Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
File: BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json)
Hash identifier: 7B8Br9Zjze82ZAKs/GztPYsWv0PrvNqUggJjvGQPnn8=
Subject key identifier: 77:6B:6B:58:40:B4:14:99:DC:6B:1E:9F:6C:22:B8:07:80:B9:72:DD
Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
Certificate issuer: /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Certificate serial: 019CAC479306F6B4EB3771A0848FC2F4049F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
Manifest number: 0CFD
Signing time: Mon 02 Mar 2026 02:01:37 +0000
Manifest this update: Mon 02 Mar 2026 02:01:37 +0000
Manifest next update: Tue 03 Mar 2026 02:01:37 +0000
Files and hashes: 1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: Wygd5VAQA204RGhjQlc/qGb/xFrg5IAuxvB8Pxa7i0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:93:06:f6:b4:eb:37:71:a0:84:8f:c2:f4:04:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Validity
Not Before: Mar 2 02:01:37 2026 GMT
Not After : Mar 3 02:01:37 2026 GMT
Subject: CN=776b6b5840b41499dc6b1e9f6c22b80780b972dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:4f:50:70:be:f5:e6:32:80:5b:3f:e4:b2:
9c:47:88:e2:cd:e9:8d:9b:a3:e2:92:84:85:f6:ae:
92:9b:71:ea:3d:99:a3:a8:a2:7b:59:6a:8d:39:c9:
6b:1e:ed:bb:36:29:82:ff:6b:73:54:25:f1:29:8d:
7b:0b:40:5f:89:10:f0:54:1b:a8:ce:5c:d8:43:7b:
72:b2:99:94:14:07:4d:da:79:28:de:4c:e8:3e:09:
ab:b1:93:6d:11:c0:46:7d:84:ae:31:b8:ce:85:b4:
b8:73:cd:4f:b8:d3:d9:53:78:25:95:04:cf:7d:0d:
b7:ed:0d:a2:45:fd:b7:da:e5:dc:cc:5f:95:70:49:
9f:2a:37:13:6f:82:e4:48:56:d5:67:4b:a2:0a:aa:
7c:05:30:3b:1c:64:e5:ac:48:42:70:67:40:5a:1a:
91:a6:56:c4:bb:42:94:b9:1f:fd:96:03:2f:39:9e:
a0:a7:9b:4d:20:b3:17:d4:cc:c1:48:48:f2:f1:5d:
dc:30:4e:2a:2c:34:d8:2b:a3:f9:5b:7a:ac:46:80:
3b:5a:0b:32:15:a5:d4:77:24:51:c5:6d:2d:b5:84:
8b:5a:06:fa:cc:ec:7c:c2:bf:f3:c7:62:90:f3:3c:
f5:ef:d3:87:65:9f:af:07:49:b9:91:c4:08:c0:0b:
ce:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6B:6B:58:40:B4:14:99:DC:6B:1E:9F:6C:22:B8:07:80:B9:72:DD
X509v3 Authority Key Identifier:
keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:62:e4:ae:8d:ee:b1:ab:86:9d:e2:3a:de:79:c4:2e:82:a3:
83:a7:06:b9:52:5c:d4:c5:30:3b:17:9f:39:c1:95:d6:ed:60:
40:f2:f1:ff:4e:c9:18:a6:9c:67:41:6e:d2:28:15:e7:ec:14:
55:6c:e1:8c:8d:0f:c4:d0:f8:96:9b:07:1c:f9:c3:35:c8:ef:
10:87:d6:61:66:a0:6b:8c:38:18:cf:c8:be:27:4a:b3:e6:86:
a6:a4:b6:e3:66:a8:a4:f8:22:f9:ad:cc:77:89:c2:69:93:b9:
d3:57:c3:d8:69:0f:69:89:aa:58:cf:dc:a3:17:84:af:45:c6:
90:8a:71:b1:3e:47:11:fd:b5:a0:bd:6a:34:b4:be:e4:f9:94:
68:01:2c:b5:b8:ea:c3:7f:ec:9e:96:4a:87:9b:64:02:4b:69:
fb:e7:41:d2:90:70:c2:b2:8a:20:ef:1b:f6:d5:dd:85:df:67:
bd:24:c9:f7:48:e5:9f:63:1a:ff:73:50:4d:9e:3c:21:f5:2e:
b9:c4:69:7a:02:a1:ac:b2:49:f0:74:d4:cd:75:e5:ac:3e:70:
e6:e5:2c:b3:a7:bc:0f:cd:02:10:53:5f:85:0b:42:3c:77:cf:
70:06:b7:5a:1e:8b:59:50:3a:9a:f5:b6:ac:66:81:74:88:1f:
b7:6e:b5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:54 2026 by rpki-client