Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
File: BqTBjS4g22T_nbUpKzefU4t2oVE.mft (raw, json)
Hash identifier: OZJhNW7qhXL+Q6UNyGyN3FTCkSQgxwJTWJFZmBysUvQ=
Subject key identifier: 42:E4:AC:51:FA:67:DA:A3:91:60:DB:9D:09:17:C6:8A:EB:A2:99:FF
Authority key identifier: 06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
Certificate issuer: /CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Certificate serial: 019E1EA30D2C64937DA0601930555B180DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
Manifest number: 1004
Signing time: Wed 13 May 2026 00:01:02 +0000
Manifest this update: Wed 13 May 2026 00:01:02 +0000
Manifest next update: Thu 14 May 2026 00:01:02 +0000
Files and hashes: 1: BqTBjS4g22T_nbUpKzefU4t2oVE.crl (hash: w8l3T5FYR5jlGV3q+4KBUsjJiLlXzrmztjf2EErK6Ag=)
2: zv32VZMT2QpjwCNJQuKZWRRffIQ.roa (hash: kObmfO3vi0I5D4zj8YBTzKwtPE3NArat9hAGR+jsK8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:0d:2c:64:93:7d:a0:60:19:30:55:5b:18:0d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Validity
Not Before: May 13 00:01:02 2026 GMT
Not After : May 14 00:01:02 2026 GMT
Subject: CN=42e4ac51fa67daa39160db9d0917c68aeba299ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:04:4c:89:ca:da:c1:31:1f:ce:4c:da:4e:
6f:f2:eb:fe:20:21:cf:95:92:20:56:b7:da:ce:87:
74:27:b9:e8:c1:c9:a9:59:93:78:4c:57:8b:28:73:
29:b0:fb:ce:3f:90:06:4f:da:f2:90:a4:29:ea:86:
3b:5d:86:25:be:04:dd:f4:d7:94:5f:c7:d2:11:22:
e0:a0:85:d8:bf:58:72:87:7c:a1:6d:ab:97:5d:a7:
2f:78:0c:71:1a:39:79:8c:19:16:a4:c8:ab:4e:56:
79:61:7a:19:7a:19:12:da:21:9c:69:c1:da:eb:9e:
aa:38:c1:43:4a:3d:e4:7b:c7:99:2f:d0:08:a2:13:
02:3f:a3:36:59:f2:3f:13:04:03:21:e7:78:20:07:
fb:53:4e:34:9a:d6:c4:6b:b6:c8:a8:cf:eb:84:d8:
7b:46:1a:23:d8:c4:cc:23:88:e7:f5:d0:4b:b0:c7:
54:52:1a:7e:99:64:91:8e:63:8b:8c:29:62:82:cd:
51:9b:e1:09:49:c5:1e:f9:7e:65:7e:95:81:c7:b3:
19:52:37:06:a7:f3:60:50:ba:2f:de:bb:17:76:1c:
d2:65:f5:14:17:0a:27:fa:5a:f3:f1:68:6d:1f:89:
d2:06:25:06:74:a8:32:14:87:b7:2b:e7:6f:93:2f:
b9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E4:AC:51:FA:67:DA:A3:91:60:DB:9D:09:17:C6:8A:EB:A2:99:FF
X509v3 Authority Key Identifier:
keyid:06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:39:c2:fb:5a:97:ef:03:c6:c0:70:98:da:ea:b9:23:d0:26:
5d:52:48:42:be:94:2c:c6:00:f4:91:7e:7a:f4:27:43:88:30:
af:59:b3:bd:39:08:6a:5e:e6:b3:f4:da:b4:03:26:6b:d0:6d:
48:ef:ba:52:95:31:44:12:6d:c9:ad:da:ea:86:e7:98:61:d0:
38:6c:0d:da:12:4c:62:5a:9d:d7:bb:6b:b4:2b:3d:e1:26:ad:
1b:2a:32:60:48:45:60:19:ce:f7:ce:e1:ab:9f:21:26:19:a5:
fe:19:ec:d7:23:47:39:01:8b:4d:60:b6:f0:5c:55:15:82:80:
b0:c7:a4:b3:60:fd:96:0c:05:0d:42:a7:26:79:d4:a7:10:7b:
05:b8:96:1e:eb:e1:97:7f:68:67:76:e2:a4:3b:35:61:49:5e:
94:a0:3e:b8:f5:fb:3f:08:70:86:06:8a:51:3e:f2:e5:a9:4b:
90:83:95:7e:d1:bb:1d:0b:77:ac:2a:82:b1:9c:ca:84:10:4b:
fe:14:3f:2b:7d:74:54:fb:93:23:b2:ed:65:2f:36:9e:fb:0d:
8f:1f:bc:f6:73:91:fd:f1:8d:f5:76:c8:ee:35:98:ff:d5:ae:
2f:02:25:80:f0:cb:f1:da:0f:f5:4d:3c:57:d5:a0:c9:94:95:
8e:78:14:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:26:02 2026 by rpki-client