Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
File: bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft (raw, json)
Hash identifier: hWyX0nAvL+kA1Ejx4EdJMWugmgtx/UNf0Kfy/75IqtY=
Subject key identifier: DE:2D:51:98:57:79:BB:D1:B6:D1:DE:E6:E0:8A:C1:96:4C:83:AA:04
Authority key identifier: 6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
Certificate issuer: /CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Certificate serial: 019D26CD958D9BDECEEEAC5CE41648625ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
Manifest number: 175F
Signing time: Wed 25 Mar 2026 21:01:40 +0000
Manifest this update: Wed 25 Mar 2026 21:01:40 +0000
Manifest next update: Thu 26 Mar 2026 21:01:40 +0000
Files and hashes: 1: YyGPobwhIHB6BpaWiHqwNWGrgVQ.roa (hash: 5zuMdHhiIbs7RssXaE/NxcNIb7ZtP/iMz7WzclxfqOE=)
2: bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl (hash: 5fdZCEX4k4tyPS0t5z1cD0sn5rVzfp4lrhinPGxGq8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:95:8d:9b:de:ce:ee:ac:5c:e4:16:48:62:5e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Validity
Not Before: Mar 25 21:01:40 2026 GMT
Not After : Mar 26 21:01:40 2026 GMT
Subject: CN=de2d51985779bbd1b6d1dee6e08ac1964c83aa04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:05:93:2d:17:57:77:c7:0b:3c:eb:5d:54:a9:
7a:6d:95:0b:a2:a3:1c:3b:36:0b:02:20:2f:f8:ac:
51:54:b4:03:bb:6e:44:6b:6f:65:bc:b4:93:52:18:
80:87:a5:54:23:5a:af:ef:ac:b7:73:1d:24:a7:ce:
48:72:32:ab:d0:f3:ee:c9:bb:08:99:a8:14:fe:64:
73:e2:fa:99:ef:bb:e1:ea:ed:b6:66:54:91:36:18:
64:fe:e7:81:7e:5f:27:5c:75:e4:b7:ea:a5:b1:15:
56:27:70:39:72:e3:71:2a:bb:e8:d8:3b:2e:54:95:
90:bc:03:62:1b:bc:0e:7a:ab:ad:0c:6c:c6:79:b6:
c2:02:b8:7e:37:3f:67:b6:53:6d:48:78:60:3b:de:
a4:86:ef:41:62:40:d6:bf:39:76:0f:eb:92:c6:7d:
45:14:69:4f:73:db:62:eb:68:a0:d0:46:8f:9a:4f:
61:30:9e:0e:7f:b1:82:00:85:65:0f:24:36:f2:18:
6e:e7:5e:10:59:e5:94:ac:b6:74:76:e7:14:4c:b6:
30:87:b9:00:77:cc:a8:9b:76:8b:71:a7:95:d7:ef:
aa:79:4c:a2:d6:12:44:47:4a:71:37:3c:a6:75:db:
c9:90:7c:bc:72:1b:95:d7:f9:91:8f:9d:da:cd:5b:
1a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2D:51:98:57:79:BB:D1:B6:D1:DE:E6:E0:8A:C1:96:4C:83:AA:04
X509v3 Authority Key Identifier:
keyid:6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:68:07:c5:fa:48:a4:0b:67:d8:2b:cc:dc:b7:a0:52:65:72:
2c:6e:23:45:ab:b3:7d:b0:19:30:55:08:9b:74:15:fe:3b:5d:
02:d6:23:c2:e3:85:ab:e7:11:58:92:d5:bb:3c:23:6e:86:8c:
ed:9e:2a:1c:90:83:2c:ca:93:8b:a1:a7:85:5d:9a:be:ea:d0:
ec:10:c4:a8:42:16:df:88:11:a8:6b:89:96:45:76:eb:7e:60:
17:a4:26:68:2b:b9:11:5f:da:48:b2:ad:ff:49:0c:47:94:75:
ad:88:8c:28:10:63:6d:d1:b5:52:bc:aa:8e:56:b0:06:7a:dc:
88:36:2b:66:02:f4:b0:8f:27:d3:e1:53:e0:38:25:b5:4b:ab:
a6:e4:99:a1:5a:7b:fa:89:c7:1a:d2:26:7a:0e:5f:81:19:6e:
07:04:82:8e:7a:47:35:3c:01:50:ed:73:52:8d:52:4b:4b:4d:
4c:bd:65:8d:3f:09:69:49:94:5d:69:4d:f0:e6:e4:62:7c:d9:
13:0a:fa:8a:3d:f3:b3:25:95:88:de:08:0e:29:9a:44:dd:7f:
fe:a1:83:da:5c:02:a5:b3:70:bd:5a:85:16:af:ec:d7:c7:7c:
96:c1:f6:6b:51:ab:0b:ed:fa:64:af:02:b2:a6:e4:9b:92:ad:
2f:f4:bc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:39 2026 by rpki-client