Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
File: BgOecctxUgSoPMJTgi3CmmLHmeY.mft (raw, json)
Hash identifier: MYsZf9yRSnMUGS7c9297IFn+LNRBNi3DNF36HJqWdLU=
Subject key identifier: 04:6A:14:F4:C6:3B:6E:52:40:4D:90:BA:35:D1:6E:14:D2:60:56:FA
Authority key identifier: 06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
Certificate issuer: /CN=06039e71cb715204a83cc253822dc29a62c799e6
Certificate serial: 019D98504262ECCA53F10FF2CF1989B840A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
Manifest number: 09D2
Signing time: Thu 16 Apr 2026 22:01:29 +0000
Manifest this update: Thu 16 Apr 2026 22:01:29 +0000
Manifest next update: Fri 17 Apr 2026 22:01:29 +0000
Files and hashes: 1: BgOecctxUgSoPMJTgi3CmmLHmeY.crl (hash: x+Lx7UR0cA9Upx448/s3Etg9tYiFDXM9dPPeGRyF/Yc=)
2: WsB2cpz5PeeV12FuRGXIMnfEpDA.roa (hash: RXGdsxXZdhMgqQg6njT8x//0fSXw5JT6Hs6Qaa1Fb6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:42:62:ec:ca:53:f1:0f:f2:cf:19:89:b8:40:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06039e71cb715204a83cc253822dc29a62c799e6
Validity
Not Before: Apr 16 22:01:29 2026 GMT
Not After : Apr 17 22:01:29 2026 GMT
Subject: CN=046a14f4c63b6e52404d90ba35d16e14d26056fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c3:33:9f:51:52:d0:2a:66:c2:7d:e5:f2:14:
00:14:b2:ec:90:58:ea:fc:de:f7:3c:be:57:9c:b5:
71:77:95:a3:c7:af:86:51:32:7e:1b:48:9c:17:45:
67:65:35:9c:d2:18:7d:91:56:9a:5a:cb:a2:7c:9e:
35:71:f8:11:fb:80:a9:60:48:e8:42:2c:81:cc:59:
ff:12:87:d4:05:0f:94:4d:fb:89:07:d5:eb:79:ae:
24:9a:4b:29:23:ba:ca:eb:e5:82:8e:b5:b5:95:75:
43:e2:b2:f5:5d:a6:cc:b0:ef:4e:cd:ed:9f:83:72:
cc:28:7b:cd:6b:a6:2a:84:33:c6:8b:40:f2:cc:9e:
3a:cf:34:b5:3f:b4:c6:5a:37:a0:dd:0f:1c:3a:5f:
fc:a8:ef:4a:2d:f9:9f:0c:6a:b7:74:fd:04:59:a7:
21:be:71:49:b6:8d:db:c4:eb:4a:12:9e:1d:5b:7d:
3a:a4:5e:9a:79:a8:a5:9c:62:89:aa:e6:fc:39:e5:
2a:9b:ad:af:62:6b:cd:b2:c2:2b:c5:d8:88:24:0a:
6d:98:0f:10:d7:33:5a:b9:18:c0:32:9e:03:b7:e9:
3e:cb:b4:11:82:42:64:b8:d4:e4:99:b1:66:ad:98:
12:a5:f7:ed:87:77:ec:c7:70:c2:19:a3:61:f2:83:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6A:14:F4:C6:3B:6E:52:40:4D:90:BA:35:D1:6E:14:D2:60:56:FA
X509v3 Authority Key Identifier:
keyid:06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:de:9b:22:47:f6:da:6d:4f:60:74:63:b0:2f:a8:a7:44:41:
d9:b0:a5:94:65:3b:65:91:31:a3:5d:e7:03:d4:0b:0a:cc:f3:
03:2b:c3:1d:e8:80:7b:bd:7d:59:b2:6b:0f:fb:b2:34:a9:f9:
70:bf:5f:2f:ee:85:57:e4:6d:06:a0:98:fd:47:af:39:6b:bf:
e7:d7:2e:9d:c9:a1:9e:09:7e:e8:c7:52:02:d1:ac:bf:f4:2d:
9a:6b:fd:91:5f:ed:c3:61:6b:c6:38:72:2e:dd:c1:1a:0a:a6:
fc:8e:fd:72:e5:a8:84:b0:b4:15:ed:a0:f1:6c:c0:df:82:72:
0b:fa:a3:48:88:e2:73:16:f0:e4:93:d6:14:31:28:ac:fc:f0:
db:80:e4:a1:26:cb:95:9a:d7:af:c2:bd:ab:4a:59:c6:4f:bc:
d8:9e:89:91:e9:20:17:a8:1e:f6:7d:2d:5b:ff:35:f7:13:7f:
f7:69:71:38:5a:d1:aa:f6:44:6d:0d:11:21:bb:c5:53:4d:90:
1a:66:ae:38:cc:fd:20:6f:7a:1b:9f:0f:92:83:14:47:f9:65:
ed:1c:cd:e6:25:35:71:46:ff:a8:0d:7d:cf:11:e3:51:8f:01:
1e:04:9c:f1:4b:af:4b:b3:f6:21:3c:9e:89:09:ed:46:8d:5c:
92:d8:21:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:20 2026 by rpki-client