Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
File: bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft (raw, json)
Hash identifier: c+hMfxveNEBkWkWcbJHlMVuEFTdW6ITzR8cR/UOu0+o=
Subject key identifier: EF:30:C2:3F:F9:B5:48:D2:4E:06:6F:62:A1:52:27:70:5F:E1:99:76
Authority key identifier: 6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
Certificate issuer: /CN=6eae4bb0513980c87f9bac592952c095777ac12e
Certificate serial: 019D322BF39E8D9C00DA820C1AF22CACA3A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
Manifest number: 04E7
Signing time: Sat 28 Mar 2026 02:00:34 +0000
Manifest this update: Sat 28 Mar 2026 02:00:34 +0000
Manifest next update: Sun 29 Mar 2026 02:00:34 +0000
Files and hashes: 1: bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl (hash: yZZ8W4zkKC2N2yC9fV5hnLRjhEkBsHvL/4SMuURircM=)
2: zLQM5UGUZQZaDaXLLIq2Cs9lTG4.roa (hash: lEMGpphC2f316K3X8TeGMMDyruycSyCxjomy+Oc5l4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2b:f3:9e:8d:9c:00:da:82:0c:1a:f2:2c:ac:a3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eae4bb0513980c87f9bac592952c095777ac12e
Validity
Not Before: Mar 28 02:00:34 2026 GMT
Not After : Mar 29 02:00:34 2026 GMT
Subject: CN=ef30c23ff9b548d24e066f62a15227705fe19976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:19:f5:25:74:fb:6e:2e:a3:70:1b:be:ba:
42:40:92:c7:9d:24:45:34:f4:0c:18:ca:4a:e4:12:
e5:45:4a:52:1a:af:3b:70:96:2d:30:ca:75:d3:7a:
f0:51:d7:9a:60:62:dc:73:bc:22:37:15:3a:d1:8f:
10:83:90:cc:b1:21:6e:0e:e7:9c:51:96:36:c4:da:
1d:d5:5a:28:4d:da:bf:f9:58:4f:8a:2a:e6:74:8a:
18:fa:35:48:3e:1d:73:6f:19:9d:aa:af:75:af:9d:
50:bf:77:96:d0:c4:93:bc:11:c3:80:ff:fb:2a:39:
71:00:09:ad:e3:4f:99:41:8f:b5:10:d7:63:d9:f9:
37:f9:c1:dc:a7:2e:4e:a4:8a:a1:49:46:1b:0b:d5:
be:8d:bd:f7:b2:6b:bb:c4:bf:c0:91:af:59:90:cc:
79:93:43:17:e4:be:64:f3:f2:1a:a1:35:f4:9f:f9:
8f:92:50:c1:ca:f0:0b:7d:53:8f:c3:1c:42:76:71:
0c:40:bd:22:2c:d2:67:f6:40:0b:bb:b0:7e:30:40:
37:53:3f:8c:86:0e:a1:3c:3b:03:b5:0c:d5:ae:ff:
4a:f7:7c:e2:67:96:dc:c3:b2:0c:7f:b4:f1:1e:2a:
24:b9:2e:b7:ee:41:10:80:f9:f6:6e:04:0b:e1:b8:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:30:C2:3F:F9:B5:48:D2:4E:06:6F:62:A1:52:27:70:5F:E1:99:76
X509v3 Authority Key Identifier:
keyid:6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:19:83:e8:e6:7f:24:03:d1:e0:66:45:e7:07:45:b2:02:b5:
b3:05:31:bd:b2:70:be:5a:36:fa:b1:1f:eb:82:ba:30:e9:34:
c8:1e:e1:05:4c:77:59:b3:ae:6f:33:b7:db:d4:cf:cf:6f:03:
85:bf:77:b5:c9:c5:d9:e1:f6:58:fa:6b:fd:ec:85:93:47:75:
ae:44:3c:70:44:15:4e:20:fe:68:3a:8c:1d:c5:3a:19:a7:c5:
34:be:54:28:66:2b:0e:41:8c:43:8b:7f:7b:ea:e3:52:70:a9:
43:a1:71:9b:b4:83:a2:38:25:33:5d:bb:df:aa:61:a8:8a:35:
4e:38:a2:da:af:63:d6:5a:f4:5f:bc:6a:d7:70:0b:ae:8a:37:
ba:32:89:da:b4:37:a3:c0:85:c0:2d:a2:1d:5a:c2:bd:f1:1c:
4a:6e:37:06:53:5c:29:6f:af:cc:c1:49:1c:ea:1c:15:cb:d1:
eb:f6:06:b9:b1:ff:78:d5:3d:1b:2c:44:63:f8:42:f3:6d:77:
27:7c:23:ff:e6:51:da:ee:c4:69:ff:95:57:d5:c0:20:e0:70:
d6:0e:e4:e1:5f:4c:8b:6c:2c:03:4a:63:98:21:b7:2f:48:6d:
be:a2:9f:aa:e1:cd:46:7d:ee:3f:c8:f5:45:5d:fc:f7:aa:e2:
fa:ab:33:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:40:36 2026 by rpki-client