Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
File: BqTBjS4g22T_nbUpKzefU4t2oVE.mft (raw, json)
Hash identifier: bqXs9KPZJi6xEDQlGL7xL29AjZTIvIB83D2BgdPJRYc=
Subject key identifier: 7C:A8:9D:BF:C2:F8:8C:1B:0D:4D:43:4C:57:32:D9:D3:96:84:10:30
Authority key identifier: 06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
Certificate issuer: /CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Certificate serial: 01A0DBA9391A92C51BF431B22633733FA5BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
Manifest number: 116F
Signing time: Sat 26 Sep 2026 03:01:35 +0000
Manifest this update: Sat 26 Sep 2026 03:01:35 +0000
Manifest next update: Sun 27 Sep 2026 03:01:35 +0000
Files and hashes: 1: BqTBjS4g22T_nbUpKzefU4t2oVE.crl (hash: PhGs7S67WeCpQOhGpH6Sxd9h8ImnXsRtq9jvR2zCqCs=)
2: zv32VZMT2QpjwCNJQuKZWRRffIQ.roa (hash: kObmfO3vi0I5D4zj8YBTzKwtPE3NArat9hAGR+jsK8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:39:1a:92:c5:1b:f4:31:b2:26:33:73:3f:a5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Validity
Not Before: Sep 26 03:01:35 2026 GMT
Not After : Sep 27 03:01:35 2026 GMT
Subject: CN=7ca89dbfc2f88c1b0d4d434c5732d9d396841030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2c:3d:26:b9:b9:ae:5e:07:9c:18:53:34:af:
61:3a:a5:5d:39:97:c9:f7:f4:0f:8b:be:39:57:2c:
1f:86:38:f5:9f:fd:44:08:fe:81:40:8c:30:84:14:
a4:88:0a:a4:b0:21:33:52:1b:6e:2a:e0:56:0c:eb:
be:53:51:aa:7d:52:74:5f:02:37:c2:09:09:96:99:
d3:50:d0:f8:28:f5:8c:1f:62:44:f1:c1:27:cb:99:
ff:3a:b6:c2:b8:0f:da:b0:13:3d:81:ce:16:32:97:
05:df:2a:c2:dd:83:53:ae:ab:b1:f9:44:9f:ad:e4:
02:0f:98:d0:8a:31:29:3c:4d:2a:a1:fc:21:b5:ee:
0d:20:c9:9a:26:b9:60:44:c7:42:ef:b8:09:1e:46:
23:d2:6d:7c:5c:6f:c5:1b:56:e2:2e:47:cb:bc:26:
be:62:f0:78:f4:b0:fe:82:64:bc:aa:cd:e8:ba:f7:
7e:14:cb:60:9c:1a:43:e7:74:55:09:ba:04:25:30:
20:4c:3f:59:65:ca:c2:a3:70:e1:bd:36:97:c7:9c:
e9:8d:55:70:d3:f0:86:75:7a:11:a1:10:49:08:5a:
13:50:10:b9:2b:08:93:d4:2e:8c:34:e8:44:31:34:
7b:42:af:3b:9a:d1:61:7b:97:57:cd:72:42:75:37:
c1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A8:9D:BF:C2:F8:8C:1B:0D:4D:43:4C:57:32:D9:D3:96:84:10:30
X509v3 Authority Key Identifier:
keyid:06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:65:e2:3c:83:24:1a:b4:67:10:ed:09:bd:ee:e6:04:75:54:
b9:09:51:f8:17:32:8e:2f:1e:56:50:64:0e:e1:00:a1:e0:f2:
ee:af:be:ad:9f:37:e5:62:48:61:84:bd:39:18:e6:c2:40:88:
2a:13:48:74:de:25:75:4e:ba:1e:9b:b4:f1:db:49:eb:9c:90:
2b:11:02:ac:e2:e0:27:66:d6:7a:b4:b7:16:89:94:4c:45:3c:
02:ab:38:4c:33:58:b0:4c:32:39:24:a7:45:89:b1:d9:f8:81:
82:de:20:56:79:af:1f:c1:60:72:9a:d7:8f:f6:1b:58:94:57:
8b:98:0b:07:0a:bb:5e:57:dc:1f:11:b3:44:22:e2:e4:d3:ee:
d4:c3:6b:20:2e:bc:f7:c7:d3:98:0f:0b:6d:c4:3b:54:3c:35:
3a:3a:a4:c1:c8:c4:b3:91:35:a1:4a:e2:1c:74:ac:ad:8b:3e:
0c:7c:fa:b5:5a:a4:4a:d8:01:2b:a3:64:ac:25:ac:da:35:53:
c3:e8:d9:c4:fa:0a:55:d5:f8:37:60:df:38:a1:1c:da:6b:88:
8a:ce:a3:a2:19:7d:00:03:ce:77:b3:f9:08:48:11:da:18:12:
2b:57:bb:42:fe:d5:89:96:50:ff:e8:d6:02:a5:ad:49:6e:c2:
dd:98:b7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:12:40 2026 by rpki-client