Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
File: BGrKxxMSOFbUrmwWBUYCaE39B8s.mft (raw, json)
Hash identifier: yc6to96DqlRHubNY+kjs+Iszpgwp6vttippxpBrurGI=
Subject key identifier: 42:47:31:3E:79:39:3B:DC:98:74:80:CC:F8:19:54:36:82:23:BA:B3
Authority key identifier: 04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
Certificate issuer: /CN=046acac713123856d4ae6c16054602684dfd07cb
Certificate serial: 019F189EC5A969F934726CC84EB949D67F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
Manifest number: 07D1
Signing time: Tue 30 Jun 2026 13:01:26 +0000
Manifest this update: Tue 30 Jun 2026 13:01:26 +0000
Manifest next update: Wed 01 Jul 2026 13:01:26 +0000
Files and hashes: 1: BGrKxxMSOFbUrmwWBUYCaE39B8s.crl (hash: GLAojlsWxxUNTyQbaL5HfkNQMkV5xiECRyubaCe/55A=)
2: QJ1HkdAXItAzxlhFaHYQmHmX4Xs.roa (hash: MUkecizqv3eYRM3Ng4C7CpXSwUounW1ENydthr9OUwA=)
3: hDQul7piZLbpWbBlOifimJQ2VkY.roa (hash: o6sQbndgLUFB0FZlM1NF6tMiqg+wB0oHdManJlFqalo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:c5:a9:69:f9:34:72:6c:c8:4e:b9:49:d6:7f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046acac713123856d4ae6c16054602684dfd07cb
Validity
Not Before: Jun 30 13:01:26 2026 GMT
Not After : Jul 1 13:01:26 2026 GMT
Subject: CN=4247313e79393bdc987480ccf81954368223bab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bd:6d:57:0c:d8:13:03:cd:8d:b2:60:bc:a1:
c3:c2:c7:2f:32:96:98:d1:c1:c4:ce:58:6c:ce:8d:
cc:5a:a2:f3:ef:fe:d5:02:6c:44:21:de:b8:ea:3a:
bc:7c:0a:3b:f5:40:71:d9:a0:0e:ed:5e:71:88:a1:
d7:58:e0:03:5c:9b:30:6b:5d:db:85:48:09:50:57:
2a:4c:51:89:d0:83:1a:7d:3e:90:84:ee:c3:00:19:
2f:84:8d:32:e8:04:77:f2:c6:28:22:1c:6a:e2:e7:
b2:f5:19:04:de:6c:dd:9b:dc:4e:e7:d9:4c:aa:75:
3f:33:04:86:47:21:9e:17:7f:62:b1:08:92:19:18:
c5:da:2b:e9:dc:a1:55:08:3e:a4:33:a2:c9:a2:c1:
40:ac:9a:13:97:66:c4:f8:0b:66:64:94:2c:c0:08:
47:8a:5c:e2:78:56:06:ca:7b:36:10:4e:c1:3e:2e:
6c:4f:97:d1:63:39:90:3f:5d:94:0e:21:47:12:2a:
d9:24:03:dc:e3:4b:0c:bc:b2:cb:1c:5b:2d:d9:cb:
65:41:7f:9a:43:93:9b:31:ed:09:48:66:4f:04:41:
18:49:3a:7d:3a:88:05:bf:34:5b:a4:fc:7c:f9:b2:
67:c7:6d:22:09:c4:06:8e:9a:55:49:06:aa:6d:10:
43:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:47:31:3E:79:39:3B:DC:98:74:80:CC:F8:19:54:36:82:23:BA:B3
X509v3 Authority Key Identifier:
keyid:04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2f:66:a0:8a:95:4e:ab:5d:53:dd:16:f5:ca:c0:93:50:77:
f3:68:8c:bb:54:cf:4b:e8:c3:bc:d9:cd:57:73:d1:57:53:3f:
73:39:89:57:57:45:a5:8b:ed:50:b4:b3:43:21:73:2a:d1:61:
77:59:1f:80:20:6d:02:2b:00:a8:4d:e0:5d:c5:b6:04:72:15:
28:20:78:26:96:29:1b:88:78:1a:87:16:e2:aa:07:74:ce:71:
73:a0:74:13:99:c6:fa:71:cf:22:f7:e4:a8:7e:96:53:c8:f3:
85:ed:d6:2a:b1:20:b9:3d:c4:49:88:bf:3b:42:d1:21:dd:75:
50:6c:0b:53:28:3c:22:86:eb:44:ef:64:a6:88:6e:db:38:04:
11:a0:b4:a3:c2:5b:d4:b1:85:b8:2b:35:c3:bc:df:82:d0:81:
e2:5d:0f:e8:64:b9:5e:a9:d3:ba:e4:c9:ab:1e:50:2d:12:3d:
84:5d:cb:fe:88:28:7a:d3:57:69:0e:fa:28:35:c4:9e:d7:ed:
0b:14:d0:4c:06:55:a8:4a:8c:58:ed:f9:3d:6d:1f:87:92:cd:
82:d2:48:4e:aa:e1:4a:c3:9d:6c:87:8d:46:9a:bc:08:d2:13:
11:dd:10:3f:0a:7e:2d:31:3c:9a:b0:15:64:05:f3:f8:af:35:
dd:68:ac:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnsWpafk0cmzITrlJ1n82MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NmFjYWM3MTMxMjM4NTZkNGFlNmMxNjA1NDYwMjY4NGRm
ZDA3Y2IwHhcNMjYwNjMwMTMwMTI2WhcNMjYwNzAxMTMwMTI2WjAzMTEwLwYDVQQD
Eyg0MjQ3MzEzZTc5MzkzYmRjOTg3NDgwY2NmODE5NTQzNjgyMjNiYWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA271tVwzYEwPNjbJgvKHDwscvMpaY
0cHEzlhszo3MWqLz7/7VAmxEId646jq8fAo79UBx2aAO7V5xiKHXWOADXJswa13b
hUgJUFcqTFGJ0IMafT6QhO7DABkvhI0y6AR38sYoIhxq4uey9RkE3mzdm9xO59lM
qnU/MwSGRyGeF39isQiSGRjF2ivp3KFVCD6kM6LJosFArJoTl2bE+AtmZJQswAhH
ilzieFYGyns2EE7BPi5sT5fRYzmQP12UDiFHEirZJAPc40sMvLLLHFst2ctlQX+a
Q5ObMe0JSGZPBEEYSTp9OogFvzRbpPx8+bJnx20iCcQGjppVSQaqbRBDSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJHMT55OTvcmHSAzPgZVDaCI7qzMB8GA1UdIwQY
MBaAFARqyscTEjhW1K5sFgVGAmhN/QfLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdyS3h4TVNPRmJVcm13V0JVWUNhRTM5QjhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MTg2ZTQtYTJhMC00YmRhLWJjODgt
ZTZlOTI4Y2U1MzRmLzEvQkdyS3h4TVNPRmJVcm13V0JVWUNhRTM5QjhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS80MTg2ZTQtYTJhMC00YmRhLWJjODgtZTZlOTI4Y2U1MzRm
LzEvQkdyS3h4TVNPRmJVcm13V0JVWUNhRTM5QjhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVy9moIqV
TqtdU90W9crAk1B382iMu1TPS+jDvNnNV3PRV1M/czmJV1dFpYvtULSzQyFzKtFh
d1kfgCBtAisAqE3gXcW2BHIVKCB4JpYpG4h4GocW4qoHdM5xc6B0E5nG+nHPIvfk
qH6WU8jzhe3WKrEguT3ESYi/O0LRId11UGwLUyg8IobrRO9kpohu2zgEEaC0o8Jb
1LGFuCs1w7zfgtCB4l0P6GS5XqnTuuTJqx5QLRI9hF3L/ogoetNXaQ76KDXEntft
CxTQTAZVqEqMWO35PW0fh5LNgtJITqrhSsOdbIeNRpq8CNITEd0QPwp+LTE8mrAV
ZAXz+K813WisCg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:11:24 2026 by rpki-client