Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
File: BQseOMcEvQjjudF_WQNnsdHwPEo.mft (raw, json)
Hash identifier: s3dM9DEr7TS8TIYmYwDiLhV82Ipi5W7RLiEqiKEb2gc=
Subject key identifier: A9:0B:86:A1:67:4C:2C:C7:F0:BD:1B:B3:1F:EB:3A:B1:83:B8:7B:04
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Certificate issuer: /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial: 019D27A8D57D0CD59F888CA4CE47007779A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
Manifest number: 14BF
Signing time: Thu 26 Mar 2026 01:01:09 +0000
Manifest this update: Thu 26 Mar 2026 01:01:09 +0000
Manifest next update: Fri 27 Mar 2026 01:01:09 +0000
Files and hashes: 1: BQseOMcEvQjjudF_WQNnsdHwPEo.crl (hash: 9btf6NGIwLmCaQR8oWHnsCU7hhqQRRE6JuQWqpwjPOU=)
2: OYsX4hAIO8zocCjaiLAgo7rhl6g.roa (hash: 8mSQCijrpWAiZ1jkdyn7YQSYQONkGQ/rnpGjGBbFCh4=)
3: bdlW9rGcnc760E8tAJjg2CUKj0w.roa (hash: IsdmnqvpxQ+ZG+0hIJARCiBh3q+bZgkvzh3TXDLVbNU=)
4: p1wmIAs2m6VXlrjI9FHbi34CCuM.roa (hash: 1NLV5dGaNdK6KyZjvAwRv2ZWHGbtxnA4M7+utkTJ9us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:d5:7d:0c:d5:9f:88:8c:a4:ce:47:00:77:79:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Validity
Not Before: Mar 26 01:01:09 2026 GMT
Not After : Mar 27 01:01:09 2026 GMT
Subject: CN=a90b86a1674c2cc7f0bd1bb31feb3ab183b87b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:12:57:84:db:ad:17:3f:c6:20:81:21:9f:bb:
b0:90:19:eb:d6:48:ff:08:b9:47:58:4b:eb:b7:08:
4d:8a:f2:55:e4:00:ca:1e:78:d3:0d:9d:15:31:d9:
33:02:0a:48:34:96:4f:74:18:d8:12:a8:eb:ab:03:
1c:c5:06:2d:73:51:d8:ef:41:1a:23:6c:74:5e:8b:
08:db:60:c3:b2:dd:5b:23:81:a8:f4:de:47:e6:b7:
ba:3b:91:a0:bc:ef:71:90:52:77:e8:09:fb:91:5f:
73:68:96:da:a5:e2:a5:8f:06:4f:c3:dd:34:79:8e:
d5:ed:64:b7:e8:6f:8b:62:21:60:dc:81:89:c3:34:
d3:ba:3a:a4:54:71:54:13:fd:9b:cb:63:2c:c5:62:
3c:95:99:c9:ca:cc:93:03:cc:eb:4d:20:60:c3:c8:
fb:66:e9:b5:03:00:ae:29:23:bd:6f:2d:ad:79:53:
a3:d5:71:09:36:af:40:f1:62:ea:37:3a:8a:7a:3a:
0d:8f:5a:89:7d:0e:bb:2d:33:dc:80:c9:68:b4:a0:
76:f3:50:7d:9c:53:f1:e0:f4:1e:f9:fc:c0:1b:f7:
5e:e7:24:58:f2:47:9d:a9:89:f8:3a:52:ff:bd:b0:
29:cc:6f:3a:33:0b:21:e2:79:92:0b:9f:7f:39:24:
24:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0B:86:A1:67:4C:2C:C7:F0:BD:1B:B3:1F:EB:3A:B1:83:B8:7B:04
X509v3 Authority Key Identifier:
keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:36:41:c2:32:ea:72:c2:8c:d5:48:8f:f9:1c:27:95:b0:59:
8b:14:28:b2:d6:8c:ce:5b:a7:e8:99:e6:58:ba:ea:01:f6:eb:
5f:35:3d:82:ea:12:46:f1:f0:ed:e8:62:c0:d5:1c:ec:21:c4:
0b:a3:5b:9e:48:9b:ba:a5:19:b2:eb:00:7f:68:4c:76:f4:3b:
bb:5a:d6:f8:46:94:ff:2d:e9:f8:92:d9:aa:4c:7e:c4:0b:a7:
7a:1b:2f:96:5f:7f:8e:02:d6:6a:6b:62:dc:80:24:89:3c:c7:
8c:7d:f0:47:5f:a8:b6:17:41:cd:55:95:84:cd:c3:a6:b3:d6:
c6:ff:a3:7b:86:17:86:0f:ff:71:ae:5e:0c:fc:55:cc:65:97:
16:a6:81:6a:5c:25:c7:48:ad:a3:5d:8b:90:cb:5c:7d:ea:23:
d8:62:52:bd:7a:c8:90:e7:90:63:84:1d:96:f6:ad:7a:6f:5f:
6b:3f:81:67:07:f7:48:ac:f6:5f:0e:6e:4d:ad:18:d2:d1:e7:
b2:ef:ae:07:59:73:76:9c:1b:38:9e:8b:2d:f7:fb:ca:0a:8d:
5c:f0:86:89:87:22:2e:06:a6:14:d7:51:5c:6f:8f:28:95:83:
b8:0b:df:ef:91:c4:6a:81:30:51:71:43:59:97:03:e6:9a:5c:
b2:f6:4a:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqNV9DNWfiIykzkcAd3mkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MGIxZTM4YzcwNGJkMDhlM2I5ZDE3ZjU5MDM2N2IxZDFm
MDNjNGEwHhcNMjYwMzI2MDEwMTA5WhcNMjYwMzI3MDEwMTA5WjAzMTEwLwYDVQQD
EyhhOTBiODZhMTY3NGMyY2M3ZjBiZDFiYjMxZmViM2FiMTgzYjg3YjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxJXhNutFz/GIIEhn7uwkBnr1kj/
CLlHWEvrtwhNivJV5ADKHnjTDZ0VMdkzAgpINJZPdBjYEqjrqwMcxQYtc1HY70Ea
I2x0XosI22DDst1bI4Go9N5H5re6O5GgvO9xkFJ36An7kV9zaJbapeKljwZPw900
eY7V7WS36G+LYiFg3IGJwzTTujqkVHFUE/2by2MsxWI8lZnJysyTA8zrTSBgw8j7
Zum1AwCuKSO9by2teVOj1XEJNq9A8WLqNzqKejoNj1qJfQ67LTPcgMlotKB281B9
nFPx4PQe+fzAG/de5yRY8kedqYn4OlL/vbApzG86Mwsh4nmSC59/OSQkNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkLhqFnTCzH8L0bsx/rOrGDuHsEMB8GA1UdIwQY
MBaAFAULHjjHBL0I47nRf1kDZ7HR8DxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zY2M5YjQtMWVmZi00OGM5LWIyZjYt
YTAxZTllNmRjYmYyLzEvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8zY2M5YjQtMWVmZi00OGM5LWIyZjYtYTAxZTllNmRjYmYy
LzEvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDZBwjLq
csKM1UiP+RwnlbBZixQostaMzlun6JnmWLrqAfbrXzU9guoSRvHw7ehiwNUc7CHE
C6NbnkibuqUZsusAf2hMdvQ7u1rW+EaU/y3p+JLZqkx+xAunehsvll9/jgLWamti
3IAkiTzHjH3wR1+othdBzVWVhM3DprPWxv+je4YXhg//ca5eDPxVzGWXFqaBalwl
x0ito12LkMtcfeoj2GJSvXrIkOeQY4Qdlvatem9faz+BZwf3SKz2Xw5uTa0Y0tHn
su+uB1lzdpwbOJ6LLff7ygqNXPCGiYciLgamFNdRXG+PKJWDuAvf75HEaoEwUXFD
WZcD5ppcsvZK+Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:15 2026 by rpki-client