Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
File: BgyexdQFhu0yVfD8T8sxV3FN2hU.mft (raw, json)
Hash identifier: LfDCZsVOH103fl7GtIYaXAn6oY+4VUzFNMApWnD2Wio=
Subject key identifier: 92:3C:79:DA:72:75:6F:88:71:4B:A7:70:CF:8E:15:BB:6A:AC:0A:E7
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Certificate issuer: /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial: 019CAA588DF1BDC7C49801A22241EDC11390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
Manifest number: 13C0
Signing time: Sun 01 Mar 2026 17:00:56 +0000
Manifest this update: Sun 01 Mar 2026 17:00:56 +0000
Manifest next update: Mon 02 Mar 2026 17:00:56 +0000
Files and hashes: 1: BgyexdQFhu0yVfD8T8sxV3FN2hU.crl (hash: Y4XqDLmfD3GU30YDHp3sZud7I6P1D+u78qUY0h1rkp8=)
2: G3jVmyoNAwofeohH7QYgxzHN3pc.roa (hash: xwSHI24/qEI97cWzr7QJQ9jRHsPQR1K9//44yIlRg94=)
3: et-otWfBYLYereCUg28QQ2BY1dc.roa (hash: 3271ZGQbvHfopYcPZbONmJzH//nGkIK7baJJb26jmnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:8d:f1:bd:c7:c4:98:01:a2:22:41:ed:c1:13:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Validity
Not Before: Mar 1 17:00:56 2026 GMT
Not After : Mar 2 17:00:56 2026 GMT
Subject: CN=923c79da72756f88714ba770cf8e15bb6aac0ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e3:08:28:a5:53:ba:21:a7:bb:1b:1e:03:60:
6b:3d:0f:fc:6c:6d:0e:53:e8:27:0a:3e:32:32:70:
5b:8a:8b:47:e1:45:2e:f3:c7:2d:38:46:1d:9a:26:
90:4a:6e:4a:82:a1:8c:43:48:ac:22:ce:85:17:2f:
b0:52:61:a3:d8:0c:45:22:17:12:c1:15:87:0b:02:
bc:a9:9a:5f:b3:f6:b5:72:15:7c:b2:8f:71:f8:7b:
76:d5:8e:99:ad:f1:ed:54:53:66:0e:88:2f:0d:f4:
2a:6c:4f:35:1c:2d:4a:7e:8b:91:09:a8:39:b5:34:
50:ee:54:51:d7:24:b4:8d:78:b1:82:be:1d:bc:fd:
ef:83:e8:e2:dd:99:df:43:b0:50:39:07:c0:51:32:
d5:6a:2d:96:44:f0:28:80:f6:f4:b6:37:a4:82:8b:
63:12:7c:c4:7e:83:09:90:17:68:56:28:ea:b2:67:
ca:e9:7d:99:79:cc:89:bf:c6:55:ff:cd:73:63:05:
ef:5b:55:56:81:24:6b:34:97:88:4f:be:50:85:fe:
81:a8:f5:75:61:a6:cb:0c:46:9a:d5:59:d7:26:84:
16:16:c4:d5:18:f9:32:b2:99:33:05:ab:24:79:27:
31:66:98:28:91:2a:66:d7:db:1f:9e:21:0d:33:39:
55:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3C:79:DA:72:75:6F:88:71:4B:A7:70:CF:8E:15:BB:6A:AC:0A:E7
X509v3 Authority Key Identifier:
keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:56:86:29:8a:7f:f2:41:7c:d3:9a:6e:a3:6a:e2:77:52:27:
54:e2:47:cd:d5:d8:a0:c2:a9:87:ce:8c:92:62:da:56:dc:3f:
1f:6a:4f:b3:21:d3:9d:43:53:6d:40:45:54:be:3e:ed:ea:60:
a9:c3:62:e4:87:e6:c3:5e:df:64:4e:0a:08:99:c2:dd:94:df:
11:4c:c4:ac:8e:a0:15:50:d1:8a:49:f5:7b:ec:b8:2b:e3:1e:
cd:4e:72:1e:7b:a0:23:67:de:5c:c7:8a:e7:85:e3:49:34:a1:
af:4c:d0:c9:8e:77:6e:18:12:bf:02:7e:25:aa:4b:e2:8a:67:
a1:76:33:d2:4e:33:64:de:90:42:a4:4c:38:39:95:d8:24:21:
7e:52:66:37:d5:a3:d9:f3:ac:d7:dd:a4:c5:85:48:93:7d:71:
3b:5a:ba:c5:6d:9a:d7:05:88:0a:63:c2:d7:47:6f:c0:ac:bd:
c8:3d:6c:37:17:f4:29:a7:4a:ef:af:20:0f:89:b2:c1:81:43:
3a:73:fb:28:66:87:e6:21:54:a3:78:0a:53:2d:13:c0:4b:bd:
8a:c0:48:e6:ba:3b:ba:e6:26:8d:62:cf:6b:5a:4c:b3:3c:f7:
ff:df:fa:f3:ac:7a:c9:78:e8:d3:5f:22:3d:a7:9a:4f:2d:78:
69:bd:e1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:18 2026 by rpki-client