Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
File: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft (raw, json)
Hash identifier: Lybt+fGRyA4dB89KIjf5XWBCajNK3PIb8Tj66l1VVWo=
Subject key identifier: 2E:F3:A2:19:DD:3A:2E:92:28:19:91:64:5B:41:95:F8:E0:3E:58:F4
Authority key identifier: 06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
Certificate issuer: /CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Certificate serial: 019CAD5A315616638F78158B0C11DCBB3303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
Manifest number: 0D0F
Signing time: Mon 02 Mar 2026 07:01:35 +0000
Manifest this update: Mon 02 Mar 2026 07:01:35 +0000
Manifest next update: Tue 03 Mar 2026 07:01:35 +0000
Files and hashes: 1: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl (hash: Lj8V/c5aZJ7IQspI+JOIzM0H2tKwy9mroQ/8srUxv/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:31:56:16:63:8f:78:15:8b:0c:11:dc:bb:33:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504
Validity
Not Before: Mar 2 07:01:35 2026 GMT
Not After : Mar 3 07:01:35 2026 GMT
Subject: CN=2ef3a219dd3a2e92281991645b4195f8e03e58f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:22:fb:60:b5:e8:69:ba:da:70:84:2b:c5:5d:
50:33:c8:5c:c5:4a:b7:99:27:71:82:d6:ff:40:a9:
1a:5b:3a:1b:11:af:ad:38:c4:db:80:3c:64:e1:44:
dc:47:56:bc:1f:00:32:b6:16:94:d3:bb:80:29:2c:
b7:8a:16:c2:0b:7b:01:23:33:34:a4:c7:7a:91:ec:
2b:02:a1:60:de:9c:50:af:75:ae:4c:cf:83:97:66:
21:e4:5b:23:c4:b3:55:49:b0:73:9a:9d:b1:ac:bf:
06:c6:e9:52:58:48:a2:97:cc:71:51:cd:20:14:96:
06:9d:73:fe:25:78:c5:9e:4a:39:50:d8:e4:e5:f1:
a6:19:3a:89:03:56:b5:f3:35:06:4e:54:fb:cd:1e:
6f:a0:2d:02:fa:6e:e9:6b:df:a3:73:1f:45:6c:15:
30:4f:68:89:e4:91:03:2f:5c:1b:3e:c3:3a:6b:08:
fe:c7:93:0a:67:40:07:a9:00:62:f5:a4:40:64:54:
b3:d9:d7:83:9d:63:5b:7f:3e:4d:63:29:10:6e:63:
4c:6c:db:d0:23:ca:e7:f4:d2:96:71:79:ad:22:69:
84:c8:0c:35:33:43:15:bb:2d:29:6d:5e:a5:1f:0f:
47:27:bd:24:36:59:41:37:f2:6f:03:39:5b:4e:f1:
17:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F3:A2:19:DD:3A:2E:92:28:19:91:64:5B:41:95:F8:E0:3E:58:F4
X509v3 Authority Key Identifier:
keyid:06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a9:61:88:ce:0d:a8:0b:59:d4:73:15:ba:46:fd:d4:98:41:
04:26:0d:c5:c1:c2:f0:9c:92:3c:fd:37:68:23:ab:66:16:a0:
24:0e:b0:e7:3c:ae:95:70:0b:a9:32:b5:bd:e7:e5:e9:15:28:
e3:63:91:35:1f:13:18:cf:fc:15:b2:ce:1e:0b:3f:e2:7b:a0:
e4:c0:81:e5:04:54:1b:7d:11:4c:34:43:9b:99:65:8f:ef:45:
4f:a6:20:c5:5d:de:37:7a:91:58:7a:82:c6:46:ba:8f:80:30:
79:e3:2b:a3:57:5d:ff:f1:d6:f6:3f:ef:5c:ae:be:a7:16:01:
c4:a7:12:fd:db:e1:ce:56:2f:ae:0c:9e:2a:0e:55:7d:c0:48:
03:8e:41:08:2f:41:73:13:fe:bd:b6:75:53:0f:a5:c9:a8:37:
ae:53:2e:ff:51:01:9c:bd:1b:8d:cc:94:3b:22:cd:d5:ba:fb:
26:b5:2c:8f:a4:d4:65:3a:7a:f7:fa:23:f1:d8:ec:ca:27:1c:
04:c3:4b:2c:ca:c9:90:60:6b:62:c0:7b:6e:f8:00:d6:36:ba:
aa:40:bb:c2:cc:7f:6a:d0:17:6a:72:b0:b8:53:fa:be:27:a7:
25:64:e8:1f:e3:c4:11:91:5f:32:42:81:f6:2e:d6:09:33:bf:
cf:5b:60:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:45 2026 by rpki-client