Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File: Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier: G4kQ3Mk980n2FxISQrBXuR5CfthBmu/TKRYonnKdrvo=
Subject key identifier: 6D:C4:B2:72:BF:CC:AC:90:D1:81:95:9B:87:D3:D8:38:25:0D:4B:72
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer: /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial: 019D382E2F55941D7865D2106FF50F40FEEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:43 +0000
Manifest this update: Sun 29 Mar 2026 06:00:43 +0000
Manifest next update: Mon 30 Mar 2026 06:00:43 +0000
Files and hashes: 1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: KttxfKVKrBrs246fZQp+pizktU1H9dOSwcd9xRgQT7Y=)
2: YQOC7uY6FRNmBO9ZN7PiM76yo6I.roa (hash: F4wrLCo6AyKDL70hM0i0er3GASQZx9E2NWI72xLZxxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2f:55:94:1d:78:65:d2:10:6f:f5:0f:40:fe:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Validity
Not Before: Mar 29 06:00:43 2026 GMT
Not After : Mar 30 06:00:43 2026 GMT
Subject: CN=6dc4b272bfccac90d181959b87d3d838250d4b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:64:a7:7f:f7:e0:30:3f:f4:f7:4a:0d:46:de:
a1:b4:13:38:81:58:bd:4e:43:a2:aa:f5:ac:70:71:
24:ec:6c:53:93:a7:df:1c:72:e5:59:50:14:e4:7d:
cc:cd:25:c6:d1:59:60:71:e2:1f:b1:1b:39:a8:ee:
62:f3:8d:1f:54:ca:3b:61:7e:57:f6:2b:22:22:8a:
da:e7:8a:33:c1:ce:61:93:ec:b3:b6:c1:8f:52:22:
8a:1a:35:66:b4:fc:9d:7e:26:6f:a6:90:9a:52:30:
15:df:c1:40:00:54:c2:de:b7:42:b1:f4:9f:15:ec:
db:d9:0a:67:83:10:7f:93:d1:c9:45:36:cf:59:cc:
77:fb:9f:b6:bb:38:d4:62:b4:f8:d7:85:83:bc:f8:
6b:bc:b8:60:71:05:83:e9:ef:73:9f:f9:4c:73:2f:
b7:5d:9c:23:0a:dd:77:a5:e3:51:d2:d7:16:4f:52:
a6:cb:4c:d3:46:79:5e:bc:17:14:03:d5:34:b4:7b:
db:66:30:9d:03:73:7e:3f:18:2d:ed:a5:94:0f:dd:
1a:65:ea:96:e0:72:3c:07:cd:d2:4f:75:19:fa:e9:
26:dc:02:05:3f:69:5c:05:95:0b:f3:72:de:01:85:
31:cb:2a:7e:66:2c:f0:8b:8e:96:b8:5b:b4:9f:44:
11:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C4:B2:72:BF:CC:AC:90:D1:81:95:9B:87:D3:D8:38:25:0D:4B:72
X509v3 Authority Key Identifier:
keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f2:a5:17:eb:d6:65:65:d5:65:7f:45:d8:15:0a:fc:75:7e:
32:05:8e:86:0c:65:b1:da:b6:bc:fc:78:fe:5a:cf:1d:bb:e5:
01:bd:96:cc:8a:3c:7e:d3:fb:30:50:69:f0:0f:c4:d8:aa:73:
d2:12:e6:ba:d1:7b:be:ac:a4:06:61:ce:66:24:9d:0d:21:2d:
fd:1f:cb:44:3f:fd:1b:09:c0:2a:3f:37:6e:63:2d:17:7a:63:
bf:d9:44:9c:62:19:f4:b9:b3:69:9c:94:50:00:94:ca:95:9d:
c1:8c:bc:b9:b7:c3:57:c9:99:df:97:e7:2d:80:e8:6f:43:50:
1b:d8:14:e3:63:9f:62:e2:7c:e1:17:c6:96:8b:bb:98:38:1b:
e9:fa:f5:11:3d:3f:34:c3:2a:14:a4:4c:60:92:f1:6d:fe:21:
16:3c:75:84:ee:be:05:5e:35:f4:d9:63:ef:4c:e9:62:3c:55:
8b:c7:9d:7a:de:aa:b0:d5:78:d0:c3:8c:7b:ed:d3:4e:91:31:
89:18:44:ee:d9:ce:af:0e:e9:0d:0f:ec:19:d6:10:5d:b5:cd:
2f:95:ba:25:61:07:54:a5:91:36:92:b8:12:97:79:7f:6d:c1:
bb:11:ad:7e:86:25:a2:d8:1c:0f:9c:93:eb:6a:8b:78:ab:6d:
b1:53:c3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:50 2026 by rpki-client