Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
File: bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft (raw, json)
Hash identifier: 9a4VFmWvBA8qUdHoGsRxGf7lPXUeAmrQk8pKQPJLIZQ=
Subject key identifier: 53:7D:3B:3F:1C:2A:74:8C:A1:BE:43:48:CF:24:DE:CD:3C:29:70:C9
Authority key identifier: 6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
Certificate issuer: /CN=6eae4bb0513980c87f9bac592952c095777ac12e
Certificate serial: 01A1DD9511C4111B6364E097B8E2E532C943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
Manifest number: 0752
Signing time: Sun 15 Nov 2026 05:01:36 +0000
Manifest this update: Sun 15 Nov 2026 05:01:36 +0000
Manifest next update: Mon 16 Nov 2026 05:01:36 +0000
Files and hashes: 1: bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl (hash: dEHRw5FGRmq0HlO/PMjyYruZFCIaJ+zjQhYc6OnQeWQ=)
2: zLQM5UGUZQZaDaXLLIq2Cs9lTG4.roa (hash: lEMGpphC2f316K3X8TeGMMDyruycSyCxjomy+Oc5l4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:95:11:c4:11:1b:63:64:e0:97:b8:e2:e5:32:c9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eae4bb0513980c87f9bac592952c095777ac12e
Validity
Not Before: Nov 15 05:01:36 2026 GMT
Not After : Nov 16 05:01:36 2026 GMT
Subject: CN=537d3b3f1c2a748ca1be4348cf24decd3c2970c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:33:71:92:f7:23:b3:e7:b8:53:36:d7:ab:
aa:c7:18:7c:3c:a0:6f:a5:ba:3d:9f:b3:9f:2e:8b:
cc:5e:7e:b7:11:8c:8d:da:df:6c:9b:77:3b:bb:4e:
52:e9:e1:a3:fb:99:58:cd:19:89:6d:bf:2e:0d:c9:
a5:ac:66:6b:5d:7e:77:ac:de:bf:fb:83:97:66:0d:
b7:53:6d:27:77:54:7b:ad:f9:f4:55:c9:da:d6:91:
79:b9:c6:0f:08:23:66:27:62:09:fd:10:2f:06:3a:
6f:49:3a:69:fb:5a:43:ae:09:47:dc:d8:50:54:a2:
7a:d0:36:5d:cc:c7:5f:d1:09:1d:32:7b:68:dc:4d:
50:ab:87:40:db:c2:93:fd:63:03:2c:ce:98:9b:86:
ae:8e:5a:32:f6:3b:62:20:7e:2b:fa:e5:11:db:d9:
ed:73:8d:06:91:8e:5b:d8:89:06:05:a4:bd:85:36:
cf:e1:aa:9d:e8:7e:d7:0a:21:46:8b:8f:50:7a:4e:
46:31:e3:76:9d:c1:d8:dc:fc:5f:20:d8:f4:30:8d:
bf:c9:a6:8d:f2:11:76:d5:cc:16:e2:7e:3f:6a:70:
e7:e2:9a:2f:ff:73:06:68:05:f1:7e:27:a4:06:fe:
d3:be:3d:74:b0:43:5f:94:fc:44:89:9d:cd:4a:ba:
29:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7D:3B:3F:1C:2A:74:8C:A1:BE:43:48:CF:24:DE:CD:3C:29:70:C9
X509v3 Authority Key Identifier:
keyid:6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:96:77:20:1d:18:e8:42:e3:3d:0e:b4:d9:9e:13:26:2d:5d:
ea:a9:bb:e7:3c:67:fd:03:01:8b:5e:fb:76:f3:47:e1:c0:e1:
1e:db:c6:b2:2f:3d:c7:88:62:f3:14:24:8c:0c:ab:b2:20:fc:
cc:a5:42:a7:34:17:9b:b6:07:4a:f6:ab:32:5d:bd:4a:d8:c0:
65:56:c7:61:89:14:5f:24:fc:17:04:33:30:d4:68:91:08:99:
f4:79:16:70:17:f5:28:07:37:7a:99:7f:dd:00:47:4e:7d:ae:
a0:0a:c0:04:97:05:47:05:84:19:e7:14:a2:9a:37:5a:b7:23:
12:18:f7:9d:99:19:66:16:10:13:b2:a7:1f:da:ff:2c:19:0f:
6e:de:98:89:88:9e:72:da:9c:46:d0:09:14:71:9a:8b:36:04:
b2:76:53:78:0f:4d:d0:e9:37:99:30:87:b2:c7:c0:c5:28:be:
ef:7c:00:64:de:08:a8:9f:6e:5c:2f:a0:9d:38:50:db:61:25:
4a:3d:52:45:cf:c7:89:cd:67:e0:b9:9b:fe:ef:24:4d:80:ab:
a8:b2:dd:98:a2:3a:dc:f4:33:e6:0e:6d:fd:56:d7:49:66:fa:
75:1b:af:ef:b4:f0:22:8e:c6:b2:dc:4e:0f:ab:44:df:95:4b:
38:ef:ee:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:31:50 2026 by rpki-client