Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
File: BG82Rli2TivxUNIPyDjDZCB5deI.mft (raw, json)
Hash identifier: 3Xgpcln03YjMGyFpWBvh4g6MZCWl93wQXWpXIuppMQ8=
Subject key identifier: 9D:A0:70:C3:8E:AF:BA:B4:A2:BA:F2:A3:29:06:5F:1C:27:18:35:0C
Authority key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
Certificate issuer: /CN=046f364658b64e2bf150d20fc838c364207975e2
Certificate serial: 019D3752E4F0A8D07CB2A3A3FEB2D2E9A794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 02:01:12 +0000
Manifest this update: Sun 29 Mar 2026 02:01:12 +0000
Manifest next update: Mon 30 Mar 2026 02:01:12 +0000
Files and hashes: 1: BG82Rli2TivxUNIPyDjDZCB5deI.crl (hash: Ga/Ujn0OF9qvZDxlffsVirhTDEILMXuXJ0U4ioWP8mQ=)
2: MrmdJdrahes4YHrf8GzXfXRAQTo.roa (hash: KDHItLe9nk7zEElA0XEEmNLAdVnKqz0qSQ47JBnQBmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:e4:f0:a8:d0:7c:b2:a3:a3:fe:b2:d2:e9:a7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046f364658b64e2bf150d20fc838c364207975e2
Validity
Not Before: Mar 29 02:01:12 2026 GMT
Not After : Mar 30 02:01:12 2026 GMT
Subject: CN=9da070c38eafbab4a2baf2a329065f1c2718350c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:01:70:6f:1f:b1:5b:d5:b2:7d:2f:6c:61:
17:ac:9f:22:d5:bc:2d:f0:d2:57:bd:20:2b:a7:6f:
73:79:0c:cc:d7:76:c4:df:50:59:f5:98:45:00:ae:
58:1c:88:cf:ce:ad:6a:09:d1:c0:38:b6:68:8b:39:
73:c1:81:e9:79:45:88:bb:8c:f7:fa:1f:5d:f9:20:
ce:ea:3c:0e:cd:5f:44:94:11:31:ad:31:cd:99:c9:
93:8c:bc:5a:65:b2:4a:93:d7:12:5b:c8:44:1c:ee:
fd:80:f4:34:95:95:d0:02:b8:c7:15:eb:1b:37:43:
61:c7:83:1f:4a:ee:e9:9f:25:cc:01:75:2c:8d:5a:
0c:f0:0d:9a:84:8c:a9:05:7f:aa:4e:dd:4f:39:05:
13:02:76:c7:ab:90:e2:26:80:92:fd:4e:84:2c:6c:
b3:eb:38:a7:0c:64:21:de:ec:d9:d2:be:b2:f0:69:
11:6f:2e:fe:b9:25:23:9e:c0:5f:17:43:aa:31:1f:
df:16:2a:cb:08:36:f4:61:cd:75:e7:d2:a5:6c:03:
c5:7a:aa:90:42:17:92:09:87:9a:8b:25:0c:69:29:
c7:35:e2:7e:e9:c5:3a:89:cb:f2:7f:dd:d0:1c:b0:
54:ec:17:0d:39:2c:64:4d:73:ea:a3:a0:59:11:03:
6b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A0:70:C3:8E:AF:BA:B4:A2:BA:F2:A3:29:06:5F:1C:27:18:35:0C
X509v3 Authority Key Identifier:
keyid:04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4a:83:f7:a7:d1:91:b1:20:54:33:bb:42:4a:03:7a:aa:a2:
13:4a:66:17:5c:64:e3:ed:b3:01:1a:d9:e3:0a:5f:b4:26:be:
1a:37:e7:0d:83:25:f8:d4:55:7c:09:7d:bb:2b:fd:92:b4:08:
b8:89:81:c4:df:de:8d:e3:cd:75:21:97:74:b8:8a:7e:3b:63:
e3:6b:e7:e2:95:d2:ff:6c:5e:0e:5b:a8:c1:5d:79:db:d8:a8:
cc:03:3e:a9:e6:97:8a:5d:f4:91:58:f4:52:b1:d2:40:f2:cb:
ea:56:a3:d8:85:41:2a:25:67:9e:c9:d4:bb:ef:dd:f7:f4:c9:
f1:21:f1:ac:59:0c:5a:8f:21:14:13:f7:a5:36:19:ea:85:59:
62:52:dd:ca:9a:c0:25:7e:7c:10:5d:44:f2:7b:5d:22:d8:34:
48:53:da:86:cb:1a:4e:38:3c:53:04:59:98:20:a5:8c:9a:d9:
4d:76:cc:c2:12:42:a1:95:41:ad:33:ad:46:45:f8:59:40:67:
69:46:e9:03:51:38:f4:84:82:16:7e:81:a7:c7:44:41:74:ea:
97:de:41:f3:df:f2:a5:25:7e:29:e5:d2:87:92:51:09:00:5b:
22:42:8b:53:89:71:de:a0:8e:f3:7f:c9:a8:3a:bb:ea:51:d8:
47:87:be:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UuTwqNB8sqOj/rLS6aeUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NmYzNjQ2NThiNjRlMmJmMTUwZDIwZmM4MzhjMzY0MjA3
OTc1ZTIwHhcNMjYwMzI5MDIwMTEyWhcNMjYwMzMwMDIwMTEyWjAzMTEwLwYDVQQD
Eyg5ZGEwNzBjMzhlYWZiYWI0YTJiYWYyYTMyOTA2NWYxYzI3MTgzNTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVcBcG8fsVvVsn0vbGEXrJ8i1bwt
8NJXvSArp29zeQzM13bE31BZ9ZhFAK5YHIjPzq1qCdHAOLZoizlzwYHpeUWIu4z3
+h9d+SDO6jwOzV9ElBExrTHNmcmTjLxaZbJKk9cSW8hEHO79gPQ0lZXQArjHFesb
N0Nhx4MfSu7pnyXMAXUsjVoM8A2ahIypBX+qTt1POQUTAnbHq5DiJoCS/U6ELGyz
6zinDGQh3uzZ0r6y8GkRby7+uSUjnsBfF0OqMR/fFirLCDb0Yc1159KlbAPFeqqQ
QheSCYeaiyUMaSnHNeJ+6cU6icvyf93QHLBU7BcNOSxkTXPqo6BZEQNrtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2gcMOOr7q0orryoykGXxwnGDUMMB8GA1UdIwQY
MBaAFARvNkZYtk4r8VDSD8g4w2QgeXXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEt
YTI1ZTA3Y2VhMmMwLzEvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEtYTI1ZTA3Y2VhMmMw
LzEvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOkqD96fR
kbEgVDO7QkoDeqqiE0pmF1xk4+2zARrZ4wpftCa+GjfnDYMl+NRVfAl9uyv9krQI
uImBxN/ejePNdSGXdLiKfjtj42vn4pXS/2xeDluowV1529iozAM+qeaXil30kVj0
UrHSQPLL6laj2IVBKiVnnsnUu+/d9/TJ8SHxrFkMWo8hFBP3pTYZ6oVZYlLdyprA
JX58EF1E8ntdItg0SFPahssaTjg8UwRZmCCljJrZTXbMwhJCoZVBrTOtRkX4WUBn
aUbpA1E49ISCFn6Bp8dEQXTql95B89/ypSV+KeXSh5JRCQBbIkKLU4lx3qCO83/J
qDq76lHYR4e+yw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:18 2026 by rpki-client