Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
File: BG82Rli2TivxUNIPyDjDZCB5deI.mft (raw, json)
Hash identifier: fNY9JSxC6EeQAhtWIGBq/9KyyL8J42Rx6Fzz4Kye5Gg=
Subject key identifier: 21:8C:C1:D7:37:EE:33:9D:DA:E6:ED:85:1D:DF:44:33:CF:C0:06:E2
Authority key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
Certificate issuer: /CN=046f364658b64e2bf150d20fc838c364207975e2
Certificate serial: 019CAA58481E8E7DE121D09C18B9B0156499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 17:00:38 +0000
Manifest this update: Sun 01 Mar 2026 17:00:38 +0000
Manifest next update: Mon 02 Mar 2026 17:00:38 +0000
Files and hashes: 1: BG82Rli2TivxUNIPyDjDZCB5deI.crl (hash: 2lVyPAvFt7tYhBNL8hnHCaEx9p8ofLetm1c+raHb3Uc=)
2: MrmdJdrahes4YHrf8GzXfXRAQTo.roa (hash: KDHItLe9nk7zEElA0XEEmNLAdVnKqz0qSQ47JBnQBmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:48:1e:8e:7d:e1:21:d0:9c:18:b9:b0:15:64:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046f364658b64e2bf150d20fc838c364207975e2
Validity
Not Before: Mar 1 17:00:38 2026 GMT
Not After : Mar 2 17:00:38 2026 GMT
Subject: CN=218cc1d737ee339ddae6ed851ddf4433cfc006e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c1:31:11:42:29:d4:0d:34:51:f4:39:92:5b:
37:c3:cd:3c:9c:70:bf:32:f8:16:be:48:c4:fd:f1:
25:ec:a6:9a:89:fe:b4:9b:6d:ca:b6:f0:1d:7f:cd:
6f:3c:cc:61:e1:10:f9:27:5c:a8:fe:90:06:78:4c:
4c:ba:05:8b:e7:65:d0:76:82:88:ea:3a:7c:17:45:
02:f6:1a:4f:02:bf:af:d7:80:6a:0f:57:ee:55:cb:
f4:a6:48:68:db:b3:51:1a:01:a8:26:09:14:e4:c9:
94:2a:b9:6b:09:4c:e5:b5:8e:7a:d9:99:ce:e9:49:
ff:02:c4:7c:48:93:92:ab:19:0d:a4:1d:ed:2a:74:
4e:0a:7c:4a:e1:0b:b7:df:cb:e5:17:7f:4d:cb:1d:
8c:28:0f:c5:b4:f9:54:82:d1:7a:fa:03:c6:f9:84:
5b:24:3a:54:04:c3:d7:20:fa:df:19:a5:d0:f5:92:
12:2e:6c:80:b9:0c:21:09:63:ce:b0:f7:ff:fb:9e:
08:40:a5:c1:fb:5c:a8:c6:d9:75:19:38:77:94:41:
de:f9:6c:7d:3a:8a:60:47:34:b4:a2:8e:1d:03:91:
b4:49:97:ef:5b:1c:67:43:d0:11:04:a1:46:2c:62:
19:72:c3:a4:4c:32:6c:1d:d8:03:2c:df:ed:2d:ed:
34:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8C:C1:D7:37:EE:33:9D:DA:E6:ED:85:1D:DF:44:33:CF:C0:06:E2
X509v3 Authority Key Identifier:
keyid:04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:63:73:ac:b5:ef:d6:ee:97:01:7c:55:b6:b7:24:20:53:46:
d1:39:57:14:d7:d2:24:de:6d:23:07:d1:7a:9c:f7:4d:e5:94:
a6:36:cd:88:31:ef:c9:8a:b2:b5:89:03:e1:1d:27:3b:3e:0c:
f1:19:d4:33:05:6e:41:eb:bb:a9:a4:f6:5f:7d:b2:4c:55:a6:
a5:4f:bc:14:72:a9:9d:50:aa:5b:94:66:dc:53:88:72:cb:39:
9b:26:cc:d4:e2:6c:74:21:d4:c9:3e:a8:28:2d:31:26:28:c1:
f8:ca:9b:c0:73:8f:bb:32:36:be:af:41:4a:6e:90:44:7e:0c:
42:82:d2:16:f7:d2:86:e4:0d:5e:3b:cf:1e:e5:d9:aa:3c:f1:
6b:b3:29:4c:42:b4:2c:09:3d:ba:9d:0e:62:8b:8a:8b:9c:50:
ad:6d:33:b8:96:c9:cd:8f:50:ce:95:1f:83:85:07:cf:ca:c5:
31:e4:c6:2c:28:a9:01:5b:11:ec:12:f3:5a:0a:c6:25:8e:b2:
e4:36:4a:ca:f5:34:b4:a9:81:f9:50:e4:9d:ac:5c:94:33:d1:
fc:60:fc:71:63:08:22:db:21:26:3c:e1:c0:35:ed:54:0e:6e:
8d:e6:a5:73:83:a4:60:6a:48:40:02:53:fd:ed:d8:4f:a8:23:
d3:d1:94:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:21 2026 by rpki-client