Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
File: BGelYhGyHprHzcj7Y58xCpLCEEw.mft (raw, json)
Hash identifier: sk8BmpH7kUCqSXVymxEUFYo2/1qP8NPl6lNF/rW71/M=
Subject key identifier: 9C:16:03:DF:74:E4:61:34:AA:82:5D:8C:8F:55:82:ED:DC:40:99:3B
Authority key identifier: 04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
Certificate issuer: /CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Certificate serial: 01A0C256BFB38592D2CE5627374251EB6541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
Manifest number: 1146
Signing time: Mon 21 Sep 2026 05:01:00 +0000
Manifest this update: Mon 21 Sep 2026 05:01:00 +0000
Manifest next update: Tue 22 Sep 2026 05:01:00 +0000
Files and hashes: 1: 1-WmJXUzndEvurHNC9z-EdX-GqLg.roa (hash: k4/qUPEWtP0yhAjTXryxItYMnfRgWY9Qd/ypPo+vPZA=)
2: BGelYhGyHprHzcj7Y58xCpLCEEw.crl (hash: mVriZXPHudmewFwSzjyZcQTkTqYNPNQ/27EalHB4gG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:bf:b3:85:92:d2:ce:56:27:37:42:51:eb:65:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Validity
Not Before: Sep 21 05:01:00 2026 GMT
Not After : Sep 22 05:01:00 2026 GMT
Subject: CN=9c1603df74e46134aa825d8c8f5582eddc40993b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:22:bc:16:47:bc:97:59:c9:31:d6:1e:c9:75:
97:93:76:f9:cb:b8:c8:1a:db:37:d9:6c:22:93:8e:
a4:03:4f:80:43:dd:97:53:e9:c0:97:f1:fb:9b:80:
84:a2:23:b0:bf:b3:27:41:a0:d3:ac:f1:ad:02:e3:
52:f7:23:df:ff:20:d1:be:39:53:6b:a3:08:f7:43:
f0:c4:c4:db:8a:0a:0e:62:d3:1e:88:51:dd:c2:0f:
50:4f:fb:ea:f0:d6:6f:90:83:6c:1e:da:78:a6:45:
aa:c9:1f:19:b5:94:ab:80:cc:8d:bc:77:0e:b7:91:
55:cd:7e:07:93:30:62:41:a1:b4:6a:86:7d:75:c9:
f7:28:bf:ba:a2:6d:86:67:ae:6f:98:da:4b:d3:22:
4e:c3:87:b0:1f:8b:cd:5e:14:dc:c9:36:3b:52:98:
7c:82:82:f6:9c:46:88:a5:2e:cd:04:5b:c7:99:ac:
f4:89:0b:28:a4:09:5f:a3:cb:f8:d2:5f:a4:ec:1b:
cc:08:5c:32:e5:93:0c:21:d1:1a:37:43:83:83:ac:
ad:3f:75:f5:f4:2e:dc:1b:ec:d2:c0:37:87:06:76:
1c:64:51:8a:6c:eb:b6:74:6b:60:08:63:3c:54:f9:
3d:e4:92:31:60:68:04:01:b6:38:58:9a:a3:96:7f:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:16:03:DF:74:E4:61:34:AA:82:5D:8C:8F:55:82:ED:DC:40:99:3B
X509v3 Authority Key Identifier:
keyid:04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b8:c4:ab:e5:cd:f2:a3:0b:05:90:2b:cc:9b:45:2b:2b:1e:
d5:59:f5:4d:41:d7:6a:74:2d:5c:ab:3b:6f:28:8e:28:17:23:
b7:4b:bc:88:9c:42:0c:e3:5e:0b:df:03:ee:81:b0:b7:fc:5e:
9a:e5:63:b4:a4:db:67:4d:8d:d9:46:36:45:ef:7e:19:71:50:
0b:fe:3b:fe:90:ca:ef:93:a1:93:77:b5:ee:cb:b1:fc:72:5f:
96:b9:24:00:68:b1:dc:52:57:61:74:47:c1:2f:fb:db:b5:8f:
5e:cd:69:42:db:f7:17:bb:ee:c6:68:4f:17:7b:aa:72:34:84:
dc:f5:02:0d:5e:30:bf:b2:7a:33:c4:ac:ae:e7:b1:b1:e2:e7:
5a:fa:40:44:6a:82:9c:99:fa:42:cb:d4:51:7a:2a:01:e8:e3:
4e:b3:8a:34:49:32:46:7f:d3:23:c8:0d:56:23:9e:cf:28:11:
25:cc:87:e1:ab:5b:f0:4f:5f:e4:28:82:b5:fb:23:92:22:3c:
94:2a:5c:94:3c:df:bf:90:f9:bc:12:b0:26:06:0d:1e:b3:89:
f2:02:e0:e0:5f:4a:0c:8f:1f:61:7e:92:b4:e1:21:8d:41:8b:
fd:86:9f:eb:00:7c:43:c1:6c:2a:b5:a1:86:ed:c3:f7:81:94:
36:10:3a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:21:29 2026 by rpki-client