Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
File: BgOecctxUgSoPMJTgi3CmmLHmeY.mft (raw, json)
Hash identifier: X0Q6hzVtAca4Iua6kFdczkX+ntqrbcsApbqKoYfDWHk=
Subject key identifier: 9C:4D:91:30:B0:DB:FD:ED:B7:BC:16:FD:96:39:D1:C7:D6:13:6C:52
Authority key identifier: 06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
Certificate issuer: /CN=06039e71cb715204a83cc253822dc29a62c799e6
Certificate serial: 01A0005C2A1BC98DD141795882B5B5A83439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
Manifest number: 0B11
Signing time: Fri 14 Aug 2026 13:00:34 +0000
Manifest this update: Fri 14 Aug 2026 13:00:34 +0000
Manifest next update: Sat 15 Aug 2026 13:00:34 +0000
Files and hashes: 1: BgOecctxUgSoPMJTgi3CmmLHmeY.crl (hash: MMRumjdecxsnRd4TAR3KrYY76UZQXCwKDni/TnScecQ=)
2: WsB2cpz5PeeV12FuRGXIMnfEpDA.roa (hash: RXGdsxXZdhMgqQg6njT8x//0fSXw5JT6Hs6Qaa1Fb6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:2a:1b:c9:8d:d1:41:79:58:82:b5:b5:a8:34:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06039e71cb715204a83cc253822dc29a62c799e6
Validity
Not Before: Aug 14 13:00:34 2026 GMT
Not After : Aug 15 13:00:34 2026 GMT
Subject: CN=9c4d9130b0dbfdedb7bc16fd9639d1c7d6136c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:db:5b:91:6c:d4:7d:c9:39:3c:86:62:c6:
37:5c:a4:20:8f:d0:93:e4:a4:f5:c7:86:17:0c:12:
35:3e:92:20:05:2f:b7:c0:34:69:4c:7d:44:74:e5:
03:e2:41:d2:1c:2c:47:16:14:c9:00:71:a6:e1:8c:
98:0c:46:2e:4a:29:c9:27:7a:fb:ac:be:ac:5b:6e:
ff:75:c1:ba:4b:0a:f2:16:ce:e6:7e:45:6b:2b:c5:
4e:1d:21:5e:a8:fc:08:de:d3:11:ea:3a:e3:7c:92:
d7:32:2f:43:82:52:57:39:79:15:e9:33:9f:c2:3f:
08:7d:65:e1:79:b8:78:35:73:ea:62:3c:cc:24:c9:
31:1f:6f:72:c9:aa:f1:fc:45:18:a7:92:4b:cb:9d:
44:fb:12:bc:a9:2c:a8:af:e4:5f:0b:60:6d:41:bc:
4a:60:96:85:f3:fb:0f:3a:22:21:f4:14:8f:cb:77:
05:ab:89:34:4b:e0:4f:a8:01:61:2a:6e:ff:39:9a:
80:e6:d1:0e:06:f8:6d:ae:66:63:10:d6:31:e9:b7:
ed:e9:0b:fa:96:a7:a4:28:69:f9:65:b5:60:0b:bf:
dd:c8:8f:b5:8c:b2:a6:af:bd:41:8f:d4:ff:40:2a:
09:56:d1:99:73:e3:6f:80:47:68:4e:c1:c7:1b:d7:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4D:91:30:B0:DB:FD:ED:B7:BC:16:FD:96:39:D1:C7:D6:13:6C:52
X509v3 Authority Key Identifier:
keyid:06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6c:9e:15:97:e6:1a:21:56:ac:3c:e5:2a:ab:bf:58:a4:22:
ab:18:c6:0a:fb:92:a8:13:ff:3e:a9:5d:38:5b:7b:c6:c5:db:
ea:62:5f:a3:fd:27:7a:0a:19:b9:3a:37:5a:6b:20:ed:81:65:
61:78:8e:79:f5:f5:cb:30:e9:14:6f:08:5a:b7:24:b4:46:fd:
a6:34:04:e5:e3:90:52:8e:18:c4:19:81:81:0c:fe:7c:90:95:
24:59:d0:56:ac:93:b1:bf:cf:55:a4:74:1f:76:b2:02:97:d3:
d7:b1:24:92:aa:97:ea:2f:83:da:ae:e7:d8:71:33:b4:d2:e6:
4a:90:1a:85:de:0f:9f:9a:16:e2:65:e0:1a:ce:29:fc:8e:48:
ed:c3:80:0f:46:7d:68:28:b0:f7:a0:68:3b:9f:4a:5b:29:54:
28:4b:f0:a9:ec:73:04:b0:ec:a4:2a:f4:97:2a:e5:d7:24:2f:
b9:8b:e0:14:c9:49:eb:2b:26:f3:ea:ff:ab:d5:eb:05:16:66:
6d:e4:e3:b3:28:38:bc:cf:59:0c:72:ce:bc:44:73:d2:ee:71:
65:09:e8:e0:7f:60:46:53:6a:89:86:95:7f:55:22:24:7b:09:
9c:06:71:fc:d2:97:f5:e4:98:85:90:be:83:55:92:76:5c:fe:
71:40:f1:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXCobyY3RQXlYgrW1qDQ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDM5ZTcxY2I3MTUyMDRhODNjYzI1MzgyMmRjMjlhNjJj
Nzk5ZTYwHhcNMjYwODE0MTMwMDM0WhcNMjYwODE1MTMwMDM0WjAzMTEwLwYDVQQD
Eyg5YzRkOTEzMGIwZGJmZGVkYjdiYzE2ZmQ5NjM5ZDFjN2Q2MTM2YzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSfbW5Fs1H3JOTyGYsY3XKQgj9CT
5KT1x4YXDBI1PpIgBS+3wDRpTH1EdOUD4kHSHCxHFhTJAHGm4YyYDEYuSinJJ3r7
rL6sW27/dcG6SwryFs7mfkVrK8VOHSFeqPwI3tMR6jrjfJLXMi9DglJXOXkV6TOf
wj8IfWXhebh4NXPqYjzMJMkxH29yyarx/EUYp5JLy51E+xK8qSyor+RfC2BtQbxK
YJaF8/sPOiIh9BSPy3cFq4k0S+BPqAFhKm7/OZqA5tEOBvhtrmZjENYx6bft6Qv6
lqekKGn5ZbVgC7/dyI+1jLKmr71Bj9T/QCoJVtGZc+NvgEdoTsHHG9f7MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxNkTCw2/3tt7wW/ZY50cfWE2xSMB8GA1UdIwQY
MBaAFAYDnnHLcVIEqDzCU4Itwppix5nmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lNjI4NzktMmM2OS00MGMzLWIxMTYt
MGU0Njg3NWQ0NWZkLzEvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9lNjI4NzktMmM2OS00MGMzLWIxMTYtMGU0Njg3NWQ0NWZk
LzEvQmdPZWNjdHhVZ1NvUE1KVGdpM0NtbUxIbWVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmyeFZfm
GiFWrDzlKqu/WKQiqxjGCvuSqBP/PqldOFt7xsXb6mJfo/0negoZuTo3Wmsg7YFl
YXiOefX1yzDpFG8IWrcktEb9pjQE5eOQUo4YxBmBgQz+fJCVJFnQVqyTsb/PVaR0
H3ayApfT17EkkqqX6i+D2q7n2HEztNLmSpAahd4Pn5oW4mXgGs4p/I5I7cOAD0Z9
aCiw96BoO59KWylUKEvwqexzBLDspCr0lyrl1yQvuYvgFMlJ6ysm8+r/q9XrBRZm
beTjsyg4vM9ZDHLOvERz0u5xZQno4H9gRlNqiYaVf1UiJHsJnAZx/NKX9eSYhZC+
g1WSdlz+cUDxgQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:12:46 2026 by rpki-client