Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
File: BgOecctxUgSoPMJTgi3CmmLHmeY.mft (raw, json)
Hash identifier: 5gmwxJIZJuoup3ebh7/JhCptyOzaJoHCh3qw1nbonb4=
Subject key identifier: 23:44:B9:50:6D:0A:A4:C0:68:59:DD:B8:59:78:7B:77:F3:8B:1B:60
Authority key identifier: 06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
Certificate issuer: /CN=06039e71cb715204a83cc253822dc29a62c799e6
Certificate serial: 019EBDD98E572BC1EA68EBDB2F4ACFA5E0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
Manifest number: 0A6A
Signing time: Fri 12 Jun 2026 22:00:11 +0000
Manifest this update: Fri 12 Jun 2026 22:00:11 +0000
Manifest next update: Sat 13 Jun 2026 22:00:11 +0000
Files and hashes: 1: BgOecctxUgSoPMJTgi3CmmLHmeY.crl (hash: egBBTtySClX3qCGVm1sx92xaB5phZAkDT3nRzekVq/Q=)
2: WsB2cpz5PeeV12FuRGXIMnfEpDA.roa (hash: RXGdsxXZdhMgqQg6njT8x//0fSXw5JT6Hs6Qaa1Fb6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:d9:8e:57:2b:c1:ea:68:eb:db:2f:4a:cf:a5:e0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06039e71cb715204a83cc253822dc29a62c799e6
Validity
Not Before: Jun 12 22:00:11 2026 GMT
Not After : Jun 13 22:00:11 2026 GMT
Subject: CN=2344b9506d0aa4c06859ddb859787b77f38b1b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:60:71:66:ce:29:5e:8d:91:bd:cf:9b:2e:cd:
f1:1b:98:e4:a3:49:51:fb:d9:5e:aa:b9:5c:9f:41:
83:a8:34:3f:3b:91:93:e6:38:c9:f0:b4:30:98:a9:
f3:4d:d5:e2:66:35:1c:c5:6c:43:9d:3c:3a:83:3b:
70:82:2a:0b:4b:3f:42:c9:f7:f3:a8:2f:ac:c0:b2:
52:6c:c8:1f:f7:55:d1:4a:2a:42:b6:67:4f:6d:fc:
8e:ad:d9:cd:39:eb:7a:2e:15:05:5f:a2:2d:03:07:
64:14:2d:c7:55:28:52:57:16:ce:e5:c5:0c:5d:8c:
2e:68:12:18:2c:27:9f:d3:4b:a7:80:3e:a6:a2:a0:
05:e0:03:35:12:26:23:f8:a9:31:67:c8:54:73:ed:
24:31:2e:6f:b0:67:7c:08:8c:bb:34:00:fe:f9:b7:
4b:c8:d6:e1:31:25:9a:6c:ff:8c:0d:91:de:69:de:
92:52:79:74:35:30:0c:bc:92:77:14:f7:c6:58:3e:
e5:fc:81:b6:b0:a0:8c:fa:1b:ab:98:e5:06:08:2b:
f0:df:79:c6:b4:86:24:c9:bf:1d:d4:9b:ee:48:ea:
02:19:c0:9a:57:cb:01:b7:26:67:c2:89:04:bf:c8:
83:29:f7:77:fc:82:c4:ef:ad:59:51:ab:08:85:36:
01:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:44:B9:50:6D:0A:A4:C0:68:59:DD:B8:59:78:7B:77:F3:8B:1B:60
X509v3 Authority Key Identifier:
keyid:06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:dc:3f:88:9d:fb:e1:7e:0c:b7:68:b8:e4:0f:4b:c0:55:f0:
f6:a4:a9:09:ad:c5:7c:72:af:0a:51:2e:68:63:00:66:ba:63:
e1:ce:d5:5f:01:2c:cc:cf:16:5c:f7:27:35:ef:26:78:9f:5e:
dd:a5:5a:69:95:6d:2f:14:bc:be:fd:d4:12:53:07:f0:41:98:
5d:54:e7:7e:5a:fb:93:32:81:38:44:4e:65:37:8e:2e:0b:df:
6f:e9:ce:9e:1d:65:55:93:54:cf:8a:30:db:ed:83:1f:5f:c6:
c5:23:21:8a:61:58:72:e7:cb:4f:db:6c:5e:17:92:da:8d:1c:
57:1a:0a:b3:c8:17:ea:b7:cb:e5:b2:96:7e:a3:41:ce:b7:49:
51:8e:e7:6c:ba:f8:b4:0d:6a:6c:eb:7e:c1:06:9e:95:d9:34:
7c:42:1e:ff:e5:aa:9f:1a:00:a0:39:63:1f:df:02:97:bb:7d:
83:1c:6e:dc:03:a4:c8:d2:e4:e1:87:9b:56:5d:98:a4:96:fb:
2e:95:e6:15:a1:bb:a1:95:52:44:70:8b:6c:cc:32:cd:69:a2:
ac:0b:92:4c:c8:95:7c:fb:31:ee:9b:ec:d6:b2:9e:a2:23:b9:
dc:eb:cd:35:37:0b:d4:cb:5e:ef:08:c1:9a:0c:58:4d:84:ce:
77:31:76:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:06:41 2026 by rpki-client