Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
File: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft (raw, json)
Hash identifier: bntCkj0/T8wksgp4VAdKmx6/aGED6sndmlMP4C65Obo=
Subject key identifier: 96:95:8E:9F:4D:76:0E:24:82:C5:BD:80:D1:22:45:C8:F4:6D:C3:B7
Authority key identifier: 06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
Certificate issuer: /CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Certificate serial: 019D98F4A64C1C76369F5680B575C356ED4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
Manifest number: 0D89
Signing time: Fri 17 Apr 2026 01:01:03 +0000
Manifest this update: Fri 17 Apr 2026 01:01:03 +0000
Manifest next update: Sat 18 Apr 2026 01:01:03 +0000
Files and hashes: 1: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl (hash: Oo6BGM4PM5yGs+wUfrm5YVlVRpYiNhDbnEL8LInkaCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:a6:4c:1c:76:36:9f:56:80:b5:75:c3:56:ed:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Validity
Not Before: Apr 17 01:01:03 2026 GMT
Not After : Apr 18 01:01:03 2026 GMT
Subject: CN=96958e9f4d760e2482c5bd80d12245c8f46dc3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:1b:ce:96:d5:63:ab:7a:27:4c:c8:0c:79:
5e:dc:89:ed:d1:70:88:34:d3:72:68:f5:98:1b:7e:
13:bf:05:c3:58:2a:bb:f8:3e:2a:4f:7b:62:24:54:
ad:ce:1d:e1:1b:98:67:72:f5:0f:33:0b:82:2b:c6:
dd:4c:8f:38:5f:d1:e7:dd:7d:f3:3f:e8:a7:6b:ac:
5f:86:30:2e:3e:0b:af:15:19:83:66:27:38:9c:fa:
21:3d:f2:48:47:9f:f6:ce:44:8c:35:71:70:6a:c7:
e5:fb:38:5a:d1:87:ec:b4:cb:df:46:5c:9c:71:32:
cd:36:56:f1:71:c1:8b:e6:6a:85:5c:13:41:44:37:
17:b8:e2:db:69:e8:ba:78:97:5a:69:99:1a:3f:b5:
28:2a:90:ac:65:a5:56:e4:46:63:b6:00:1e:0c:15:
d9:f5:7c:cf:ee:50:07:04:a6:6d:7b:59:1b:59:0e:
3d:aa:3e:62:2d:03:70:0e:b8:7e:28:16:52:06:6d:
72:f9:2c:06:46:68:2d:2c:e1:21:ec:22:87:0a:aa:
6d:2d:64:d5:ee:1f:f3:10:60:b5:b5:42:10:26:d5:
5e:77:82:5b:a8:14:15:19:80:f1:75:24:91:4c:34:
6a:a1:07:06:51:9d:ee:47:3d:44:ca:24:49:e1:a3:
8e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:95:8E:9F:4D:76:0E:24:82:C5:BD:80:D1:22:45:C8:F4:6D:C3:B7
X509v3 Authority Key Identifier:
keyid:06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:04:cc:fb:16:e0:e4:7e:12:36:56:ee:01:5a:1c:d1:bb:db:
23:f6:48:8b:bf:07:ad:50:7c:c8:81:e4:5b:d4:cd:cd:1b:20:
05:09:ea:28:dc:d6:86:e7:75:c4:d4:7a:ff:dc:a5:2f:c5:bd:
d5:e8:31:50:86:5a:5d:cf:bb:7c:4c:63:75:9a:3d:94:3d:fa:
e1:66:e0:c9:a9:a3:38:e6:d2:2b:19:9f:44:ea:a5:7f:59:31:
b3:31:6f:9c:c7:66:20:c8:24:f7:47:10:23:8e:fa:d0:83:d8:
db:4e:d2:99:aa:86:bd:c9:00:fa:db:aa:bd:0e:3f:99:f7:7a:
f4:ef:12:3f:d8:ce:b6:e1:72:c4:93:b2:a4:6e:82:8e:c3:f0:
85:70:ba:a7:15:bb:43:ff:6b:77:aa:bc:5c:54:a9:a6:79:41:
af:90:18:72:46:1a:b2:2a:70:a0:c0:24:d9:f4:32:46:bf:af:
01:52:d5:88:3e:08:bc:f2:c5:aa:fb:11:34:85:3e:27:57:26:
dc:11:09:0e:4f:93:f3:12:12:63:41:02:38:b4:6a:72:10:0b:
77:c1:3f:b4:6a:87:f7:0b:cd:40:ea:b5:df:3d:17:73:a1:f6:
94:f1:4c:f1:87:da:83:31:dc:4d:a2:ec:22:ef:22:f2:2e:bc:
11:f7:4c:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9KZMHHY2n1aAtXXDVu1PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDE4ZTdiNTJiZDMyNjhhYTRkNWQzYWE1NzdmNDdkMGYx
ODc1MDQwHhcNMjYwNDE3MDEwMTAzWhcNMjYwNDE4MDEwMTAzWjAzMTEwLwYDVQQD
Eyg5Njk1OGU5ZjRkNzYwZTI0ODJjNWJkODBkMTIyNDVjOGY0NmRjM2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv00bzpbVY6t6J0zIDHle3Int0XCI
NNNyaPWYG34TvwXDWCq7+D4qT3tiJFStzh3hG5hncvUPMwuCK8bdTI84X9Hn3X3z
P+ina6xfhjAuPguvFRmDZic4nPohPfJIR5/2zkSMNXFwasfl+zha0YfstMvfRlyc
cTLNNlbxccGL5mqFXBNBRDcXuOLbaei6eJdaaZkaP7UoKpCsZaVW5EZjtgAeDBXZ
9XzP7lAHBKZte1kbWQ49qj5iLQNwDrh+KBZSBm1y+SwGRmgtLOEh7CKHCqptLWTV
7h/zEGC1tUIQJtVed4JbqBQVGYDxdSSRTDRqoQcGUZ3uRz1EyiRJ4aOOPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaVjp9Ndg4kgsW9gNEiRcj0bcO3MB8GA1UdIwQY
MBaAFAYBjntSvTJoqk1dOqV39H0PGHUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdHT2UxSzlNbWlxVFYwNnBYZjBmUThZZFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZGM5YjAtNzE4NS00YjE4LTg1N2Qt
MWQ5ZmU4YWExMmFiLzEvQmdHT2UxSzlNbWlxVFYwNnBYZjBmUThZZFFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9mZGM5YjAtNzE4NS00YjE4LTg1N2QtMWQ5ZmU4YWExMmFi
LzEvQmdHT2UxSzlNbWlxVFYwNnBYZjBmUThZZFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQTM+xbg
5H4SNlbuAVoc0bvbI/ZIi78HrVB8yIHkW9TNzRsgBQnqKNzWhud1xNR6/9ylL8W9
1egxUIZaXc+7fExjdZo9lD364WbgyamjOObSKxmfROqlf1kxszFvnMdmIMgk90cQ
I4760IPY207SmaqGvckA+tuqvQ4/mfd69O8SP9jOtuFyxJOypG6CjsPwhXC6pxW7
Q/9rd6q8XFSppnlBr5AYckYasipwoMAk2fQyRr+vAVLViD4IvPLFqvsRNIU+J1cm
3BEJDk+T8xISY0ECOLRqchALd8E/tGqH9wvNQOq13z0Xc6H2lPFM8YfagzHcTaLs
Iu8i8i68EfdMcw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:24 2026 by rpki-client