Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
File: BG5SgQdApuwTSZPbya0RtkVNmno.mft (raw, json)
Hash identifier: sn3wdXnVHvw2r47jsmaoDWVPGIbn3EjCe+P2g/RDi+4=
Subject key identifier: 55:22:4E:7B:9F:2E:88:BB:05:CC:E7:DA:1B:8A:46:C8:52:7E:D6:6B
Authority key identifier: 04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
Certificate issuer: /CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Certificate serial: 01A180E20082F880689BAD1AD6737CEF2C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
Manifest number: 0ABB
Signing time: Wed 28 Oct 2026 05:00:57 +0000
Manifest this update: Wed 28 Oct 2026 05:00:57 +0000
Manifest next update: Thu 29 Oct 2026 05:00:57 +0000
Files and hashes: 1: BG5SgQdApuwTSZPbya0RtkVNmno.crl (hash: zg9LehGqaXpJqPDWgFPCWQSA9qALs6do36ezf1zrfcw=)
2: a9jZwxcqI34mhuCt3thAAI-XO7Q.roa (hash: aj2CjjO2duZcrFHfSQxM4wde7HcT3fufS42YR1B/tQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:00:82:f8:80:68:9b:ad:1a:d6:73:7c:ef:2c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Validity
Not Before: Oct 28 05:00:57 2026 GMT
Not After : Oct 29 05:00:57 2026 GMT
Subject: CN=55224e7b9f2e88bb05cce7da1b8a46c8527ed66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:18:52:97:18:7d:7f:a7:82:0b:bc:45:1f:a3:
a0:22:8d:cd:44:31:e2:0b:0f:4f:50:7a:f5:d4:f4:
94:ff:8f:3e:ec:7b:e7:c0:42:35:53:4d:6c:43:1e:
25:6e:f9:fd:09:90:5b:44:a7:02:72:19:97:f6:20:
b5:94:e0:6a:e8:e3:4e:70:d0:bf:b7:d3:7a:c9:1e:
fd:0b:ae:10:45:6a:55:8d:42:0e:0c:61:72:9a:c5:
3f:f7:b6:98:13:3f:51:af:e2:5d:51:59:f5:39:4d:
f0:87:8f:93:4e:3f:39:d5:0f:1c:bf:5e:08:7a:99:
91:81:b2:02:2b:fb:40:07:2a:ac:82:f0:9a:2c:2f:
36:c4:3f:a6:09:d1:32:d8:76:e9:eb:94:4a:3a:ba:
43:1e:90:ef:61:d1:87:cc:7e:b6:0a:f5:0b:e6:35:
f7:68:bc:d9:2b:8d:93:ee:65:5e:4c:c5:e4:55:70:
e0:23:c5:c6:97:3c:36:29:9f:f9:a9:17:bc:55:d0:
b1:45:09:0c:29:e1:2e:40:79:24:1f:d3:a4:3a:16:
e9:5d:7b:c8:bf:cb:49:0d:e2:ac:fe:0a:72:7d:6b:
a7:cc:04:18:39:28:03:ec:e7:20:ab:84:a4:7a:04:
14:c2:de:0d:95:80:51:4b:7a:8d:de:bd:b8:13:9b:
09:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:22:4E:7B:9F:2E:88:BB:05:CC:E7:DA:1B:8A:46:C8:52:7E:D6:6B
X509v3 Authority Key Identifier:
keyid:04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:67:c6:4c:48:48:80:b4:ce:8d:10:26:70:f4:b3:dc:2b:94:
7e:e6:e5:58:e4:c7:47:b6:ad:fb:45:e5:4a:0f:a7:0d:77:9c:
09:59:13:54:8e:e8:60:ce:8c:ef:9e:4b:57:e4:e2:14:78:77:
e9:88:f6:3f:02:7c:45:39:2c:3f:28:34:e2:bb:13:68:72:86:
99:4f:de:23:58:ec:03:5a:fe:c0:69:74:24:9b:98:db:ed:1a:
34:bd:54:db:cb:86:b0:29:42:73:42:9a:a1:7b:82:ea:15:f3:
1d:2d:8b:61:d4:b7:e5:8d:68:b5:a0:a6:f0:50:86:89:a9:a4:
1c:a3:53:00:f0:d6:16:5f:a3:00:f7:c5:ae:ba:50:22:1a:9c:
5f:85:e4:2b:63:68:cc:e0:3f:88:88:24:b0:5c:21:26:00:b3:
52:55:c9:8d:69:49:17:d6:f0:87:a5:1b:c3:65:38:79:a1:67:
44:2f:96:41:6e:0f:06:53:88:e9:f1:96:a6:8a:3d:e9:a8:44:
12:12:b1:b9:e1:d0:d4:ff:1e:af:5a:01:7d:fe:5d:b0:35:52:
a0:fd:e8:91:b6:15:e7:2d:08:ff:62:17:10:d3:85:92:17:ba:
04:97:e5:98:0d:bc:97:0f:51:f3:ab:39:08:9f:ac:11:40:02:
b9:04:2c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:33:40 2026 by rpki-client