Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
File: BGK247pQCQLmPuFOXKyREoMqLCc.mft (raw, json)
Hash identifier: vRRGVEyDM7Cg5cNFNU10X6ow8oZVopJD9f7oNvmGznA=
Subject key identifier: BE:28:60:26:91:2D:45:BC:16:B0:71:09:C0:E6:2D:8A:C4:FB:54:18
Authority key identifier: 04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
Certificate issuer: /CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Certificate serial: 01A0E1746D3BA93D377371BB6AAA8F021247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
Manifest number: 05FA
Signing time: Sun 27 Sep 2026 06:01:38 +0000
Manifest this update: Sun 27 Sep 2026 06:01:38 +0000
Manifest next update: Mon 28 Sep 2026 06:01:38 +0000
Files and hashes: 1: BGK247pQCQLmPuFOXKyREoMqLCc.crl (hash: KG41x+X4p7vxUnnZS+w/v/OzyKdZkKsDwETUiX9kr70=)
2: XM1JyfkvL8GQlIDWNsypURBRDIQ.roa (hash: E9RkLX7TB/4zizaYko106pLHCoP05WAm/iO/6rgM8Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:6d:3b:a9:3d:37:73:71:bb:6a:aa:8f:02:12:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Validity
Not Before: Sep 27 06:01:38 2026 GMT
Not After : Sep 28 06:01:38 2026 GMT
Subject: CN=be286026912d45bc16b07109c0e62d8ac4fb5418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:6b:da:2a:b6:21:93:3d:fe:c2:9b:43:be:
80:9c:ab:c8:6d:30:1f:a3:4f:5e:34:70:3b:02:04:
97:8d:36:1f:42:35:10:b1:e6:bf:a4:10:1b:c6:5c:
13:d6:de:09:50:80:a1:e1:a8:8c:c2:a0:3f:21:fa:
a1:93:bc:fd:d4:22:e2:32:5c:e8:95:38:23:9a:23:
67:ef:4b:70:e0:da:d7:ec:ef:aa:6c:95:6c:b3:28:
f9:aa:24:f8:75:d7:99:b8:51:a3:16:1f:35:69:a6:
db:5c:d5:84:fc:0d:26:05:87:22:1e:49:e4:77:2c:
7e:72:06:6b:16:57:a6:11:02:c2:d5:6e:66:73:6e:
c0:77:e6:94:a9:09:52:cb:0a:4c:8d:0e:8d:4f:c9:
00:c0:8c:3c:2c:92:27:b8:11:0f:d0:7f:a5:33:c7:
51:90:20:74:a9:02:e1:14:2a:db:c6:59:db:fd:f6:
2f:7d:a3:f5:68:f1:d7:ff:d7:fa:a1:28:20:8e:ec:
c0:33:ab:3c:81:88:91:a7:d4:0f:4a:d8:bc:a5:02:
2a:59:43:2a:c8:2c:11:8e:c4:7f:c6:eb:9e:35:73:
f7:a4:48:79:c3:f2:e1:f8:75:a0:c5:f7:bb:a0:71:
73:2d:c6:27:15:4c:b0:09:d6:c0:f1:e3:d8:f7:db:
51:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:28:60:26:91:2D:45:BC:16:B0:71:09:C0:E6:2D:8A:C4:FB:54:18
X509v3 Authority Key Identifier:
keyid:04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b8:c9:4e:64:90:ef:e3:b2:9b:24:86:f8:3a:95:f3:77:56:
33:1f:9a:ec:01:08:97:ff:14:4c:16:40:62:47:75:fd:09:c3:
f2:fd:cb:ac:b0:88:b0:78:2f:1b:fb:83:7f:1c:fe:19:ae:ff:
5a:d1:2b:15:f3:c3:da:6e:c3:e9:8c:d3:63:f2:dd:5b:34:32:
8d:d5:13:1e:14:32:22:fa:51:47:6f:77:6a:65:26:64:2e:d7:
ef:9d:94:66:49:7f:06:6c:23:55:87:6e:67:d8:fd:01:3d:3f:
7e:d2:5f:47:17:4f:47:6d:df:fb:a1:3f:4b:cc:3a:f5:50:07:
62:e5:be:b7:e6:85:45:b9:50:b8:b9:b8:f7:f4:4b:75:20:0d:
06:41:35:53:73:4b:c5:07:75:69:f3:40:ff:ba:2e:46:19:8e:
e3:8d:a9:e2:43:95:e3:e6:e5:a5:3d:c9:2b:65:5f:d2:21:dd:
5c:d3:e5:55:5b:86:d6:b6:38:28:18:06:ff:86:59:8b:b6:c8:
68:ff:11:99:9e:d0:dd:83:9b:da:49:97:d0:82:2f:56:db:81:
1e:e3:c1:af:21:90:75:5e:af:0d:b8:cf:bf:cd:51:02:4c:ea:
ad:b2:24:d7:3a:df:fd:b3:ca:d6:0e:ef:af:13:94:08:8e:e0:
4e:39:19:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhdG07qT03c3G7aqqPAhJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NjJiNmUzYmE1MDA5MDJlNjNlZTE0ZTVjYWM5MTEyODMy
YTJjMjcwHhcNMjYwOTI3MDYwMTM4WhcNMjYwOTI4MDYwMTM4WjAzMTEwLwYDVQQD
EyhiZTI4NjAyNjkxMmQ0NWJjMTZiMDcxMDljMGU2MmQ4YWM0ZmI1NDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs09r2iq2IZM9/sKbQ76AnKvIbTAf
o09eNHA7AgSXjTYfQjUQsea/pBAbxlwT1t4JUICh4aiMwqA/Ifqhk7z91CLiMlzo
lTgjmiNn70tw4NrX7O+qbJVssyj5qiT4ddeZuFGjFh81aabbXNWE/A0mBYciHknk
dyx+cgZrFlemEQLC1W5mc27Ad+aUqQlSywpMjQ6NT8kAwIw8LJInuBEP0H+lM8dR
kCB0qQLhFCrbxlnb/fYvfaP1aPHX/9f6oSggjuzAM6s8gYiRp9QPSti8pQIqWUMq
yCwRjsR/xuueNXP3pEh5w/Lh+HWgxfe7oHFzLcYnFUywCdbA8ePY99tRvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4oYCaRLUW8FrBxCcDmLYrE+1QYMB8GA1UdIwQY
MBaAFARituO6UAkC5j7hTlyskRKDKiwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lZTFiMDEtNTFhZC00YTAyLWIyNzgt
NjQxNmNkMzc3YjQ4LzEvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9lZTFiMDEtNTFhZC00YTAyLWIyNzgtNjQxNmNkMzc3YjQ4
LzEvQkdLMjQ3cFFDUUxtUHVGT1hLeVJFb01xTENjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbjJTmSQ
7+OymySG+DqV83dWMx+a7AEIl/8UTBZAYkd1/QnD8v3LrLCIsHgvG/uDfxz+Ga7/
WtErFfPD2m7D6YzTY/LdWzQyjdUTHhQyIvpRR293amUmZC7X752UZkl/BmwjVYdu
Z9j9AT0/ftJfRxdPR23f+6E/S8w69VAHYuW+t+aFRblQuLm49/RLdSANBkE1U3NL
xQd1afNA/7ouRhmO442p4kOV4+blpT3JK2Vf0iHdXNPlVVuG1rY4KBgG/4ZZi7bI
aP8RmZ7Q3YOb2kmX0IIvVtuBHuPBryGQdV6vDbjPv81RAkzqrbIk1zrf/bPK1g7v
rxOUCI7gTjkZIg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 14:10:36 2026 by rpki-client