Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
File: BGWHkB8TB5vtiYL2KendFUaM_vE.mft (raw, json)
Hash identifier: pngeltR/Oy9vAZzkC4/LgRc6AoPdISVdgUSNzqwTWco=
Subject key identifier: F9:37:60:5D:3A:57:58:D5:83:98:F6:66:A9:86:FA:51:6F:0C:13:01
Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
Certificate issuer: /CN=046587901f13079bed8982f629e9dd15468cfef1
Certificate serial: 019CAAC6A767F1ED8D3FBCE0B0C2DCB6D784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
Manifest number: 123C
Signing time: Sun 01 Mar 2026 19:01:11 +0000
Manifest this update: Sun 01 Mar 2026 19:01:11 +0000
Manifest next update: Mon 02 Mar 2026 19:01:11 +0000
Files and hashes: 1: BGWHkB8TB5vtiYL2KendFUaM_vE.crl (hash: YnRsZZEisRy7scFMnoT02+9rqGr72J5f1wSIVmSerO8=)
2: fTPoxCe4jGfBgPBLkUKcm_JbirE.roa (hash: 02Sw+k6mgA2rz0rcR6vWe/Ze2n73fjDgyV/8LWMOJoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a7:67:f1:ed:8d:3f:bc:e0:b0:c2:dc:b6:d7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1
Validity
Not Before: Mar 1 19:01:11 2026 GMT
Not After : Mar 2 19:01:11 2026 GMT
Subject: CN=f937605d3a5758d58398f666a986fa516f0c1301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:c2:1e:fe:f8:78:4c:72:62:28:7f:28:17:
dd:e3:e6:84:f8:85:bc:6e:61:12:a9:3d:0d:c2:10:
83:76:b7:5d:92:d8:2c:45:59:ae:0e:61:48:d6:b2:
ee:ac:0a:72:ab:6a:ac:72:ca:3c:c1:26:c2:56:ad:
8c:d2:61:24:13:d8:16:44:1e:ec:20:99:02:23:6f:
15:e9:0d:fb:5c:d1:66:70:1b:58:e1:98:b0:ff:c0:
59:a5:d7:2a:cd:83:7b:61:ae:da:4b:c1:cf:4c:8a:
6e:9b:77:4c:9c:85:56:fe:f2:6e:86:3d:3d:4a:06:
53:3d:d6:2b:cb:b0:e6:d1:73:28:31:54:e5:32:92:
63:98:d6:59:36:24:ec:e8:a4:5c:53:ba:64:03:bb:
13:f8:e6:cf:29:b0:81:aa:c9:42:4e:0d:9c:d8:a9:
9e:66:d5:5d:76:cb:ee:0f:46:e7:f3:d7:18:2f:3d:
97:09:33:8e:44:7e:d0:c6:3d:b0:50:d1:8c:43:9d:
3a:6f:ee:95:cb:c3:4b:96:9c:a4:d3:d3:94:e3:62:
f3:a7:6c:29:27:b9:89:db:57:85:bf:af:61:4c:d4:
da:c8:da:05:e6:7e:84:5d:a0:63:09:15:2d:e3:fd:
95:8e:97:73:68:b5:fc:88:48:8f:42:2c:e3:b8:2d:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:37:60:5D:3A:57:58:D5:83:98:F6:66:A9:86:FA:51:6F:0C:13:01
X509v3 Authority Key Identifier:
keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:e3:17:38:7e:f8:6b:17:da:70:90:86:d6:f0:f7:44:51:30:
b7:42:c9:3c:9b:bd:89:64:0f:6b:51:01:ed:5e:6a:9a:37:d5:
33:79:ad:17:92:32:73:c6:08:72:20:9d:e6:e7:e5:f3:2e:4a:
ca:f9:9e:e4:18:f5:77:fd:ac:5c:da:12:bf:7a:5f:44:0d:1a:
ed:26:12:f0:f5:15:79:30:74:c7:f9:d0:bb:06:77:db:0b:50:
f0:42:ee:b9:ce:24:8a:93:12:00:08:98:b8:44:44:25:7c:fe:
ac:79:72:fa:2e:ed:fe:38:c4:e1:73:b5:c8:2d:ff:7a:22:58:
33:cd:13:b7:0e:13:ce:9c:85:8d:34:19:d0:5d:8e:58:68:80:
7e:e6:9b:a8:e2:00:56:f1:34:6f:ae:d0:2c:89:bc:ef:b3:13:
e0:00:9b:aa:a3:88:0c:3c:b6:e3:46:9c:e2:90:88:64:e9:e7:
8c:8a:d5:0e:25:07:7e:c4:35:ae:66:32:81:30:06:e7:c7:37:
9e:8f:72:0b:ce:7b:6a:49:bd:af:ee:57:09:ae:ea:c2:c1:76:
c5:69:86:55:f4:0e:df:b1:51:08:8c:81:1b:74:55:66:9e:8e:
7f:5e:01:7a:11:c9:64:0b:fa:25:89:1f:2d:2a:d1:8f:54:f3:
66:f5:d9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:03 2026 by rpki-client