Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File: Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier: 5+2faRt8BFxbql/wM77RMH0N1Y0+eYH4zZ0A9+kBRYg=
Subject key identifier: D8:8A:A5:AD:99:31:2D:0F:48:4B:F2:70:AA:93:B3:0B:A2:BB:73:AD
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer: /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial: 019D9C9A99A4B121B129A7BE52D5E52B2093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 18:01:10 +0000
Manifest this update: Fri 17 Apr 2026 18:01:10 +0000
Manifest next update: Sat 18 Apr 2026 18:01:10 +0000
Files and hashes: 1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: 8TCES9ffqVh3/pyqI7ZMfGQ///On24HvOk8+WQ11LAc=)
2: YQOC7uY6FRNmBO9ZN7PiM76yo6I.roa (hash: F4wrLCo6AyKDL70hM0i0er3GASQZx9E2NWI72xLZxxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:99:a4:b1:21:b1:29:a7:be:52:d5:e5:2b:20:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Validity
Not Before: Apr 17 18:01:10 2026 GMT
Not After : Apr 18 18:01:10 2026 GMT
Subject: CN=d88aa5ad99312d0f484bf270aa93b30ba2bb73ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:4c:f3:28:1a:93:fc:35:9f:63:c4:76:f3:
dc:24:41:dc:6c:49:41:68:13:79:f3:6a:a7:99:1f:
cd:9c:9b:45:57:a3:ba:b5:49:3c:74:ca:d8:8d:47:
aa:5e:01:c6:e3:d6:a4:25:74:38:e1:fb:88:20:8c:
3e:73:38:3a:d5:7f:18:c4:60:d5:d0:c9:b5:45:8a:
ec:ed:b5:68:f6:f7:2c:cf:48:17:a5:2b:b3:1e:d0:
ae:c6:65:3a:3c:ad:2c:3c:e4:c0:20:07:18:60:62:
c9:6d:f3:6e:9a:d9:65:ce:ae:59:ba:66:4b:b9:2d:
00:f9:97:b0:b4:69:a8:70:3a:56:4c:a7:b2:b8:7c:
42:cf:a6:93:2a:cb:eb:ce:32:10:b6:f3:c5:b4:b9:
1e:2a:b0:97:81:32:b0:45:83:64:50:e4:99:06:7f:
70:52:8d:e1:b5:6c:25:ad:e9:f1:cb:0b:64:8a:d7:
af:de:5d:27:61:5c:5c:01:05:c9:1c:43:c4:4e:45:
95:53:31:0f:ed:e4:be:70:55:73:fe:c5:42:19:27:
55:86:4a:8c:5b:cb:dd:21:15:9a:7e:f3:ec:44:60:
1b:86:8d:e7:a1:45:11:dd:dd:95:be:d2:28:5d:76:
f2:ba:49:f6:da:d7:58:4b:6a:2c:aa:f5:32:3f:48:
9b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8A:A5:AD:99:31:2D:0F:48:4B:F2:70:AA:93:B3:0B:A2:BB:73:AD
X509v3 Authority Key Identifier:
keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6e:53:09:96:ab:32:fe:0c:7c:87:07:b3:de:8e:1a:aa:af:
22:0b:94:82:04:ce:ed:9d:dd:e4:70:74:05:95:45:c7:c8:af:
94:cc:62:1a:61:2b:9e:09:da:ea:da:71:41:fd:9a:0b:b5:55:
a2:c4:98:0f:35:c4:ff:42:ea:af:23:c6:ec:ba:48:a3:3b:26:
a5:66:59:78:66:a8:01:40:2c:6a:bb:05:52:90:0b:c5:e6:5f:
29:01:58:20:d9:3a:a5:ef:1d:e4:2e:03:d0:80:97:e9:d1:50:
44:76:40:5b:ac:fb:31:78:ab:d6:d5:a3:04:3f:29:bc:04:af:
3e:df:50:24:f4:f9:57:13:0e:a4:88:c6:60:3a:03:7b:87:ee:
58:ab:fe:87:74:cf:b3:2f:1d:d3:2e:8a:8d:9b:d8:37:98:28:
6f:72:52:c9:f7:7a:63:1f:17:ff:2c:d7:fb:3c:a5:ff:59:97:
a5:e0:05:c3:d8:63:d0:c5:49:c5:8c:2e:d0:a4:85:8f:40:f3:
62:7b:1d:d3:aa:e7:b7:06:0e:a8:bf:12:9f:75:13:ff:59:b5:
b3:17:72:a6:b3:1e:98:a0:6c:11:46:e9:90:53:c2:1b:85:59:
41:3f:ae:6d:4b:6e:7d:cd:33:40:aa:43:5a:54:33:59:92:22:
53:8a:6e:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cmpmksSGxKae+UtXlKyCTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDhhZGU4NmExY2NmN2E0ODNiNGMyOTYyMDQ1ZGI4ZDBl
ZjgyNmQwHhcNMjYwNDE3MTgwMTEwWhcNMjYwNDE4MTgwMTEwWjAzMTEwLwYDVQQD
EyhkODhhYTVhZDk5MzEyZDBmNDg0YmYyNzBhYTkzYjMwYmEyYmI3M2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPFM8ygak/w1n2PEdvPcJEHcbElB
aBN582qnmR/NnJtFV6O6tUk8dMrYjUeqXgHG49akJXQ44fuIIIw+czg61X8YxGDV
0Mm1RYrs7bVo9vcsz0gXpSuzHtCuxmU6PK0sPOTAIAcYYGLJbfNumtllzq5ZumZL
uS0A+ZewtGmocDpWTKeyuHxCz6aTKsvrzjIQtvPFtLkeKrCXgTKwRYNkUOSZBn9w
Uo3htWwlrenxywtkitev3l0nYVxcAQXJHEPETkWVUzEP7eS+cFVz/sVCGSdVhkqM
W8vdIRWafvPsRGAbho3noUUR3d2VvtIoXXbyukn22tdYS2osqvUyP0ibZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiKpa2ZMS0PSEvycKqTswuiu3OtMB8GA1UdIwQY
MBaAFAYIrehqHM96SDtMKWIEXbjQ74JtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTk4ZmItZTY3MC00Y2Y0LTgxYTQt
NDIxOTAyMjM1MGZhLzEvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yYTk4ZmItZTY3MC00Y2Y0LTgxYTQtNDIxOTAyMjM1MGZh
LzEvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARW5TCZar
Mv4MfIcHs96OGqqvIguUggTO7Z3d5HB0BZVFx8ivlMxiGmErngna6tpxQf2aC7VV
osSYDzXE/0LqryPG7LpIozsmpWZZeGaoAUAsarsFUpALxeZfKQFYINk6pe8d5C4D
0ICX6dFQRHZAW6z7MXir1tWjBD8pvASvPt9QJPT5VxMOpIjGYDoDe4fuWKv+h3TP
sy8d0y6KjZvYN5gob3JSyfd6Yx8X/yzX+zyl/1mXpeAFw9hj0MVJxYwu0KSFj0Dz
Ynsd06rntwYOqL8Sn3UT/1m1sxdyprMemKBsEUbpkFPCG4VZQT+ubUtufc0zQKpD
WlQzWZIiU4putA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:58:17 2026 by rpki-client