Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
File: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft (raw, json)
Hash identifier: BHs3OYt3/j1k8WL52waAWfY++DOfsHhgIadIaNKGEm0=
Subject key identifier: A6:7E:A9:77:19:2C:00:E5:7E:82:D9:0D:73:0E:04:5A:48:12:EC:B9
Authority key identifier: 06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
Certificate issuer: /CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Certificate serial: 019EC06D6BF77B2CF3BAC185D5BAB62BC1EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
Manifest number: 0E22
Signing time: Sat 13 Jun 2026 10:00:56 +0000
Manifest this update: Sat 13 Jun 2026 10:00:56 +0000
Manifest next update: Sun 14 Jun 2026 10:00:56 +0000
Files and hashes: 1: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl (hash: 4LMO78UZ9kUHDXGAZp5KK2zCrYTyo0VhBEyHr09YNDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:6b:f7:7b:2c:f3:ba:c1:85:d5:ba:b6:2b:c1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Validity
Not Before: Jun 13 10:00:56 2026 GMT
Not After : Jun 14 10:00:56 2026 GMT
Subject: CN=a67ea977192c00e57e82d90d730e045a4812ecb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c0:e1:37:4d:51:0a:fb:b2:c7:26:ad:cd:82:
38:78:6b:73:7a:6f:4d:32:f4:7f:bb:9a:0b:c4:2d:
92:65:d1:d2:77:11:2e:de:56:06:ed:0d:37:c3:b9:
27:2a:1d:7f:9f:fb:68:50:65:89:88:77:a2:8f:e3:
01:f2:87:f8:2b:33:39:cb:7a:45:d7:4b:b8:29:4d:
a5:8e:e4:c2:7b:df:3f:4a:75:62:a0:e8:48:da:8b:
ca:92:b3:7f:58:dc:45:34:b8:3b:19:20:24:15:e5:
17:55:c2:d9:9c:57:69:6d:8a:f9:12:b8:52:10:39:
f6:a4:53:5f:c0:dc:97:d8:fd:c1:84:07:21:27:d5:
65:35:c9:0b:0c:57:a5:c6:fb:3b:a5:14:6c:82:2c:
62:3f:2a:35:70:04:67:15:fd:24:b5:aa:e4:15:dc:
8e:52:27:e7:c0:25:0d:7c:80:f6:f8:0d:99:21:82:
f5:5f:35:8e:0e:45:cb:c1:d3:da:5f:9c:09:39:f6:
cb:c5:10:52:fb:ca:d7:f2:b5:b8:c8:6c:85:37:7e:
09:64:10:97:8a:23:a2:c7:d9:1b:a1:98:24:32:b5:
a0:4f:d5:a8:1f:b3:d7:8f:e3:61:ec:89:05:51:e6:
0d:71:3c:5c:76:3a:48:7e:2a:12:f7:df:20:8d:c4:
39:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7E:A9:77:19:2C:00:E5:7E:82:D9:0D:73:0E:04:5A:48:12:EC:B9
X509v3 Authority Key Identifier:
keyid:06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d4:a5:1b:9c:fd:3b:03:1b:23:aa:72:1b:8c:5c:2e:b0:9a:
7a:5a:c8:2c:43:da:99:82:9e:0a:27:d6:2f:0e:f2:82:df:cd:
2c:d0:14:4b:08:f9:d2:ea:5d:37:58:66:0c:08:6b:77:01:75:
62:dc:a3:27:6c:d2:9f:a8:32:c4:59:d8:0e:86:83:95:d7:e6:
78:a4:97:59:1d:54:96:53:c7:47:5d:20:de:9f:b5:41:61:79:
4c:63:a1:60:25:21:ec:95:3b:01:80:34:60:d3:17:04:1e:68:
d5:c9:47:51:b6:c9:d3:b8:a6:c0:20:2c:97:ed:00:42:02:5b:
37:64:1b:5d:10:a1:00:cc:b4:3f:33:1b:22:e5:33:1e:7b:e2:
6e:fb:38:f7:5a:b0:92:d9:95:d5:e9:c2:c5:ba:d8:4e:bf:4c:
b8:75:cb:13:57:8a:cf:a6:09:87:34:43:e4:52:2e:d5:60:8e:
0c:4c:5d:3a:1f:40:ae:ac:e5:a5:00:96:55:cf:27:72:81:17:
58:46:48:73:87:1f:57:41:87:98:f2:eb:40:47:b3:26:23:93:
6f:59:a7:d5:cc:ed:3c:3d:62:6b:2f:7e:78:e2:d5:84:1f:8a:
9f:e4:b0:f2:47:08:2e:17:a0:8b:3d:7d:05:33:68:b6:4d:8b:
bd:03:26:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbWv3eyzzusGF1bq2K8HrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDE4ZTdiNTJiZDMyNjhhYTRkNWQzYWE1NzdmNDdkMGYx
ODc1MDQwHhcNMjYwNjEzMTAwMDU2WhcNMjYwNjE0MTAwMDU2WjAzMTEwLwYDVQQD
EyhhNjdlYTk3NzE5MmMwMGU1N2U4MmQ5MGQ3MzBlMDQ1YTQ4MTJlY2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsDhN01RCvuyxyatzYI4eGtzem9N
MvR/u5oLxC2SZdHSdxEu3lYG7Q03w7knKh1/n/toUGWJiHeij+MB8of4KzM5y3pF
10u4KU2ljuTCe98/SnVioOhI2ovKkrN/WNxFNLg7GSAkFeUXVcLZnFdpbYr5ErhS
EDn2pFNfwNyX2P3BhAchJ9VlNckLDFelxvs7pRRsgixiPyo1cARnFf0ktarkFdyO
UifnwCUNfID2+A2ZIYL1XzWODkXLwdPaX5wJOfbLxRBS+8rX8rW4yGyFN34JZBCX
iiOix9kboZgkMrWgT9WoH7PXj+Nh7IkFUeYNcTxcdjpIfioS998gjcQ5OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZ+qXcZLADlfoLZDXMOBFpIEuy5MB8GA1UdIwQY
MBaAFAYBjntSvTJoqk1dOqV39H0PGHUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdHT2UxSzlNbWlxVFYwNnBYZjBmUThZZFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZGM5YjAtNzE4NS00YjE4LTg1N2Qt
MWQ5ZmU4YWExMmFiLzEvQmdHT2UxSzlNbWlxVFYwNnBYZjBmUThZZFFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9mZGM5YjAtNzE4NS00YjE4LTg1N2QtMWQ5ZmU4YWExMmFi
LzEvQmdHT2UxSzlNbWlxVFYwNnBYZjBmUThZZFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUtSlG5z9
OwMbI6pyG4xcLrCaelrILEPamYKeCifWLw7ygt/NLNAUSwj50updN1hmDAhrdwF1
YtyjJ2zSn6gyxFnYDoaDldfmeKSXWR1UllPHR10g3p+1QWF5TGOhYCUh7JU7AYA0
YNMXBB5o1clHUbbJ07imwCAsl+0AQgJbN2QbXRChAMy0PzMbIuUzHnvibvs491qw
ktmV1enCxbrYTr9MuHXLE1eKz6YJhzRD5FIu1WCODExdOh9ArqzlpQCWVc8ncoEX
WEZIc4cfV0GHmPLrQEezJiOTb1mn1cztPD1iay9+eOLVhB+Kn+Sw8kcILhegiz19
BTNotk2LvQMmVA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:35:27 2026 by rpki-client