Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File: Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier: O46ZgEywDH/L2N6lm9Uh471IErFSXNqs6k8SxFM6fhE=
Subject key identifier: C2:91:DD:1A:3F:80:2B:14:76:88:C6:FC:9E:45:75:92:4B:46:D1:45
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer: /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial: 01A13D80EFE92435840C4C3B36569144E1BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 03:00:22 +0000
Manifest this update: Thu 15 Oct 2026 03:00:22 +0000
Manifest next update: Fri 16 Oct 2026 03:00:22 +0000
Files and hashes: 1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: 4tjpYadRZwP+q0TgC8+gulod6ljKW2YCwPdId9WgeoA=)
2: YQOC7uY6FRNmBO9ZN7PiM76yo6I.roa (hash: F4wrLCo6AyKDL70hM0i0er3GASQZx9E2NWI72xLZxxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:80:ef:e9:24:35:84:0c:4c:3b:36:56:91:44:e1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Validity
Not Before: Oct 15 03:00:22 2026 GMT
Not After : Oct 16 03:00:22 2026 GMT
Subject: CN=c291dd1a3f802b147688c6fc9e4575924b46d145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:ac:24:8d:d8:ce:1a:13:21:eb:43:71:b9:
87:9d:bb:e2:bb:96:51:3d:36:0d:1b:b5:8c:3f:3a:
ba:f3:9a:12:40:b0:46:ec:a5:95:15:fa:6a:fa:55:
88:5b:f5:ed:29:b9:10:2d:a4:ae:0a:d6:a8:36:bc:
2e:ca:d4:1f:43:08:05:2f:f3:8f:94:c7:4f:8a:de:
f5:fd:0e:fe:7a:b9:58:2d:3b:17:62:29:21:86:ef:
88:6f:d6:7a:6c:df:e2:44:c5:e3:54:9f:4b:66:7a:
92:67:d7:44:d9:a0:b6:ab:fe:f6:2a:24:42:5d:06:
1b:62:07:6e:30:73:7d:e0:bf:62:ea:8d:67:3a:94:
26:3a:ea:61:df:36:41:74:e5:ff:ed:5d:a5:f3:ca:
2e:be:ef:b2:8e:03:ba:d1:3d:b7:ca:4b:52:01:93:
e8:b0:58:1b:c5:96:6f:7f:01:ef:98:2b:55:0a:4c:
cf:c2:ae:21:77:dc:1a:d5:35:5c:14:0c:6d:39:12:
26:f8:bb:c2:94:8f:73:e7:30:8d:62:b2:4d:d9:72:
7b:2b:4d:c7:ba:fa:a2:f0:25:b8:89:ca:07:21:d5:
e3:b4:39:17:a8:30:d0:1a:3c:3b:07:c2:d9:cf:6d:
ca:b4:84:e8:c3:97:ac:25:64:dc:7c:0c:7b:c7:db:
17:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:91:DD:1A:3F:80:2B:14:76:88:C6:FC:9E:45:75:92:4B:46:D1:45
X509v3 Authority Key Identifier:
keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b6:93:e7:36:d8:d4:95:10:9d:b1:7e:32:bb:65:fd:c7:2b:
4f:1d:3a:f1:d9:5a:a4:b3:0c:05:7d:33:a3:45:1f:83:1f:73:
3b:97:ff:cc:bc:9c:38:fe:02:de:f3:35:94:d4:ba:fc:ef:4a:
11:d9:83:0e:c2:74:5f:bb:a5:45:8e:7d:1e:72:63:2d:fa:d2:
d4:d3:11:f6:93:d4:40:34:18:12:1a:09:3c:f4:61:60:9d:2b:
c6:61:13:cc:7a:43:7f:01:f4:39:5b:d2:7d:9b:ab:ea:7b:02:
b0:ce:2d:c2:35:5a:42:24:27:a5:90:1a:c4:09:ac:bc:6a:fd:
bb:ab:70:22:28:14:b1:f1:85:3f:26:a3:e4:10:16:47:15:ed:
58:d9:18:2f:9d:2d:85:99:71:37:fa:97:90:cb:ce:ba:87:ae:
bf:65:7f:12:5d:ee:f4:93:6d:5a:c2:e8:43:03:62:54:60:4b:
e2:3b:12:86:25:4f:d3:c7:70:c6:f0:f0:17:b2:34:9e:cb:56:
7f:a2:c2:ef:79:8c:f4:ab:ad:f9:a9:46:c5:68:fb:0c:1d:7f:
52:16:0f:6f:99:8a:7b:36:5f:8f:92:fb:4b:6a:c5:f7:75:8a:
e2:64:27:86:c2:4e:80:4e:c7:c6:52:64:9e:b7:f1:ea:26:cc:
f4:f1:cd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:18:21 2026 by rpki-client