Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
File: BgOecctxUgSoPMJTgi3CmmLHmeY.mft (raw, json)
Hash identifier: d94HLVs7zG6b5RGC0CmMKVVAyp/rcZ0YGUtIPd2ZnxU=
Subject key identifier: 09:B4:ED:D1:7D:3F:18:FA:8A:6C:C6:48:CF:D7:B8:43:CC:56:AC:F1
Authority key identifier: 06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
Certificate issuer: /CN=06039e71cb715204a83cc253822dc29a62c799e6
Certificate serial: 019FA9758DFCCC6708248451E88861D090C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
Manifest number: 0AE4
Signing time: Tue 28 Jul 2026 16:01:21 +0000
Manifest this update: Tue 28 Jul 2026 16:01:21 +0000
Manifest next update: Wed 29 Jul 2026 16:01:21 +0000
Files and hashes: 1: BgOecctxUgSoPMJTgi3CmmLHmeY.crl (hash: 3m4C9tHZxldgVuET6hhfgVwe0qCnnkFre2FJinUc1iE=)
2: WsB2cpz5PeeV12FuRGXIMnfEpDA.roa (hash: RXGdsxXZdhMgqQg6njT8x//0fSXw5JT6Hs6Qaa1Fb6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:8d:fc:cc:67:08:24:84:51:e8:88:61:d0:90:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06039e71cb715204a83cc253822dc29a62c799e6
Validity
Not Before: Jul 28 16:01:21 2026 GMT
Not After : Jul 29 16:01:21 2026 GMT
Subject: CN=09b4edd17d3f18fa8a6cc648cfd7b843cc56acf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d1:fc:01:9a:5f:cc:69:47:52:28:d5:58:87:
7c:30:ff:f3:b6:37:3a:73:27:54:8a:53:d2:c1:97:
96:4e:5b:f6:3a:4b:ca:bb:f6:8d:00:85:83:ac:94:
d9:7a:c2:34:07:85:b4:3a:5b:b5:6c:74:71:dc:f6:
dd:f1:d9:45:24:cf:1d:aa:cb:56:08:e5:64:cd:01:
12:13:77:c8:d6:16:e7:9c:57:d3:12:d0:c9:f8:39:
a5:de:60:5a:ea:2b:b6:43:7c:de:20:0e:16:52:1a:
20:a9:3f:19:8e:2a:cb:4e:b1:ff:d7:f5:ba:c8:4e:
b3:a3:0a:a2:83:43:45:5f:01:72:32:78:18:a1:8b:
32:57:19:ab:b1:6b:03:78:fe:a1:10:4d:aa:4a:c6:
bd:67:be:7e:e0:23:fb:21:9a:00:93:8e:f1:02:d6:
03:a4:36:a8:93:b3:74:6c:e9:f5:30:27:f4:33:8c:
57:f5:67:a6:bc:b6:13:ab:08:f6:70:bc:39:0c:f7:
33:81:ac:9f:90:f5:7d:6f:72:19:8d:b6:aa:9e:bb:
f2:02:de:2f:a6:b6:58:20:6b:c0:9d:4e:be:65:5d:
51:6c:0b:06:64:3c:b0:3a:a9:2b:6b:21:8a:ac:7d:
7e:53:90:2b:3c:5a:f0:85:8e:60:09:f0:f8:54:28:
ef:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B4:ED:D1:7D:3F:18:FA:8A:6C:C6:48:CF:D7:B8:43:CC:56:AC:F1
X509v3 Authority Key Identifier:
keyid:06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d3:90:18:63:22:1c:59:87:b1:b8:6a:ab:a5:90:7e:73:d9:
91:3c:bf:74:c9:41:04:7d:c5:82:35:f8:84:43:fe:31:bb:4a:
47:91:4f:c4:90:85:ff:18:f3:ac:f2:66:ca:1c:49:c3:81:cf:
a6:58:4c:15:ce:15:c4:2d:f6:96:a3:57:3c:67:b5:cb:94:a7:
ee:57:0a:33:9e:22:c6:d2:81:21:0f:22:20:a2:ab:a2:3e:7c:
71:6d:99:c9:35:c7:36:95:c9:f5:f1:a2:63:ba:9a:90:9b:48:
ec:71:8c:16:a4:49:a8:38:c9:c8:a8:d2:46:c4:14:29:f1:f6:
a4:c4:f2:3a:b9:df:de:2e:67:dd:7f:74:f4:4b:33:93:4f:9c:
28:83:ad:14:cf:f0:23:7e:0f:bb:83:ff:28:cb:b3:b2:3a:69:
70:c0:d5:00:b7:d6:00:68:14:08:6b:e8:bb:ce:82:22:c3:30:
54:13:1c:3c:bc:67:10:a8:50:d3:a7:00:c0:84:17:7a:a5:4b:
17:c0:72:9d:d3:41:f2:a3:32:27:8d:8f:d2:aa:f4:ef:9a:fb:
f1:3d:b4:38:87:74:2f:bb:d8:33:53:70:4a:b7:9b:74:7b:ef:
2d:ba:1f:24:4b:3d:49:40:30:b9:49:82:6f:af:50:62:f0:5c:
f4:0f:dc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:14:22 2026 by rpki-client