Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
File: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft (raw, json)
Hash identifier: fvRsYtFZKT5AzbgjF1pR5wNpB2cBRguqJsgGsQ81pr4=
Subject key identifier: E4:58:F9:C5:B0:FD:5D:93:60:D3:A9:0B:71:2E:AC:2E:CE:2A:7D:A1
Authority key identifier: 06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
Certificate issuer: /CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Certificate serial: 019FAA19A1789F47279AEE3F5936F93FE84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
Manifest number: 0E9B
Signing time: Tue 28 Jul 2026 19:00:34 +0000
Manifest this update: Tue 28 Jul 2026 19:00:34 +0000
Manifest next update: Wed 29 Jul 2026 19:00:34 +0000
Files and hashes: 1: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl (hash: uDUgmxD6vmhi08RTBghh6ufS7MAWvfkCG0YGDu02YA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:a1:78:9f:47:27:9a:ee:3f:59:36:f9:3f:e8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Validity
Not Before: Jul 28 19:00:34 2026 GMT
Not After : Jul 29 19:00:34 2026 GMT
Subject: CN=e458f9c5b0fd5d9360d3a90b712eac2ece2a7da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:16:33:33:95:b5:41:84:17:19:b8:80:01:
3a:4d:46:bd:9d:e2:96:eb:d4:2c:14:d0:51:78:0f:
80:2a:c8:60:11:72:8c:da:7f:bf:a5:96:65:9a:92:
9c:76:7a:6e:14:7a:b5:15:da:76:1b:2e:97:d4:54:
e2:63:d8:6f:d5:25:11:af:ef:c4:a1:52:9c:5d:0f:
05:6c:50:38:c8:b5:14:bc:f9:9f:92:ee:2d:3a:44:
d4:54:5d:30:69:d3:96:63:64:3b:7c:e7:5c:4a:56:
39:0d:dd:c7:fe:c4:d8:30:d3:37:e4:e7:54:4e:96:
ec:89:7f:29:be:29:ca:cf:a4:71:dc:28:3b:61:d8:
42:f8:f7:57:81:5b:cb:8b:72:40:ab:19:4a:90:4d:
95:75:16:36:03:14:29:f2:fc:33:23:c6:7a:57:41:
bc:5f:6c:4b:71:ba:f9:18:ea:18:1b:f5:1d:d7:f5:
bf:97:38:27:b7:65:58:7f:4a:57:11:a3:54:ed:1c:
06:5e:1e:4d:50:e8:5a:70:b7:22:c7:72:f5:a9:ec:
9c:11:a1:2e:ab:50:6e:a3:10:a6:ca:a5:52:d7:bc:
ec:14:1c:c6:f1:cf:4c:e1:f1:6f:af:2c:e6:b1:b7:
64:9b:e8:cd:a1:37:44:c0:b2:0e:96:a8:4e:e2:0f:
ae:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:58:F9:C5:B0:FD:5D:93:60:D3:A9:0B:71:2E:AC:2E:CE:2A:7D:A1
X509v3 Authority Key Identifier:
keyid:06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:22:26:52:4d:7f:ad:1d:84:36:60:9a:f6:97:c9:9c:65:03:
08:08:86:c3:45:a1:71:89:d8:77:e8:c1:bf:6a:51:64:1f:1d:
30:f8:f7:f7:61:57:8d:8e:3d:b3:d8:84:bd:75:0b:ec:42:36:
13:56:96:79:91:30:6b:66:d8:d3:8b:3f:53:61:27:8b:54:dd:
8d:33:d9:29:21:30:c1:d3:2f:61:17:46:c1:e8:78:fb:ac:ce:
b8:5e:f0:c2:71:8a:17:b1:c0:c9:45:9c:4f:80:2f:bf:f8:39:
56:fb:d0:5a:c9:96:9f:6f:f5:35:ed:3b:5c:fd:55:d2:46:0a:
b8:15:29:6c:f7:ca:cd:7b:29:58:f6:30:b2:0e:11:af:59:47:
f3:59:7f:ec:5f:ef:34:39:8b:9b:86:c7:e4:0c:ee:20:c7:ea:
5a:4c:4c:04:b3:4f:2f:43:a0:fe:9b:d1:96:87:db:da:33:60:
c4:01:cf:94:e3:9a:91:6c:2f:0e:9c:5a:c3:da:1f:d9:4c:95:
4b:ba:4a:72:64:b6:3a:5c:6b:bf:bb:7a:fc:51:57:e4:ee:a4:
38:9d:b0:06:d8:45:ef:a1:98:e1:61:1f:59:44:46:f1:25:20:
60:7e:1d:61:15:3f:d1:4b:83:55:cc:9c:8c:b7:2f:bc:ad:39:
b5:b4:6b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:11 2026 by rpki-client