Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
File: BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json)
Hash identifier: rv92ivgxhGyxUXQzM7N9hCXAnyUOmXjV9KSBABUK5Sg=
Subject key identifier: 56:86:BE:4E:3A:6A:0D:5F:5F:6A:66:27:37:4B:9C:69:0A:2F:1B:1A
Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Certificate serial: 019E1C469917ED45EFC0C5C0D15CE03A4F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 13:00:49 +0000
Manifest this update: Tue 12 May 2026 13:00:49 +0000
Manifest next update: Wed 13 May 2026 13:00:49 +0000
Files and hashes: 1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: 2KU/WkeoNifNopwm7J71V1SufXocQi244GaHnA2Nj0I=)
2: G2r9KsUTtbxHKB5JKNC2RVQtxUM.roa (hash: tpJ2/AVYhiDqHmd6oabX9AFZV9PFSJLtrHg1I6lP9Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:99:17:ed:45:ef:c0:c5:c0:d1:5c:e0:3a:4f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Validity
Not Before: May 12 13:00:49 2026 GMT
Not After : May 13 13:00:49 2026 GMT
Subject: CN=5686be4e3a6a0d5f5f6a6627374b9c690a2f1b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:bc:05:b9:d7:0b:2d:fd:03:29:3f:15:23:
83:ba:ff:27:c3:96:ec:7c:99:db:37:21:33:67:17:
d4:81:ba:79:1d:d9:98:67:74:5c:f9:a5:4d:1e:61:
64:3e:38:af:3b:67:4b:41:ef:4d:2c:e9:d8:9b:c6:
08:dd:ad:46:a2:ac:d9:a2:e9:2e:17:6a:70:39:d5:
b7:c4:b6:25:ec:29:fb:f5:97:07:bf:6f:d9:23:3a:
d8:a2:be:07:78:4f:6f:70:14:26:9f:4c:03:ad:24:
94:66:a6:16:6a:c2:be:84:dc:62:57:84:26:15:3c:
5a:ac:9d:e7:07:12:35:8d:82:dc:e0:56:13:8d:85:
e1:9c:c6:94:16:7c:10:e1:f0:a3:7b:28:cf:79:c8:
d7:f2:9a:22:af:2f:53:64:01:de:9e:61:7b:ab:8d:
0d:f5:8d:57:d2:93:b3:3b:0b:0a:8e:7b:77:57:ba:
d9:63:40:d5:40:17:4f:b5:48:af:9f:1b:6d:08:da:
02:97:a8:5e:c2:68:c4:00:65:62:19:f9:a9:87:be:
20:fd:ab:e3:b4:d1:32:f8:73:83:c6:a1:ec:bf:1f:
1d:27:7a:e7:3f:85:d6:34:b3:5d:79:45:e2:ed:d7:
43:42:4f:a6:a8:74:6c:9a:64:54:e9:6f:6c:8a:05:
bd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:86:BE:4E:3A:6A:0D:5F:5F:6A:66:27:37:4B:9C:69:0A:2F:1B:1A
X509v3 Authority Key Identifier:
keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bd:0a:9e:dd:85:a1:fb:be:72:4c:46:6c:fa:9c:7d:17:72:
ba:6a:c3:88:44:5f:03:2f:a0:fc:3d:81:a3:09:b4:97:95:e0:
5e:96:9c:1d:84:e7:31:e2:c9:e0:68:32:72:b5:20:71:df:d2:
f4:cc:2e:83:8c:96:40:37:07:d2:ce:77:71:01:24:0a:98:60:
20:d7:cd:7d:02:71:e8:6d:ab:a6:0c:7b:2f:47:93:a4:90:1e:
b6:20:d8:40:8f:e7:56:9b:a0:fe:32:a6:8e:fe:ed:c3:aa:7f:
8d:1d:6a:af:e9:ca:7c:ee:4f:e8:96:ed:c6:fe:c5:bc:5f:c5:
6a:2b:54:48:bc:ec:96:6e:f6:31:01:8f:6a:40:ba:d5:d0:fd:
52:31:a5:16:14:7e:24:e3:bd:0d:d1:45:12:61:21:ec:01:8f:
cb:e0:41:25:98:45:e3:bd:ed:47:c3:9e:05:41:9b:19:e2:7d:
ba:a8:7e:8c:13:a6:e0:cc:da:18:e7:24:fa:bc:58:01:81:4b:
6b:fa:c7:e5:aa:58:c2:c4:41:35:a5:b9:79:b4:a4:10:c1:0d:
d7:7d:33:2d:29:b1:07:c4:5c:db:66:2b:0f:b8:d5:60:5a:23:
07:d4:f8:8f:5a:cd:c5:43:81:19:19:25:f7:d3:c3:b5:23:2e:
c2:37:2c:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRpkX7UXvwMXA0VzgOk9/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MjQwNjZmODY2Y2YzNmU5Y2JhOWU5YmU2ZjkwMjY0ZGEz
NzJmM2UwHhcNMjYwNTEyMTMwMDQ5WhcNMjYwNTEzMTMwMDQ5WjAzMTEwLwYDVQQD
Eyg1Njg2YmU0ZTNhNmEwZDVmNWY2YTY2MjczNzRiOWM2OTBhMmYxYjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm28BbnXCy39Ayk/FSODuv8nw5bs
fJnbNyEzZxfUgbp5HdmYZ3Rc+aVNHmFkPjivO2dLQe9NLOnYm8YI3a1GoqzZouku
F2pwOdW3xLYl7Cn79ZcHv2/ZIzrYor4HeE9vcBQmn0wDrSSUZqYWasK+hNxiV4Qm
FTxarJ3nBxI1jYLc4FYTjYXhnMaUFnwQ4fCjeyjPecjX8poiry9TZAHenmF7q40N
9Y1X0pOzOwsKjnt3V7rZY0DVQBdPtUivnxttCNoCl6hewmjEAGViGfmph74g/avj
tNEy+HODxqHsvx8dJ3rnP4XWNLNdeUXi7ddDQk+mqHRsmmRU6W9sigW9lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaGvk46ag1fX2pmJzdLnGkKLxsaMB8GA1UdIwQY
MBaAFAUkBm+GbPNunLqem+b5AmTaNy8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUt
ODA0YzQ2NzkwOTNmLzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUtODA0YzQ2NzkwOTNm
LzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFL0Knt2F
ofu+ckxGbPqcfRdyumrDiERfAy+g/D2Bowm0l5XgXpacHYTnMeLJ4GgycrUgcd/S
9Mwug4yWQDcH0s53cQEkCphgINfNfQJx6G2rpgx7L0eTpJAetiDYQI/nVpug/jKm
jv7tw6p/jR1qr+nKfO5P6Jbtxv7FvF/FaitUSLzslm72MQGPakC61dD9UjGlFhR+
JOO9DdFFEmEh7AGPy+BBJZhF473tR8OeBUGbGeJ9uqh+jBOm4MzaGOck+rxYAYFL
a/rH5apYwsRBNaW5ebSkEMEN130zLSmxB8Rc22YrD7jVYFojB9T4j1rNxUOBGRkl
99PDtSMuwjcsrw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:55:23 2026 by rpki-client