Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
File: BGelYhGyHprHzcj7Y58xCpLCEEw.mft (raw, json)
Hash identifier: SpqsOWJLNusjVAhItHJSRFJOaICz+/08cx5eDECUTfE=
Subject key identifier: D8:67:6A:48:44:3D:1E:14:5D:56:AF:AB:61:8B:CB:75:4C:BD:77:20
Authority key identifier: 04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
Certificate issuer: /CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Certificate serial: 019FAA507FE670D75C11D62BC13FA331F052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
Manifest number: 10B5
Signing time: Tue 28 Jul 2026 20:00:30 +0000
Manifest this update: Tue 28 Jul 2026 20:00:30 +0000
Manifest next update: Wed 29 Jul 2026 20:00:30 +0000
Files and hashes: 1: 1-WmJXUzndEvurHNC9z-EdX-GqLg.roa (hash: k4/qUPEWtP0yhAjTXryxItYMnfRgWY9Qd/ypPo+vPZA=)
2: BGelYhGyHprHzcj7Y58xCpLCEEw.crl (hash: 8AfEGXzF45dgqY/Qbf810BAHTHfpFYUXOTTjBEFfL5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:7f:e6:70:d7:5c:11:d6:2b:c1:3f:a3:31:f0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Validity
Not Before: Jul 28 20:00:30 2026 GMT
Not After : Jul 29 20:00:30 2026 GMT
Subject: CN=d8676a48443d1e145d56afab618bcb754cbd7720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:60:fd:b8:6e:13:f9:cc:d5:8e:6c:b5:d2:
55:fc:2b:e4:4b:08:2d:9a:ba:32:b9:c1:0b:89:1c:
f6:88:7f:c8:b0:5a:b2:3b:d6:17:76:37:94:00:1a:
75:c7:7f:a5:3b:d5:09:a0:8d:08:e0:a6:1b:d8:93:
1c:22:d7:1d:ba:85:88:8f:6a:d6:46:10:44:e8:c1:
42:67:f0:6c:66:38:58:34:d0:fe:dc:e3:f1:b5:f3:
b5:78:29:95:da:69:48:e6:0e:4a:60:35:dc:d5:62:
42:21:dc:0b:b6:e5:43:5e:be:81:7a:49:de:32:04:
01:0a:90:b1:94:82:3d:78:1c:d0:0e:ae:ac:4d:41:
7d:bd:09:67:81:d8:60:65:6a:ca:0c:96:ae:f5:36:
6d:56:92:62:4c:a3:6a:7e:c3:0c:33:2c:a4:9f:57:
8d:26:fa:58:49:23:50:ab:c7:c1:0e:d8:ab:ab:7a:
4b:8f:ac:79:b6:40:5f:21:9f:30:53:23:7d:a3:ff:
20:ac:3d:2a:f9:64:95:48:38:b1:1e:82:5b:9e:e5:
c4:c4:a1:2e:80:e4:0c:26:dd:29:a5:31:50:37:4e:
e8:d5:7b:ad:17:cd:81:fc:11:22:77:34:11:8c:7a:
29:93:f0:d6:77:4e:93:ff:d5:b9:b2:3b:c9:2e:00:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:67:6A:48:44:3D:1E:14:5D:56:AF:AB:61:8B:CB:75:4C:BD:77:20
X509v3 Authority Key Identifier:
keyid:04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a1:c3:f2:34:23:7f:cb:9a:95:d1:0c:1f:20:92:a3:08:01:
25:6a:97:fc:1d:11:cd:52:14:a5:e3:c9:c2:3e:49:37:68:1a:
a3:ce:24:a6:10:38:13:45:2e:63:34:98:30:4d:08:a3:ed:ba:
2c:c5:a5:81:9e:30:a8:ef:d0:e7:0d:70:da:64:a0:72:52:8d:
fe:ce:00:f0:c9:1a:aa:4c:dc:12:78:c8:3d:28:c5:c7:d9:de:
70:e7:65:20:d3:18:db:f1:fc:fe:17:a7:c3:48:7a:6d:98:65:
39:0a:0b:3f:de:27:b3:b7:bc:20:dc:51:38:e5:d7:56:6e:ec:
a1:a5:09:5d:da:13:59:00:25:71:d0:9b:67:91:61:19:75:46:
91:d8:7d:43:a3:e5:73:4a:ba:b0:46:4d:c5:c8:ca:21:b4:1c:
df:ce:8e:e4:04:c7:32:eb:79:0a:f9:cc:0f:ac:4e:a4:5a:94:
1d:46:5c:53:6c:7b:31:68:c1:20:03:96:19:16:91:ab:c2:e7:
49:be:b3:e2:ea:ea:a2:d4:31:b0:dd:44:6b:ad:1b:13:75:26:
9b:b4:c4:68:ac:2f:4b:8d:a7:1a:07:7e:98:13:30:c0:b1:7a:
3e:93:c8:0e:68:fa:bd:d3:d1:9a:73:23:49:2b:8b:f3:5d:91:
e1:05:1f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:31 2026 by rpki-client