Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
File: BGrKxxMSOFbUrmwWBUYCaE39B8s.mft (raw, json)
Hash identifier: U+VMoai6X0rkLCK7IWIRKUj2fnxL4YAuFj0VGlHU1J8=
Subject key identifier: E8:99:FB:DF:4D:7F:81:EE:53:9D:69:71:E1:62:94:4F:A9:6D:39:A5
Authority key identifier: 04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
Certificate issuer: /CN=046acac713123856d4ae6c16054602684dfd07cb
Certificate serial: 019D37C04F6674555141C4B4A9273E87DD3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
Manifest number: 06D8
Signing time: Sun 29 Mar 2026 04:00:43 +0000
Manifest this update: Sun 29 Mar 2026 04:00:43 +0000
Manifest next update: Mon 30 Mar 2026 04:00:43 +0000
Files and hashes: 1: BGrKxxMSOFbUrmwWBUYCaE39B8s.crl (hash: ohi1lAWp/i2Jlfxc2ETo1ZRNGby129u/VbMuOINfn/c=)
2: QJ1HkdAXItAzxlhFaHYQmHmX4Xs.roa (hash: MUkecizqv3eYRM3Ng4C7CpXSwUounW1ENydthr9OUwA=)
3: hDQul7piZLbpWbBlOifimJQ2VkY.roa (hash: o6sQbndgLUFB0FZlM1NF6tMiqg+wB0oHdManJlFqalo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:4f:66:74:55:51:41:c4:b4:a9:27:3e:87:dd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046acac713123856d4ae6c16054602684dfd07cb
Validity
Not Before: Mar 29 04:00:43 2026 GMT
Not After : Mar 30 04:00:43 2026 GMT
Subject: CN=e899fbdf4d7f81ee539d6971e162944fa96d39a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ac:b7:9c:e3:71:59:62:89:36:a6:51:92:58:
7a:8f:55:5f:22:8d:46:b0:0c:a5:c8:c6:f3:9f:59:
09:dd:49:c5:8a:c8:52:1b:c7:42:6f:df:71:fd:a4:
84:e5:21:2f:65:09:6d:df:74:40:0a:ae:47:8c:56:
62:24:48:17:4f:75:c6:e9:7a:16:6a:23:a1:8c:f4:
a0:89:62:ea:d1:cc:f6:75:91:20:b0:97:b4:45:8a:
56:8a:38:0e:59:96:da:7c:92:0e:cb:8a:4a:56:53:
db:dc:55:ee:94:fa:49:b4:a7:82:41:33:0b:a8:18:
e7:a9:6e:2a:f3:31:6e:d8:41:69:4b:a3:41:77:73:
e7:df:ba:a0:23:8e:2b:f7:9d:74:ae:81:58:13:02:
08:c7:58:4a:1b:03:01:fc:91:7b:0a:f3:84:b3:6d:
f1:c0:34:81:b2:28:23:22:8f:ff:d7:96:73:35:c6:
5f:7f:7b:90:f3:6f:20:b6:5f:31:7a:d5:c0:12:2e:
62:e9:c2:63:c4:70:96:07:90:ce:55:19:60:4b:9a:
58:5f:16:53:5b:a6:89:0c:11:6a:ed:94:2a:1c:be:
3a:26:63:74:f1:dc:48:ab:a0:90:55:3d:d2:ca:b9:
29:4b:f9:c9:ae:59:ab:88:b8:60:6c:fd:20:1c:a4:
5f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:99:FB:DF:4D:7F:81:EE:53:9D:69:71:E1:62:94:4F:A9:6D:39:A5
X509v3 Authority Key Identifier:
keyid:04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a6:7a:11:95:4b:52:af:9e:27:b2:6d:ec:19:a4:e8:1c:6d:
b1:56:a1:b2:f2:8b:73:11:5f:d6:4c:10:88:6e:09:fd:bc:0c:
12:7d:d3:f0:ea:ff:72:9a:23:28:01:fe:32:0a:ec:40:4a:b4:
cc:d9:2e:51:1c:78:ae:7f:b7:31:21:bd:2b:47:31:94:65:37:
b9:c1:ec:62:64:a0:09:94:e4:6d:87:59:2f:24:f0:55:b4:29:
c4:9a:66:79:fb:f2:25:16:70:e4:15:05:bc:dc:ba:74:1c:58:
1b:31:29:47:7f:f1:26:8c:50:1a:29:26:17:48:ac:71:e6:9f:
40:31:92:79:ae:cf:a3:cb:df:48:22:e1:9f:1a:1a:f6:3d:7d:
39:2c:15:1d:6b:0b:da:f6:a9:2c:d8:a0:14:43:d0:b7:2f:91:
f9:16:a7:ad:48:f1:c2:6e:b5:ad:14:41:2f:f6:95:b7:95:3d:
7c:4b:ac:c2:d1:3c:a0:53:67:19:a9:e0:43:df:45:5d:f4:49:
65:1f:4e:c8:a0:c6:12:6f:4a:e2:64:e2:47:2e:18:f9:4b:a0:
ac:f9:bd:61:76:9b:8d:d8:22:8f:e0:04:eb:86:05:98:80:61:
f6:95:d2:2c:a8:f6:8b:91:18:c0:c4:0e:f6:26:bd:87:01:3b:
02:62:5a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:47 2026 by rpki-client