Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
File: BGK247pQCQLmPuFOXKyREoMqLCc.mft (raw, json)
Hash identifier: bFjupEg7w+8j7N1HYA/BhvOqHfyw4i7DcRoJVAgpdtw=
Subject key identifier: 70:82:A6:36:10:0B:A3:C8:D9:B4:FD:31:2E:70:00:47:DC:46:A3:70
Authority key identifier: 04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
Certificate issuer: /CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Certificate serial: 019CADC7AD29FD133309CE4DB4FB9AC8E17F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
Manifest number: 03CD
Signing time: Mon 02 Mar 2026 09:01:10 +0000
Manifest this update: Mon 02 Mar 2026 09:01:10 +0000
Manifest next update: Tue 03 Mar 2026 09:01:10 +0000
Files and hashes: 1: BGK247pQCQLmPuFOXKyREoMqLCc.crl (hash: 8NnoObUoHh4yqpZK3lWg+ySf0csYXaQYVrtQjuXBrrQ=)
2: XM1JyfkvL8GQlIDWNsypURBRDIQ.roa (hash: E9RkLX7TB/4zizaYko106pLHCoP05WAm/iO/6rgM8Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:ad:29:fd:13:33:09:ce:4d:b4:fb:9a:c8:e1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Validity
Not Before: Mar 2 09:01:10 2026 GMT
Not After : Mar 3 09:01:10 2026 GMT
Subject: CN=7082a636100ba3c8d9b4fd312e700047dc46a370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:94:84:d0:6d:c6:16:8b:8e:44:50:2d:d7:
4d:f8:ed:61:0b:b7:9b:d1:05:17:ff:4f:64:7b:8d:
4e:6a:4d:d3:59:4c:c2:e8:ba:a4:45:a9:b9:50:f5:
be:9d:25:31:2f:05:2a:aa:5d:a5:3e:53:bf:61:0b:
be:44:5e:7d:53:57:73:ae:ae:5d:c1:e5:e5:ba:14:
c4:2a:14:f3:48:ae:aa:ee:7f:e6:93:18:65:cb:c1:
2d:c1:d7:3e:2d:3d:ee:86:71:c0:c0:b5:ec:ac:67:
88:b9:12:98:80:4b:5a:74:3b:20:87:56:7c:0e:ed:
93:4f:da:be:22:77:13:a1:f6:88:12:69:51:65:e7:
46:a7:1d:66:6a:60:c6:ca:f9:0e:a0:f7:0c:46:21:
dd:76:3b:26:2f:11:62:bf:3c:fc:b0:e8:fd:80:cc:
20:43:28:cc:98:53:3b:be:3f:20:ad:50:5b:d0:63:
d7:d0:8f:aa:1a:aa:f9:f3:c6:39:e0:85:9c:2f:b7:
39:8f:91:f5:9b:25:92:8a:c0:45:f3:85:d3:b3:b2:
7a:21:90:50:5e:03:10:f0:34:3e:26:2e:26:bf:72:
9f:8b:59:bf:a1:b5:43:26:af:64:b7:f5:6d:4a:88:
50:f7:fe:cb:bb:14:a1:2a:d6:eb:e3:8b:4d:67:4a:
d9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:82:A6:36:10:0B:A3:C8:D9:B4:FD:31:2E:70:00:47:DC:46:A3:70
X509v3 Authority Key Identifier:
keyid:04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5d:35:f1:74:e3:26:83:ab:59:60:26:df:e5:18:00:79:21:
b1:92:30:2a:6f:ab:a6:5f:52:d5:87:d5:75:e5:d8:bc:11:75:
71:d4:2e:a9:b1:e5:43:19:23:f3:e6:62:8a:62:3d:ed:34:a6:
7d:9a:de:0c:77:72:eb:f5:36:54:f6:6e:c3:af:bf:8d:77:00:
dd:6f:9b:4a:9b:2e:77:dd:d1:97:11:5e:c4:1a:81:90:34:b0:
28:e8:af:15:e0:d7:a8:31:d4:36:20:bc:b5:40:8a:ff:15:5b:
68:36:fd:1d:ee:46:7c:fb:7e:db:7b:00:83:23:b6:79:c5:88:
85:b2:b7:bd:ae:d7:f0:99:8c:27:83:17:cd:69:d4:bb:85:26:
9c:97:93:8a:e8:d3:6a:0d:e9:47:51:3b:06:1d:8d:3e:3e:ca:
f1:c3:31:f1:27:26:f3:2a:96:ee:2b:02:bd:0e:0a:b7:0e:14:
74:1d:ea:82:94:97:88:94:34:e2:f4:2e:60:ce:10:c5:de:49:
e0:02:f1:04:1d:79:39:c5:03:9d:05:1a:58:58:cf:bc:dc:8a:
9e:98:bb:09:61:7f:19:9a:bb:0c:d9:04:4a:e3:8a:e4:38:30:
11:02:21:0d:21:60:82:67:a0:df:17:be:28:85:83:b3:06:c0:
19:12:75:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:31 2026 by rpki-client