Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
File: BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json)
Hash identifier: LAXyKtDE+aYUjK73bLInOMcx9Cn5qfeRgu0O/U9mZDA=
Subject key identifier: D8:55:3D:19:04:3C:CE:96:CD:64:34:B2:9B:44:1F:BA:1B:B1:72:6D
Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
Certificate issuer: /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Certificate serial: 01A001DD0132F2C3846892753EA5E57CE831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
Manifest number: 0EB7
Signing time: Fri 14 Aug 2026 20:00:55 +0000
Manifest this update: Fri 14 Aug 2026 20:00:55 +0000
Manifest next update: Sat 15 Aug 2026 20:00:55 +0000
Files and hashes: 1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: x04cHg3M47uzav+Aab0wRzLUMwnL35LCvwIU37DE9ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:01:32:f2:c3:84:68:92:75:3e:a5:e5:7c:e8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Validity
Not Before: Aug 14 20:00:55 2026 GMT
Not After : Aug 15 20:00:55 2026 GMT
Subject: CN=d8553d19043cce96cd6434b29b441fba1bb1726d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:0e:ee:4d:72:8e:37:62:fe:2b:da:ac:7e:
89:3a:1b:42:3e:f3:77:3d:b8:40:f3:bd:e6:31:e7:
6f:c3:39:30:5f:ed:dd:3a:57:87:1a:b6:06:c7:74:
61:9e:4b:d7:41:58:93:c8:e1:48:c0:5b:ca:40:bb:
00:92:33:98:49:e5:a3:12:9a:94:8c:f1:7a:49:59:
55:a8:10:08:49:39:8c:94:bb:6e:40:84:f5:12:7a:
23:86:c0:2f:5d:92:87:c7:eb:34:f9:aa:fb:24:b9:
80:80:a8:e5:e9:d6:5f:fa:19:7f:41:e0:e6:12:f5:
91:cb:70:08:27:51:fb:58:65:06:0a:06:be:18:b2:
e1:77:32:97:17:d7:c0:2a:f6:0d:63:05:ea:43:84:
9d:7a:bc:bf:e1:9c:f6:97:ce:76:b2:c3:5c:c9:0c:
17:6c:60:78:ee:d2:70:64:03:cc:2c:87:08:a8:54:
42:8c:01:8d:9e:f8:d8:a7:16:43:ca:a4:ea:a5:8b:
9b:e3:c5:92:e2:5c:50:c7:90:1c:fe:3e:80:0d:d6:
03:78:a4:81:52:5f:81:74:ad:af:b3:4c:a2:73:79:
b0:95:5f:a3:f0:88:6e:c5:fd:29:25:18:9d:51:30:
d9:c8:6e:90:91:ad:60:d2:1a:6b:c3:96:c0:0b:9d:
91:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:55:3D:19:04:3C:CE:96:CD:64:34:B2:9B:44:1F:BA:1B:B1:72:6D
X509v3 Authority Key Identifier:
keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:84:c7:03:0c:1a:b6:8c:b7:d1:a9:06:12:fc:1e:e1:89:8f:
ec:92:d6:df:bd:d9:b9:81:04:e9:c3:30:18:dd:fa:71:04:20:
e8:6f:ca:15:91:74:c5:3c:40:44:d5:c8:60:72:60:b7:ec:ba:
b5:36:c4:12:f0:94:ae:51:f2:ab:fa:67:b9:0a:e5:56:d2:12:
a0:77:e8:28:2b:1b:42:07:60:97:69:e9:b8:2e:b9:1b:00:b2:
59:43:78:56:40:d9:0d:7e:5f:50:8a:93:44:75:5c:e4:3e:a0:
ee:01:e8:b2:32:97:30:34:a9:64:6b:c0:e0:08:e2:d4:95:70:
21:e1:05:26:46:98:4a:3f:53:ba:0b:02:7c:91:cc:63:ac:3c:
26:5b:13:72:1a:ce:33:ed:13:01:e8:ff:46:19:16:e4:25:57:
3a:40:b6:70:b9:5e:2f:10:e1:f3:54:51:a1:9b:21:40:09:11:
6a:f4:9e:4a:65:e7:cb:eb:38:10:54:ec:a2:e9:66:54:41:b2:
a3:6a:24:61:71:4c:26:6f:37:a6:ae:1c:34:eb:da:d6:7e:05:
d0:33:a2:b5:bc:95:27:c7:bf:00:2e:e7:e8:80:7f:80:f9:d1:
29:2c:8c:3f:10:fe:5b:b1:39:c0:54:c6:6c:a9:59:d7:e0:c3:
f8:cf:a1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:59 2026 by rpki-client