:42:a4:14:01:d4:
30:39:9b:92:01:4c:45:9f:80:97:ff:9a:fa:3d:5c:
d0:6b:3e:b2:cd:ac:a4:84:3b:93:59:16:67:2e:b5:
bc:79:53:4e:1c:b9:88:99:5e:c6:f7:b4:5a:03:96:
81:dd:17:d0:44:90:58:32:f5:49:ea:8a:68:d3:da:
43:10:d9:25:62:2a:06:0e:39:29:b7:86:36:e6:59:
01:74:02:2b:4e:51:55:e4:6d:b1:3e:a3:a8:b7:98:
06:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:81:6A:7D:2D:B4:8D:90:83:18:77:57:15:4B:47:DC:78:B7:FC:2C
X509v3 Authority Key Identifier:
keyid:04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:de:4d:97:38:55:ca:94:81:7f:32:06:7a:61:78:53:4e:45:
7e:53:51:24:66:fa:6d:d4:ba:c8:7d:49:61:d0:3a:87:6e:7e:
36:81:65:14:d8:a7:69:3a:c5:18:62:1a:b9:fc:bf:33:bd:96:
dd:6a:3f:6b:55:f7:4c:3f:1c:9c:4e:97:28:73:68:bf:64:93:
3a:b7:ba:02:03:ad:a2:a9:23:6d:cd:d5:2b:ec:87:28:bc:48:
cd:b3:ec:b9:60:43:6a:a0:6e:83:13:bc:17:99:ed:8c:37:60:
9d:5c:c3:11:60:a0:10:fb:5e:32:ca:0a:ed:7c:dd:48:c0:15:
a3:b7:f0:ab:da:9d:18:88:4c:c0:6b:90:c3:78:58:52:4e:33:
37:d4:6d:14:49:25:f2:9b:7d:1b:7a:10:f4:66:97:d9:e3:32:
de:6a:10:ac:7b:4e:a8:94:ba:28:ae:43:81:7b:13:5c:60:17:
32:38:dc:90:8c:93:3b:ac:7f:b0:49:70:ae:52:14:0f:47:4e:
54:fb:ff:2b:2d:59:17:55:81:e5:d4:ea:3e:63:f3:6a:c0:a5:
e8:c7:fc:27:6d:af:c2:ff:6f:65:60:a7:90:0d:77:40:23:c5:
da:55:e4:6a:8f:22:d2:1b:b8:89:ac:4a:e0:31:2a:dd:c4:17:
18:d0:17:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:50:13 2026 by rpki-client