Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
File: BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json)
Hash identifier: +C6kid7wU6pg5mZhD2bLdF1r1yecTPqe+ccy1vCLTbM=
Subject key identifier: AA:AF:30:45:2F:A9:00:88:6B:C8:C5:14:11:5A:9E:07:74:3C:D4:8E
Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
Certificate issuer: /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Certificate serial: 019E3073432D9BE2CFC24AEE70FC5EBCE7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
Manifest number: 0DC6
Signing time: Sat 16 May 2026 11:02:00 +0000
Manifest this update: Sat 16 May 2026 11:02:00 +0000
Manifest next update: Sun 17 May 2026 11:02:00 +0000
Files and hashes: 1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: dToeH5ckVuykNtttfzVh5OCTsGnEwF5EijZkLmRefq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:73:43:2d:9b:e2:cf:c2:4a:ee:70:fc:5e:bc:e7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Validity
Not Before: May 16 11:02:00 2026 GMT
Not After : May 17 11:02:00 2026 GMT
Subject: CN=aaaf30452fa900886bc8c514115a9e07743cd48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:6d:91:c2:c4:99:53:3b:d0:aa:92:69:fb:
91:45:e2:a3:4e:88:4b:af:f9:af:09:ec:50:57:d0:
1e:16:67:85:60:77:9f:b4:a2:57:33:ce:db:37:f8:
58:f0:4d:c4:c1:e3:17:62:71:5f:84:7c:a1:02:f8:
6c:27:5a:77:51:3c:0e:c6:e8:e3:06:bf:79:f7:7b:
3d:de:12:75:2a:c7:eb:df:b4:d9:e9:44:10:04:ec:
cc:98:a7:5e:9a:d7:79:79:cf:2c:4f:cb:be:4f:b8:
0c:6f:80:35:50:ab:dd:f8:a7:07:c6:e8:aa:47:0d:
59:7b:e9:cb:60:44:e6:fb:cf:55:d3:1c:93:bf:2f:
ac:f3:a7:05:55:9a:0f:33:9d:05:f3:15:33:8b:16:
e4:78:5c:3d:dc:15:c7:36:75:ae:db:6d:aa:01:9e:
8f:6e:25:f6:9b:18:e2:ae:d0:db:43:77:16:b4:d9:
c2:19:b8:a6:fc:71:77:0c:95:ce:e0:4a:15:2e:e7:
fb:da:28:ed:c2:70:7d:d5:bd:93:32:0a:59:31:ca:
b4:97:ad:7c:d9:f7:4e:25:77:ce:3b:cc:d8:70:82:
17:44:82:31:c9:9a:13:5c:72:07:b7:7a:47:09:be:
cc:25:d9:3e:11:06:9c:81:58:cb:b8:c2:9f:43:51:
13:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AF:30:45:2F:A9:00:88:6B:C8:C5:14:11:5A:9E:07:74:3C:D4:8E
X509v3 Authority Key Identifier:
keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b5:11:84:87:54:37:3c:b6:15:8e:dc:9d:0a:e3:df:e7:c0:
cb:ca:e4:1f:0d:de:e0:2a:a6:2d:40:11:17:3e:04:75:18:95:
17:b7:69:b8:95:c4:44:89:f6:0e:90:d4:17:21:85:48:cd:52:
a7:d3:66:33:a0:1b:53:75:12:a5:93:15:22:84:0c:2d:f6:d5:
44:7c:ce:2f:10:66:97:44:a8:bd:17:c0:5b:26:6b:3c:e4:93:
2d:aa:5b:7a:ea:46:69:b4:74:3b:4e:56:2b:08:8d:db:6f:3b:
d8:23:e7:df:e1:dd:0c:22:60:41:bd:7e:82:da:6d:b5:16:45:
cc:58:38:8a:57:fd:13:e6:f9:ac:1f:dd:bd:6d:1b:5d:41:61:
e5:83:ce:78:99:33:d6:73:c7:ef:59:1f:b5:ea:00:b6:39:b1:
c6:aa:3c:2e:c5:e2:3f:bd:67:7f:a7:fe:01:18:36:c8:84:5c:
cb:e7:ff:b5:de:4f:88:ed:3d:b6:f9:7f:9f:bc:e7:76:75:73:
4f:b1:d9:22:9d:20:30:58:a2:d4:d0:cf:b3:20:03:be:a1:10:
a1:9b:7e:b8:85:e1:f1:17:e2:d6:fb:a2:50:28:9d:43:4a:db:
dc:cb:2a:40:02:94:83:91:17:8c:6a:52:b3:f3:60:9c:2d:79:
6d:87:94:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:35 2026 by rpki-client