Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File: Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier: mDo1yCNa+evWHlsnQ76ggTtjqBUIWyAl00LwwEssy0I=
Subject key identifier: A5:03:72:57:4A:54:3D:2F:90:0C:D3:5A:37:34:DC:05:F3:4E:24:CA
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer: /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial: 019CAB34A91D0982050A9935043BC4C0E7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:01:20 +0000
Manifest this update: Sun 01 Mar 2026 21:01:20 +0000
Manifest next update: Mon 02 Mar 2026 21:01:20 +0000
Files and hashes: 1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: ZmZWa+7w56SP9Ru2ZcQ6xvT0c8scxMdxa/TqdYE92aI=)
2: YQOC7uY6FRNmBO9ZN7PiM76yo6I.roa (hash: F4wrLCo6AyKDL70hM0i0er3GASQZx9E2NWI72xLZxxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:a9:1d:09:82:05:0a:99:35:04:3b:c4:c0:e7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Validity
Not Before: Mar 1 21:01:20 2026 GMT
Not After : Mar 2 21:01:20 2026 GMT
Subject: CN=a50372574a543d2f900cd35a3734dc05f34e24ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:44:f9:94:55:1b:d7:fc:18:9f:65:f1:84:2a:
9f:22:06:84:3d:eb:cb:93:70:27:44:34:19:2d:94:
a6:46:d3:42:13:80:14:be:fe:89:1f:5a:8b:11:8e:
e7:26:bd:70:74:e3:63:89:55:cd:b5:87:80:31:6b:
59:81:d6:11:84:45:45:35:65:87:89:f0:4a:d1:13:
b2:37:6a:81:0e:49:6b:0c:1c:b7:d2:ea:f4:f9:8d:
16:9e:86:8b:8e:f3:9f:fe:54:0a:6e:3d:b9:02:e3:
c1:cf:ff:50:ba:06:e5:9a:ff:6c:87:1e:b7:74:dc:
96:6d:c2:68:57:5e:d9:e8:1d:ed:c3:d5:6f:e7:16:
6f:1e:be:92:78:de:e2:c2:8f:fb:22:6b:d1:97:ee:
53:7c:83:f7:d7:f2:23:70:24:80:f4:9a:c7:99:ab:
8d:1e:5c:c5:3f:a8:0b:a5:d6:e0:4f:ad:48:d9:de:
4e:f9:f0:1d:9a:ae:8c:5a:38:06:85:b6:1e:63:03:
d3:19:33:0d:c1:b7:ec:c1:2f:dc:d4:9d:e1:b7:68:
98:d2:a5:b9:4b:1d:be:81:35:db:13:75:81:10:92:
55:c7:33:cc:ec:c0:09:a4:78:da:94:cf:ed:51:b4:
e9:97:77:04:a4:18:eb:22:ed:29:dd:da:ab:9a:1a:
19:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:03:72:57:4A:54:3D:2F:90:0C:D3:5A:37:34:DC:05:F3:4E:24:CA
X509v3 Authority Key Identifier:
keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:55:c5:33:22:7f:1a:8c:3d:14:48:53:b3:d1:44:9d:cf:07:
96:53:8a:2b:a2:d6:ae:ad:3f:90:1e:f4:2f:c8:9c:31:2d:89:
e7:d6:d0:70:be:e2:86:25:66:89:50:bb:71:e2:5e:e9:5a:80:
ca:d0:f1:e8:a3:7f:b7:85:53:4d:19:23:78:e8:3f:f0:dc:c9:
0d:d3:56:7f:49:c5:d8:30:41:a9:7f:e1:72:7a:b3:46:f7:05:
5d:fb:d6:0c:3c:78:90:c6:d4:22:18:b2:96:0b:b0:ca:e3:36:
94:ee:8b:63:84:35:a2:51:2f:07:fa:ea:89:b0:29:e8:0f:70:
fd:2c:98:db:7e:01:6f:23:93:50:f7:8a:5e:d4:6c:02:62:58:
e0:1b:f9:3e:6d:c9:e5:2e:94:77:2c:e4:7a:e4:bc:a6:39:56:
31:47:f9:e3:87:46:4c:90:93:5e:68:d8:42:b3:61:46:0e:ef:
08:6f:ff:13:09:f5:2f:f3:96:d3:b9:33:ef:c8:21:97:3e:ee:
be:8a:6d:9a:b8:0f:25:bd:74:b5:4c:57:07:1d:39:1f:90:b3:
70:70:d2:7e:c6:28:bb:21:f7:6f:56:19:bd:c2:03:8a:0e:f8:
0f:16:f7:57:97:f6:23:44:0e:db:6d:92:90:92:68:a8:cc:94:
9c:f7:2b:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNKkdCYIFCpk1BDvEwOfoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDhhZGU4NmExY2NmN2E0ODNiNGMyOTYyMDQ1ZGI4ZDBl
ZjgyNmQwHhcNMjYwMzAxMjEwMTIwWhcNMjYwMzAyMjEwMTIwWjAzMTEwLwYDVQQD
EyhhNTAzNzI1NzRhNTQzZDJmOTAwY2QzNWEzNzM0ZGMwNWYzNGUyNGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkET5lFUb1/wYn2XxhCqfIgaEPevL
k3AnRDQZLZSmRtNCE4AUvv6JH1qLEY7nJr1wdONjiVXNtYeAMWtZgdYRhEVFNWWH
ifBK0ROyN2qBDklrDBy30ur0+Y0WnoaLjvOf/lQKbj25AuPBz/9Qugblmv9shx63
dNyWbcJoV17Z6B3tw9Vv5xZvHr6SeN7iwo/7ImvRl+5TfIP31/IjcCSA9JrHmauN
HlzFP6gLpdbgT61I2d5O+fAdmq6MWjgGhbYeYwPTGTMNwbfswS/c1J3ht2iY0qW5
Sx2+gTXbE3WBEJJVxzPM7MAJpHjalM/tUbTpl3cEpBjrIu0p3dqrmhoZawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUDcldKVD0vkAzTWjc03AXzTiTKMB8GA1UdIwQY
MBaAFAYIrehqHM96SDtMKWIEXbjQ74JtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTk4ZmItZTY3MC00Y2Y0LTgxYTQt
NDIxOTAyMjM1MGZhLzEvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yYTk4ZmItZTY3MC00Y2Y0LTgxYTQtNDIxOTAyMjM1MGZh
LzEvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1XFMyJ/
Gow9FEhTs9FEnc8HllOKK6LWrq0/kB70L8icMS2J59bQcL7ihiVmiVC7ceJe6VqA
ytDx6KN/t4VTTRkjeOg/8NzJDdNWf0nF2DBBqX/hcnqzRvcFXfvWDDx4kMbUIhiy
lguwyuM2lO6LY4Q1olEvB/rqibAp6A9w/SyY234BbyOTUPeKXtRsAmJY4Bv5Pm3J
5S6UdyzkeuS8pjlWMUf544dGTJCTXmjYQrNhRg7vCG//Ewn1L/OW07kz78ghlz7u
voptmrgPJb10tUxXBx05H5CzcHDSfsYouyH3b1YZvcIDig74Dxb3V5f2I0QO222S
kJJoqMyUnPcrig==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:06:37 2026 by rpki-client