Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
File: BGyntgTsCPb1Sw50iQZUfdN1Z00.mft (raw, json)
Hash identifier: E7mvfiW35lPfVz9sEsnRJURX/FBMPo4GkCkKhGznDMs=
Subject key identifier: AE:B1:D9:FD:1A:1A:3F:8B:EB:C8:95:FA:FA:BA:30:41:BF:CF:C7:38
Authority key identifier: 04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
Certificate issuer: /CN=046ca7b604ec08f6f54b0e748906547dd375674d
Certificate serial: 019CAAC7113BBE4008118C6500C101E24A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
Manifest number: 1509
Signing time: Sun 01 Mar 2026 19:01:38 +0000
Manifest this update: Sun 01 Mar 2026 19:01:38 +0000
Manifest next update: Mon 02 Mar 2026 19:01:38 +0000
Files and hashes: 1: BGyntgTsCPb1Sw50iQZUfdN1Z00.crl (hash: zGzWWVxWY8PzFcVG842u5ujvkg9tMK9U9xa5QIoUSOI=)
2: MLeNfxLl71ZiEa-4ROMfKWY0HfE.roa (hash: Z2UBW5tUmk27eN0YD99HvRO7Fm7FnWica0sXE52jO9U=)
3: PtAGcm7_KHWDCz9aca-_lnbGDdw.roa (hash: kog+FbgStFH4bPMvqHeDVOD0owoRZw+UqxHeqF/7hj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:11:3b:be:40:08:11:8c:65:00:c1:01:e2:4a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046ca7b604ec08f6f54b0e748906547dd375674d
Validity
Not Before: Mar 1 19:01:38 2026 GMT
Not After : Mar 2 19:01:38 2026 GMT
Subject: CN=aeb1d9fd1a1a3f8bebc895fafaba3041bfcfc738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:f6:99:77:0a:f7:f9:f5:a9:9b:45:54:cf:
25:e9:03:da:8e:19:5c:8f:56:cf:02:a8:dc:2a:47:
82:46:f5:aa:0e:04:b6:91:8f:e3:0b:66:68:41:cd:
b1:b0:4e:e1:06:e3:72:01:11:d8:7f:34:63:b6:f9:
53:d7:4e:82:1e:ec:38:40:3a:7a:5f:29:ed:78:39:
e3:35:2f:50:bf:3f:a4:8f:f0:de:33:e7:7b:ca:ee:
a5:47:29:71:f5:45:9a:10:d9:57:20:ca:31:d7:4d:
f5:f7:0d:9a:4e:04:b4:b3:db:32:e9:ed:f7:ed:06:
fb:ce:94:02:b3:8c:31:50:91:f2:e4:83:f6:3b:8a:
51:5f:07:68:8c:c5:fc:36:51:3d:97:6f:11:14:ac:
96:80:e7:f0:26:3a:f1:0a:d3:a1:14:fc:90:ee:08:
b0:aa:f4:fe:bc:4c:fc:36:dc:78:67:96:28:c5:8e:
c6:b3:d0:ab:e3:8c:f8:ae:c7:4b:e7:12:d1:9c:c6:
00:e8:83:d9:82:ab:0b:31:df:ee:39:6d:c5:8d:43:
3c:cb:3c:6b:42:84:14:58:ba:ab:46:59:8e:cd:db:
36:05:80:6c:c7:34:4e:dd:54:9e:0c:f9:0d:5b:60:
71:1b:b1:40:f0:34:c0:85:de:14:76:2e:ff:39:25:
28:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B1:D9:FD:1A:1A:3F:8B:EB:C8:95:FA:FA:BA:30:41:BF:CF:C7:38
X509v3 Authority Key Identifier:
keyid:04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8e:63:86:9a:42:d8:17:e1:41:7f:71:c9:0c:29:c0:2d:5c:
ad:89:01:cd:44:0b:3b:ac:8d:1d:1b:ec:29:a6:5d:03:24:65:
a4:ea:cb:25:3b:ab:9a:d6:5a:03:64:3f:a4:b0:61:11:af:91:
46:0f:fd:78:dd:20:ef:c2:dd:86:84:18:c2:04:20:40:53:f0:
cf:a6:43:42:2c:37:9e:31:1c:27:da:42:7c:c5:00:fa:5d:1c:
83:07:1d:36:cd:a8:dd:56:de:18:d1:67:83:d4:3a:2e:a2:12:
e8:09:09:cf:71:51:6c:6f:f0:d8:4d:ef:4f:59:67:b9:58:91:
c5:dc:0b:74:2d:70:48:d7:f1:5e:02:6a:b2:6a:94:03:43:cf:
d4:82:63:32:97:34:86:2d:23:0a:ff:e5:10:aa:82:30:3e:09:
d1:19:34:a6:d9:45:a8:60:91:fd:d1:63:43:55:ee:02:c2:63:
a8:97:14:4c:36:df:2a:5e:56:ba:c0:49:31:06:8c:a3:b2:8f:
d8:35:8e:31:33:82:26:ed:b6:f8:3c:14:10:fd:0d:ac:d0:71:
56:aa:2b:d0:9c:bf:0f:e9:b7:8d:00:ff:cc:f8:a0:7d:39:cf:
d9:54:5d:59:b6:0b:31:39:dc:62:31:85:b4:8f:30:35:4f:cf:
cb:84:72:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:00 2026 by rpki-client