Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
File: BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft (raw, json)
Hash identifier: d8kdELNSg1hLk6ARJ39p42ug9mWJsnCCiC4U9gRx4/c=
Subject key identifier: 46:26:BF:15:43:36:34:E3:BF:1D:F9:D2:AA:2F:20:DE:E4:3A:7C:4B
Authority key identifier: 04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
Certificate issuer: /CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Certificate serial: 019CACB461EB83C8C303B95C63F6EA56AC6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
Manifest number: 0B18
Signing time: Mon 02 Mar 2026 04:00:28 +0000
Manifest this update: Mon 02 Mar 2026 04:00:28 +0000
Manifest next update: Tue 03 Mar 2026 04:00:28 +0000
Files and hashes: 1: BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl (hash: MkF+HOrYR3jInljEe+fJClZQdEHuf3EhIMf9xhU/N5w=)
2: v9xxAs53z8-Lo-M8MAasS_fTI5w.roa (hash: W5P7f8MNnL6/RnaFt8r/SNRF065+Vy7YUi1ouIgirhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:61:eb:83:c8:c3:03:b9:5c:63:f6:ea:56:ac:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Validity
Not Before: Mar 2 04:00:28 2026 GMT
Not After : Mar 3 04:00:28 2026 GMT
Subject: CN=4626bf15433634e3bf1df9d2aa2f20dee43a7c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:9e:05:98:ed:4c:ba:ad:cb:2f:15:72:35:
e5:9e:6f:3f:48:60:a4:37:08:3d:d1:dd:59:3b:38:
ca:c8:e3:9a:63:cc:a8:08:ba:38:2b:79:79:1a:4a:
ae:94:22:e9:07:d5:ac:84:c7:93:f5:33:fd:7a:14:
fd:34:d4:76:2a:d8:c8:a3:78:2d:cf:81:a8:f9:89:
49:14:aa:f0:bf:b9:c9:c2:4f:f6:27:38:e1:77:fd:
f6:58:f0:c1:29:5d:e1:62:9a:ec:d4:42:1c:3e:60:
af:eb:89:26:ec:78:b5:7a:00:d7:ff:d5:e8:c1:1e:
a2:d0:ee:da:58:fa:41:27:49:ed:44:2f:f9:5f:6a:
f2:47:04:3a:72:68:9e:5b:d0:6a:b7:2b:1e:65:cb:
10:f1:80:0c:7c:bd:74:b7:16:ab:b7:08:56:57:98:
a4:ef:b2:57:2e:7d:23:1d:ff:ea:c5:27:6c:dc:2b:
5b:99:07:fe:29:c1:a8:ff:85:2b:9e:18:52:a9:ba:
ca:91:38:b0:0c:f8:ea:66:57:74:8f:9f:8b:89:04:
5f:36:04:c7:34:c4:41:5e:6c:cc:c6:43:4b:5b:97:
94:87:51:97:70:69:1d:5e:b4:29:42:6e:46:d0:c2:
c7:2b:ab:a3:83:72:10:c6:5f:37:b6:26:10:c4:06:
ec:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:26:BF:15:43:36:34:E3:BF:1D:F9:D2:AA:2F:20:DE:E4:3A:7C:4B
X509v3 Authority Key Identifier:
keyid:04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:96:93:2b:b6:10:87:08:4e:7a:e3:17:2f:f9:03:6e:4d:a7:
f5:0b:b9:1c:22:9e:f5:c7:34:db:72:79:5d:7f:c6:ed:ee:3d:
7a:4e:9e:82:34:f5:3c:d5:be:5a:2e:e7:53:12:33:a5:d5:cb:
25:d8:e4:a0:0e:27:e8:8b:2b:c3:8a:54:a2:e9:aa:5b:38:e9:
85:d3:ed:77:c4:e7:76:7d:c9:67:fb:55:1e:93:6f:93:f0:bc:
e8:b8:1f:a0:e5:e7:27:0f:74:fd:aa:a0:2d:de:dc:f5:e9:71:
3f:f3:1b:62:0b:6c:8c:c8:64:82:59:e7:5e:d6:1f:e4:29:38:
2e:af:9c:16:c9:46:79:ee:e9:02:c5:39:a9:eb:f8:fb:a2:cb:
13:fa:02:a6:74:a3:79:66:3a:34:e7:44:7d:c2:8e:21:41:a8:
9a:b7:59:31:28:7a:1a:8e:6c:08:ac:aa:9b:d9:33:44:a3:10:
2d:b5:e9:f2:12:09:86:dc:15:de:b3:be:58:0f:2e:ca:4a:1d:
2c:72:a8:c7:d9:80:c5:6b:6a:db:6b:d3:6d:6f:e3:f2:db:3e:
cb:ee:3b:9a:e4:5e:bc:08:ca:bd:f0:ba:82:82:f7:b5:9c:0c:
75:72:94:b7:18:83:9a:b8:05:ca:b3:6e:0d:1f:49:9b:85:1b:
c8:3d:f5:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystGHrg8jDA7lcY/bqVqxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NjJiOWI1OGVlMDhlODNmMWE5YWQ0ZTk2NDNlODBkM2I0
MGNiM2UwHhcNMjYwMzAyMDQwMDI4WhcNMjYwMzAzMDQwMDI4WjAzMTEwLwYDVQQD
Eyg0NjI2YmYxNTQzMzYzNGUzYmYxZGY5ZDJhYTJmMjBkZWU0M2E3YzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvGeBZjtTLqtyy8VcjXlnm8/SGCk
Nwg90d1ZOzjKyOOaY8yoCLo4K3l5GkqulCLpB9WshMeT9TP9ehT9NNR2KtjIo3gt
z4Go+YlJFKrwv7nJwk/2Jzjhd/32WPDBKV3hYprs1EIcPmCv64km7Hi1egDX/9Xo
wR6i0O7aWPpBJ0ntRC/5X2ryRwQ6cmieW9BqtyseZcsQ8YAMfL10txartwhWV5ik
77JXLn0jHf/qxSds3CtbmQf+KcGo/4UrnhhSqbrKkTiwDPjqZld0j5+LiQRfNgTH
NMRBXmzMxkNLW5eUh1GXcGkdXrQpQm5G0MLHK6ujg3IQxl83tiYQxAbsSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYmvxVDNjTjvx350qovIN7kOnxLMB8GA1UdIwQY
MBaAFARiubWO4I6D8amtTpZD6A07QMs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdLNXRZN2dqb1B4cWExT2xrUG9EVHRBeXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9lMWVlNWItMDIzYi00MzBhLTljNmYt
MGVlMmVhN2Q0ODg0LzEvQkdLNXRZN2dqb1B4cWExT2xrUG9EVHRBeXo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9lMWVlNWItMDIzYi00MzBhLTljNmYtMGVlMmVhN2Q0ODg0
LzEvQkdLNXRZN2dqb1B4cWExT2xrUG9EVHRBeXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp5aTK7YQ
hwhOeuMXL/kDbk2n9Qu5HCKe9cc023J5XX/G7e49ek6egjT1PNW+Wi7nUxIzpdXL
JdjkoA4n6Isrw4pUoumqWzjphdPtd8Tndn3JZ/tVHpNvk/C86LgfoOXnJw90/aqg
Ld7c9elxP/MbYgtsjMhkglnnXtYf5Ck4Lq+cFslGee7pAsU5qev4+6LLE/oCpnSj
eWY6NOdEfcKOIUGomrdZMSh6Go5sCKyqm9kzRKMQLbXp8hIJhtwV3rO+WA8uykod
LHKox9mAxWtq22vTbW/j8ts+y+47muRevAjKvfC6goL3tZwMdXKUtxiDmrgFyrNu
DR9Jm4UbyD31mg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:47:38 2026 by rpki-client