Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
File: BgOecctxUgSoPMJTgi3CmmLHmeY.mft (raw, json)
Hash identifier: Ywzl5w7y869c+PqwJGiNKb2no7k7V1bsbMQCK14QMp4=
Subject key identifier: A7:23:6D:A6:B7:25:60:81:BD:A3:B1:31:61:FD:6A:A8:6A:D0:99:18
Authority key identifier: 06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
Certificate issuer: /CN=06039e71cb715204a83cc253822dc29a62c799e6
Certificate serial: 01A1C44255AAEDB59C75565BBBBD740E9787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
Manifest number: 0BFB
Signing time: Tue 10 Nov 2026 07:00:43 +0000
Manifest this update: Tue 10 Nov 2026 07:00:43 +0000
Manifest next update: Wed 11 Nov 2026 07:00:43 +0000
Files and hashes: 1: BgOecctxUgSoPMJTgi3CmmLHmeY.crl (hash: o9OQi6V2PBVaDoc7hRue3UaYYSGysU7EjHUogEl62W4=)
2: WsB2cpz5PeeV12FuRGXIMnfEpDA.roa (hash: RXGdsxXZdhMgqQg6njT8x//0fSXw5JT6Hs6Qaa1Fb6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:42:55:aa:ed:b5:9c:75:56:5b:bb:bd:74:0e:97:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06039e71cb715204a83cc253822dc29a62c799e6
Validity
Not Before: Nov 10 07:00:43 2026 GMT
Not After : Nov 11 07:00:43 2026 GMT
Subject: CN=a7236da6b7256081bda3b13161fd6aa86ad09918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:0a:16:f7:9e:dd:33:9c:1c:77:9c:25:9f:
31:12:4f:08:39:0c:ab:6b:11:85:15:40:30:b6:66:
e3:0e:40:13:ab:4f:eb:b6:61:f2:14:40:d5:10:8f:
21:65:a7:00:ea:2b:9e:1a:5e:bf:5c:b4:1d:4d:bc:
b3:aa:5f:a0:ea:2e:ba:74:1d:76:d1:f2:7c:c3:1a:
9a:61:9d:7b:88:e8:44:3b:53:ec:66:07:7c:e5:db:
d4:89:2e:4a:39:0c:e6:11:56:b6:28:34:8c:e9:2a:
f2:fd:89:e3:8f:b3:a5:f7:b3:a7:9f:aa:e7:05:a3:
37:21:9d:21:52:29:bf:b0:06:32:27:85:30:c1:ab:
28:f2:0c:5d:f5:0f:82:3e:76:3c:32:1e:97:f3:b2:
3f:9c:c1:51:ab:20:9b:d6:d5:4f:3e:94:93:73:d0:
7c:a1:08:1e:42:32:0a:6f:0b:90:26:6d:08:d8:61:
5e:33:ad:42:b9:d9:3f:3b:22:1b:de:c1:41:0c:0b:
c5:9f:33:d9:da:c7:64:02:bb:1b:e4:2d:37:d4:16:
e7:01:53:73:68:0a:4a:41:0e:1d:b8:11:58:4d:0f:
93:60:89:e5:97:95:6e:f7:ff:41:86:03:29:5a:52:
7d:58:f0:ce:19:c4:88:22:98:e1:4f:4f:4c:21:5b:
04:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:23:6D:A6:B7:25:60:81:BD:A3:B1:31:61:FD:6A:A8:6A:D0:99:18
X509v3 Authority Key Identifier:
keyid:06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ae:70:cd:ae:e4:a1:53:5c:23:21:6d:6d:2e:a1:c5:57:55:
11:07:6c:1c:3e:1a:7d:22:48:d1:61:25:b8:1a:e7:0a:f6:f3:
23:8d:b9:ee:ed:f0:4c:57:a0:9c:c9:4e:19:f0:21:c7:19:30:
ad:bf:ca:33:1c:91:90:ea:ab:51:da:39:63:7a:3f:1f:ff:30:
a7:24:f5:bc:25:ed:d0:b9:24:e9:c7:d6:2c:91:58:36:99:46:
15:cc:73:d0:ce:76:db:c1:9b:35:a7:b5:15:33:fe:1c:cf:62:
a7:e6:99:66:2c:9d:db:2c:52:0b:5c:b3:20:08:45:c2:7f:5b:
6b:db:8c:a4:dc:8f:49:1d:1e:00:33:c8:c6:1c:0d:e7:b6:4b:
23:62:67:28:b5:76:3e:16:1e:53:1e:a7:f7:a4:89:58:d9:f3:
e4:e3:b8:bd:bc:66:1d:10:b4:74:9e:32:d5:51:4d:4d:cf:37:
e5:a2:96:3e:a3:2c:d4:ae:ba:12:d4:e3:19:81:10:7d:b6:d4:
ca:3c:3a:eb:fe:5b:31:69:3e:e0:ba:19:77:e0:06:ba:0c:9d:
1c:4d:06:18:4a:60:ca:bc:6c:34:97:73:89:cc:36:8b:40:70:
fb:6a:d5:dc:ab:11:8a:30:58:22:ed:ad:6e:24:b9:36:a0:22:
e2:21:5d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 11:58:32 2026 by rpki-client