Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
File: BGyntgTsCPb1Sw50iQZUfdN1Z00.mft (raw, json)
Hash identifier: 0flqGocwY6vhr6kPjOfQln+/5EXc59XGoIfQGrFJXmg=
Subject key identifier: 03:08:63:60:AF:72:26:32:14:BF:78:25:EC:CD:08:BD:E6:8D:6C:11
Authority key identifier: 04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
Certificate issuer: /CN=046ca7b604ec08f6f54b0e748906547dd375674d
Certificate serial: 019D9A3EB7DDBA55B0DDC3CDA7484004AF4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
Manifest number: 1585
Signing time: Fri 17 Apr 2026 07:01:34 +0000
Manifest this update: Fri 17 Apr 2026 07:01:34 +0000
Manifest next update: Sat 18 Apr 2026 07:01:34 +0000
Files and hashes: 1: BGyntgTsCPb1Sw50iQZUfdN1Z00.crl (hash: RNIVjbnVLDs0j6r64Qo1Z6T13m8FJHRTmt2Qq5CQapY=)
2: MLeNfxLl71ZiEa-4ROMfKWY0HfE.roa (hash: Z2UBW5tUmk27eN0YD99HvRO7Fm7FnWica0sXE52jO9U=)
3: PtAGcm7_KHWDCz9aca-_lnbGDdw.roa (hash: kog+FbgStFH4bPMvqHeDVOD0owoRZw+UqxHeqF/7hj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:b7:dd:ba:55:b0:dd:c3:cd:a7:48:40:04:af:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046ca7b604ec08f6f54b0e748906547dd375674d
Validity
Not Before: Apr 17 07:01:34 2026 GMT
Not After : Apr 18 07:01:34 2026 GMT
Subject: CN=03086360af72263214bf7825eccd08bde68d6c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:18:76:a2:1e:66:21:75:1c:88:6b:fb:02:
e4:88:c4:4b:83:40:bd:5e:52:c3:c8:a8:af:1a:ef:
d7:e9:2a:62:7e:d6:be:c9:b6:0b:82:80:e0:3c:c4:
2f:52:b4:8e:48:a9:d5:77:aa:1f:5c:df:56:ba:f3:
c7:6c:dd:e2:b4:4b:70:4e:f0:89:6c:bf:dc:e7:14:
48:1a:71:c1:6d:94:45:35:62:3a:94:77:88:a7:12:
16:22:b1:9c:57:0f:30:bc:64:3d:9b:e8:f0:cc:71:
60:29:62:23:79:78:14:bf:92:85:b4:51:63:d5:4a:
31:16:11:06:43:a7:89:83:49:d1:4b:db:3f:22:e3:
89:74:4b:8c:02:d1:40:be:52:3e:ff:61:56:60:ec:
f4:25:69:51:70:84:07:56:bd:6e:06:81:0c:7c:09:
d3:10:bb:1d:c6:ea:dc:97:4d:41:ec:f7:2c:6c:da:
50:51:f1:a0:2a:38:d8:45:30:c6:8b:bd:31:f9:1b:
40:1c:99:6b:1c:14:09:72:bb:c2:ee:53:31:79:58:
fe:51:c5:39:2d:12:6b:a6:58:63:48:d1:9c:65:88:
3d:3a:1d:0a:08:ea:f7:1a:53:f6:8c:ab:6f:cf:a4:
cd:4e:a2:2c:29:e9:06:e9:f1:ef:91:d5:98:8b:95:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:08:63:60:AF:72:26:32:14:BF:78:25:EC:CD:08:BD:E6:8D:6C:11
X509v3 Authority Key Identifier:
keyid:04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1d:5b:06:32:06:be:2c:f6:bb:10:64:19:4a:e3:ac:23:d3:
9b:f5:89:46:1c:94:89:17:a1:8a:f6:11:85:74:c8:34:1e:83:
1c:a4:88:1e:3f:e1:3f:18:5f:2f:9c:6b:86:13:c1:8d:a9:42:
d1:7d:cb:02:b6:7f:8f:9e:28:29:b5:b0:d2:ee:46:a9:48:45:
82:91:87:26:3b:9a:0b:c3:bf:e3:f0:64:ff:1f:75:14:58:3e:
87:87:e0:3a:3a:f2:bd:ae:ff:5e:14:b3:3b:fa:43:09:52:36:
2a:90:c1:f8:c0:a3:97:f0:a1:bc:8c:97:ad:72:d2:e4:c2:e4:
af:b2:85:c4:7d:3d:dc:b0:ed:36:90:5b:40:8b:76:ba:57:d1:
07:e8:b8:7d:9c:2b:80:65:37:16:2b:9d:89:b0:bb:a1:d2:2c:
44:22:51:dd:1f:cd:f4:a7:a7:49:db:de:b8:06:c9:0b:58:b6:
04:11:c9:8f:eb:30:56:b4:91:94:4c:c5:b4:c6:2a:52:83:1c:
84:9a:de:00:58:49:a8:18:6b:05:40:39:9d:26:19:98:e6:83:
a6:22:cd:34:1c:e3:6e:b3:c8:f7:ff:b1:2b:47:a1:0a:27:c0:
f1:89:46:d4:6b:4c:2a:9d:d7:8e:74:47:74:ab:ec:c5:42:c1:
bd:12:60:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPrfdulWw3cPNp0hABK9PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NmNhN2I2MDRlYzA4ZjZmNTRiMGU3NDg5MDY1NDdkZDM3
NTY3NGQwHhcNMjYwNDE3MDcwMTM0WhcNMjYwNDE4MDcwMTM0WjAzMTEwLwYDVQQD
EygwMzA4NjM2MGFmNzIyNjMyMTRiZjc4MjVlY2NkMDhiZGU2OGQ2YzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s8YdqIeZiF1HIhr+wLkiMRLg0C9
XlLDyKivGu/X6Spifta+ybYLgoDgPMQvUrSOSKnVd6ofXN9WuvPHbN3itEtwTvCJ
bL/c5xRIGnHBbZRFNWI6lHeIpxIWIrGcVw8wvGQ9m+jwzHFgKWIjeXgUv5KFtFFj
1UoxFhEGQ6eJg0nRS9s/IuOJdEuMAtFAvlI+/2FWYOz0JWlRcIQHVr1uBoEMfAnT
ELsdxurcl01B7PcsbNpQUfGgKjjYRTDGi70x+RtAHJlrHBQJcrvC7lMxeVj+UcU5
LRJrplhjSNGcZYg9Oh0KCOr3GlP2jKtvz6TNTqIsKekG6fHvkdWYi5XAuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMIY2CvciYyFL94JezNCL3mjWwRMB8GA1UdIwQY
MBaAFARsp7YE7Aj29UsOdIkGVH3TdWdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkd5bnRnVHNDUGIxU3c1MGlRWlVmZE4xWjAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOTJlYTUtOWNhOC00YjBmLTkzODgt
MDkzOTYxZDM4Yzg2LzEvQkd5bnRnVHNDUGIxU3c1MGlRWlVmZE4xWjAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zOTJlYTUtOWNhOC00YjBmLTkzODgtMDkzOTYxZDM4Yzg2
LzEvQkd5bnRnVHNDUGIxU3c1MGlRWlVmZE4xWjAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHh1bBjIG
viz2uxBkGUrjrCPTm/WJRhyUiRehivYRhXTINB6DHKSIHj/hPxhfL5xrhhPBjalC
0X3LArZ/j54oKbWw0u5GqUhFgpGHJjuaC8O/4/Bk/x91FFg+h4fgOjryva7/XhSz
O/pDCVI2KpDB+MCjl/ChvIyXrXLS5MLkr7KFxH093LDtNpBbQIt2ulfRB+i4fZwr
gGU3FiudibC7odIsRCJR3R/N9KenSdveuAbJC1i2BBHJj+swVrSRlEzFtMYqUoMc
hJreAFhJqBhrBUA5nSYZmOaDpiLNNBzjbrPI9/+xK0ehCifA8YlG1GtMKp3XjnRH
dKvsxULBvRJg0Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:42 2026 by rpki-client