Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
File: BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json)
Hash identifier: B9AAXXG4bvU8doysu+n40GlpER7A2P09pkFBB/+crAE=
Subject key identifier: 55:5A:9B:25:24:BB:86:45:A0:3D:6F:5E:64:78:BF:F2:7F:7A:5B:84
Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
Certificate issuer: /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Certificate serial: 019D394159B22454C4A9DF4D73FF0CF278E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
Manifest number: 0D46
Signing time: Sun 29 Mar 2026 11:01:17 +0000
Manifest this update: Sun 29 Mar 2026 11:01:17 +0000
Manifest next update: Mon 30 Mar 2026 11:01:17 +0000
Files and hashes: 1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: J++vay5Ll8PK8T6/iBQv5A1L+GK2LtRwWS2L3qvxUCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:59:b2:24:54:c4:a9:df:4d:73:ff:0c:f2:78:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Validity
Not Before: Mar 29 11:01:17 2026 GMT
Not After : Mar 30 11:01:17 2026 GMT
Subject: CN=555a9b2524bb8645a03d6f5e6478bff27f7a5b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9a:a5:6e:ae:1a:5a:d1:83:e0:2d:5c:46:94:
1c:9b:30:98:a2:22:6a:82:51:1c:c0:40:69:66:76:
b2:59:75:f6:c1:c3:35:7d:81:a5:44:29:0f:46:82:
4b:54:b9:a6:3b:51:45:58:a8:0c:36:62:51:c2:a5:
6d:00:09:d1:20:40:a1:89:d4:7b:46:6c:c5:7a:32:
3e:5d:7f:a2:6a:73:c6:6e:47:5a:4a:05:85:71:54:
54:f6:58:50:60:49:e3:c3:07:9d:c6:9f:26:d9:33:
bc:37:21:ad:e8:e6:f5:0c:aa:c2:f9:3b:49:96:8a:
ab:f6:49:77:4c:c5:e3:99:26:58:cb:88:f9:49:8a:
6c:12:4f:f2:5e:68:54:4b:fa:c4:46:6f:9f:0f:c9:
14:90:86:fd:22:ef:64:13:11:3a:36:89:02:15:50:
6e:5a:3e:3f:2f:fa:1c:10:9d:78:06:f3:2a:f7:e8:
8e:26:b8:0f:2a:cb:b4:c6:0e:93:fa:61:0d:00:ce:
f7:57:6e:f0:46:31:a2:99:7e:2e:d3:1b:6a:63:68:
e5:f1:f3:da:ac:49:43:97:24:26:70:7d:3a:d0:90:
83:6b:73:67:51:a5:3b:6e:16:8b:2c:db:62:97:09:
ef:a5:8d:11:8c:75:e9:37:66:61:08:60:d0:70:6c:
3e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5A:9B:25:24:BB:86:45:A0:3D:6F:5E:64:78:BF:F2:7F:7A:5B:84
X509v3 Authority Key Identifier:
keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c2:76:a3:8d:24:35:14:a0:cf:2f:5c:92:ab:e3:58:c8:2d:
e1:a1:76:3e:a9:ec:46:31:e2:4b:8d:2d:5a:37:13:f1:38:1d:
38:be:20:d9:e3:fb:e1:9e:ab:ec:e4:af:bf:75:ee:4c:5e:c2:
44:38:b3:27:a6:db:8b:1b:32:ac:12:ef:72:48:74:90:b4:31:
53:11:ad:b9:e7:e6:36:b6:15:b4:8d:0f:ba:12:4c:43:2d:50:
cd:2c:85:78:50:56:84:f4:4d:d5:14:07:00:b7:1f:b4:f3:f1:
f0:0e:b2:54:60:e9:3d:41:49:c2:f8:41:39:1f:db:63:3b:29:
7e:71:1c:e4:d5:46:94:b9:8a:59:03:f9:19:00:ad:f2:d6:97:
1b:9a:f8:a4:13:ad:1c:dd:63:2a:1d:70:d4:c9:f5:97:58:8c:
66:ef:fb:d5:67:a4:cd:7d:b0:d8:50:32:f3:3a:95:d4:83:2a:
24:0b:7c:f7:f2:ad:ac:a2:70:9a:ad:bf:c1:6f:b3:ee:5a:20:
58:88:18:ec:63:17:31:8b:de:98:4d:d8:96:cc:4e:08:ff:aa:
19:6d:df:e9:4b:8e:12:53:7d:77:ed:90:03:0a:4c:0d:74:d4:
98:01:6b:ea:59:3b:b1:52:40:62:8b:82:f0:06:d8:81:e6:87:
04:60:d7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:14 2026 by rpki-client