Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
File: BQseOMcEvQjjudF_WQNnsdHwPEo.mft (raw, json)
Hash identifier: kFs4bmpDr4VK53+imAgg9cTTvN72KCgZ2TVJB4L/2jQ=
Subject key identifier: C5:19:21:A8:AB:B8:A5:00:E1:64:62:A4:F5:50:80:E9:77:90:B1:FF
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Certificate issuer: /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial: 019E1CEBE902A33C6F543C137B2DD2DDE3B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
Manifest number: 153E
Signing time: Tue 12 May 2026 16:01:23 +0000
Manifest this update: Tue 12 May 2026 16:01:23 +0000
Manifest next update: Wed 13 May 2026 16:01:23 +0000
Files and hashes: 1: BQseOMcEvQjjudF_WQNnsdHwPEo.crl (hash: dEXTY3sOplAiXIOscqQ54o2gV4QK6wemfyFLIqXpo8o=)
2: OYsX4hAIO8zocCjaiLAgo7rhl6g.roa (hash: 8mSQCijrpWAiZ1jkdyn7YQSYQONkGQ/rnpGjGBbFCh4=)
3: bdlW9rGcnc760E8tAJjg2CUKj0w.roa (hash: IsdmnqvpxQ+ZG+0hIJARCiBh3q+bZgkvzh3TXDLVbNU=)
4: p1wmIAs2m6VXlrjI9FHbi34CCuM.roa (hash: 1NLV5dGaNdK6KyZjvAwRv2ZWHGbtxnA4M7+utkTJ9us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:e9:02:a3:3c:6f:54:3c:13:7b:2d:d2:dd:e3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Validity
Not Before: May 12 16:01:23 2026 GMT
Not After : May 13 16:01:23 2026 GMT
Subject: CN=c51921a8abb8a500e16462a4f55080e97790b1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:a7:19:a2:a6:8c:9e:6b:a1:8b:79:a1:54:
46:0a:ee:ff:b0:31:61:e5:dd:7c:83:4e:2c:03:b8:
34:85:4a:8f:3f:1e:b4:13:d9:37:79:87:4a:71:f4:
0f:8b:d0:0f:82:2b:ff:a2:f4:31:2a:65:e3:a4:3d:
ee:04:2d:2f:dc:d1:e0:04:07:bf:0f:c5:db:7e:b1:
22:2b:9b:61:df:2c:88:b6:d5:15:18:3b:82:72:fe:
1b:59:f5:a9:ab:87:8a:d0:b7:72:40:af:9d:6b:0a:
cb:cc:9f:b1:cc:14:ab:55:46:f5:28:5e:be:c4:af:
5b:2e:75:06:82:8d:12:66:eb:73:7c:88:31:f6:78:
e3:8a:d8:87:6b:28:76:00:fe:c2:4e:f3:71:82:d9:
16:64:ef:36:df:76:13:51:5d:4c:7f:ec:f8:44:3a:
0e:cd:71:ba:53:b5:54:a8:d8:ef:12:27:b8:86:42:
97:00:ef:21:81:36:5e:ea:ca:a4:8b:c6:ff:ce:2c:
61:d7:f6:95:4f:e4:94:5a:82:16:15:33:11:05:a7:
df:15:fd:e6:29:34:ea:c7:f4:81:33:8e:77:bc:0a:
ff:b4:fe:89:2b:93:01:a8:9d:3d:b3:14:da:2d:23:
a0:65:c1:c8:82:3e:85:d0:84:59:d5:c2:bf:1b:77:
51:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:19:21:A8:AB:B8:A5:00:E1:64:62:A4:F5:50:80:E9:77:90:B1:FF
X509v3 Authority Key Identifier:
keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8b:34:b8:5c:96:b7:31:63:4f:e9:9c:91:01:f2:5a:9c:0a:
18:53:97:89:90:28:74:ac:fe:c4:94:fa:ba:1b:f6:68:2b:9a:
37:49:47:8b:56:a4:00:55:45:b8:0f:50:da:a4:bd:d7:03:58:
e6:ae:ad:f2:1f:ff:cd:d7:f4:67:5b:1e:20:21:17:99:6e:4c:
39:ff:c1:07:5a:ae:87:5d:76:52:87:a0:e9:22:fc:cd:aa:33:
3b:13:3f:fa:a9:d4:41:83:5a:e4:6d:c8:b9:9a:08:f1:1a:8e:
7f:22:f1:27:ef:04:73:7b:6a:0f:e9:36:b1:c6:f0:4d:1a:5c:
52:de:59:09:e1:4f:f8:d8:a7:f0:8a:4f:31:e5:fd:6e:62:43:
c7:de:2d:fe:3e:ed:28:b9:b3:0c:9d:5b:49:3d:82:f9:1a:82:
1f:70:19:49:5f:0f:ee:da:da:a9:33:c5:ee:e4:fe:90:6d:1a:
35:56:1e:d7:f9:ad:8e:96:47:24:96:7b:eb:30:99:f2:20:ba:
91:5a:2a:a8:6f:f7:5b:2b:29:7c:04:d2:2f:e4:ea:f4:60:f6:
f2:48:81:b5:8d:f1:bf:73:34:80:24:c7:d6:62:a4:96:cc:26:
01:94:7a:48:ba:a1:07:8b:eb:d1:b7:38:93:88:17:43:f7:94:
6d:35:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:39 2026 by rpki-client