Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
File: BgPfkU3wTkf1a9li8vncPwQ0pdM.mft (raw, json)
Hash identifier: sUZg7t9BYVo3jLKvbOCymF3uPIfh4LoLdifl5rcp5uo=
Subject key identifier: 10:F4:EF:2A:A1:6A:2E:C6:5B:45:6D:CF:E0:C3:04:5F:C4:7C:1C:25
Authority key identifier: 06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
Certificate issuer: /CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
Certificate serial: 01A0CC34E57BDE66A08E180292763C245291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
Manifest number: 0CB4
Signing time: Wed 23 Sep 2026 03:00:13 +0000
Manifest this update: Wed 23 Sep 2026 03:00:13 +0000
Manifest next update: Thu 24 Sep 2026 03:00:13 +0000
Files and hashes: 1: BgPfkU3wTkf1a9li8vncPwQ0pdM.crl (hash: sUUg9sxOVuQI45wyTMff/DqRXW+q9Z2wYpfeaVGizDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:34:e5:7b:de:66:a0:8e:18:02:92:76:3c:24:52:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
Validity
Not Before: Sep 23 03:00:13 2026 GMT
Not After : Sep 24 03:00:13 2026 GMT
Subject: CN=10f4ef2aa16a2ec65b456dcfe0c3045fc47c1c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:28:11:97:8d:d1:e6:72:39:5b:d2:d6:65:
a7:06:27:9b:fd:c4:1e:e1:44:e4:55:80:0b:70:35:
60:b2:ec:af:fb:53:b8:fe:96:4f:31:16:cd:a5:09:
d4:70:93:b2:5c:92:a9:4a:ae:a7:6c:c2:2c:33:96:
c9:db:63:cc:d4:74:22:51:da:59:3a:ae:dd:d6:3a:
28:ab:c1:fc:c3:59:a0:5b:75:74:d6:8c:67:d2:b3:
f3:dd:c7:29:1b:c8:79:e6:2a:4e:32:89:bb:84:f2:
d6:bc:99:eb:39:d6:16:99:49:1a:a4:7f:f1:f8:ab:
ad:59:74:87:4e:2b:1c:0b:67:04:5d:bc:73:d8:19:
52:ec:7d:58:35:2d:5d:ef:7c:87:bd:c3:0c:16:68:
f6:6f:77:b1:9a:7a:46:71:bb:95:af:c4:0f:2d:a6:
af:1a:cf:a9:69:fa:83:aa:48:7a:bc:c3:44:22:df:
ec:b1:96:c8:20:00:1e:d6:75:43:c8:9c:bb:8d:dd:
cf:d6:30:80:1b:5e:8b:3e:e6:27:a1:7a:ce:79:de:
0f:9f:1b:4c:9c:74:8e:15:2b:a9:30:70:c2:67:2d:
25:f4:d0:23:83:b6:b0:0b:5d:89:e1:78:b2:ba:ce:
e7:7f:3a:2e:2f:30:8c:c9:c0:67:42:36:2e:0e:45:
50:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F4:EF:2A:A1:6A:2E:C6:5B:45:6D:CF:E0:C3:04:5F:C4:7C:1C:25
X509v3 Authority Key Identifier:
keyid:06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ad:7b:e6:a8:b0:35:23:4d:d5:2f:44:7c:18:11:c4:f6:96:
c5:5c:b2:a3:ba:ec:a5:83:ad:75:99:eb:fb:12:12:e6:a7:14:
3c:c0:bc:11:73:0f:da:4c:fb:7c:88:7b:0a:30:88:48:69:cc:
62:91:71:95:9d:76:40:28:e8:5e:b8:d9:81:fe:31:e6:33:f5:
c3:bb:48:bf:78:63:42:31:b7:4b:06:87:64:c7:4d:4f:39:c2:
2b:d8:5d:40:b6:bc:04:03:25:70:f3:30:e6:80:fd:cd:0f:f4:
ec:43:d0:e0:3a:05:c9:20:5d:c0:56:41:75:aa:e7:aa:7d:8c:
ab:5b:12:00:90:74:66:d5:25:b8:b7:36:e6:32:f2:86:96:af:
3d:9b:dd:ab:5b:ea:7c:7e:0d:11:98:b5:a9:64:32:6b:aa:49:
90:a2:87:6c:3f:50:77:2b:30:9e:92:11:d1:22:3e:41:86:37:
f1:87:25:88:44:98:e9:3b:32:1b:56:58:1a:42:d0:ac:e5:c5:
23:51:a7:71:7e:3b:5d:18:3b:b9:25:79:e4:b4:58:11:eb:1c:
1d:10:32:1e:b2:36:ce:c1:f1:70:be:db:c3:a0:f6:3e:ba:a4:
a3:ba:9a:08:e5:d1:53:22:9b:c3:6d:c4:71:11:7a:0c:fa:cb:
2e:e2:30:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMNOV73magjhgCknY8JFKRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDNkZjkxNGRmMDRlNDdmNTZiZDk2MmYyZjlkYzNmMDQz
NGE1ZDMwHhcNMjYwOTIzMDMwMDEzWhcNMjYwOTI0MDMwMDEzWjAzMTEwLwYDVQQD
EygxMGY0ZWYyYWExNmEyZWM2NWI0NTZkY2ZlMGMzMDQ1ZmM0N2MxYzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkooEZeN0eZyOVvS1mWnBieb/cQe
4UTkVYALcDVgsuyv+1O4/pZPMRbNpQnUcJOyXJKpSq6nbMIsM5bJ22PM1HQiUdpZ
Oq7d1jooq8H8w1mgW3V01oxn0rPz3ccpG8h55ipOMom7hPLWvJnrOdYWmUkapH/x
+KutWXSHTiscC2cEXbxz2BlS7H1YNS1d73yHvcMMFmj2b3exmnpGcbuVr8QPLaav
Gs+pafqDqkh6vMNEIt/ssZbIIAAe1nVDyJy7jd3P1jCAG16LPuYnoXrOed4PnxtM
nHSOFSupMHDCZy0l9NAjg7awC12J4Xiyus7nfzouLzCMycBnQjYuDkVQPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBD07yqhai7GW0Vtz+DDBF/EfBwlMB8GA1UdIwQY
MBaAFAYD35FN8E5H9WvZYvL53D8ENKXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdQZmtVM3dUa2YxYTlsaTh2bmNQd1EwcGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85YjVlMjYtMDE0OC00ZjlmLWE0NmEt
YmM4NDI1YzYwNjA0LzEvQmdQZmtVM3dUa2YxYTlsaTh2bmNQd1EwcGRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS85YjVlMjYtMDE0OC00ZjlmLWE0NmEtYmM4NDI1YzYwNjA0
LzEvQmdQZmtVM3dUa2YxYTlsaTh2bmNQd1EwcGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAca175qiw
NSNN1S9EfBgRxPaWxVyyo7rspYOtdZnr+xIS5qcUPMC8EXMP2kz7fIh7CjCISGnM
YpFxlZ12QCjoXrjZgf4x5jP1w7tIv3hjQjG3SwaHZMdNTznCK9hdQLa8BAMlcPMw
5oD9zQ/07EPQ4DoFySBdwFZBdarnqn2Mq1sSAJB0ZtUluLc25jLyhpavPZvdq1vq
fH4NEZi1qWQya6pJkKKHbD9QdyswnpIR0SI+QYY38YcliESY6TsyG1ZYGkLQrOXF
I1GncX47XRg7uSV55LRYEescHRAyHrI2zsHxcL7bw6D2Prqko7qaCOXRUyKbw23E
cRF6DPrLLuIwag==
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:48:07 2026 by rpki-client