Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
File: BqTBjS4g22T_nbUpKzefU4t2oVE.mft (raw, json)
Hash identifier: Z5fiDH3HtXPpr6QhFawd3V2y9+2tODXTXG+SmAX9H/U=
Subject key identifier: 9F:FB:57:78:66:39:1F:AB:25:36:DA:94:23:D9:7D:CC:A3:DD:26:37
Authority key identifier: 06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
Certificate issuer: /CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Certificate serial: 019F916C582B23CC78A5F916386D3C2B3139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
Manifest number: 10C4
Signing time: Fri 24 Jul 2026 00:00:24 +0000
Manifest this update: Fri 24 Jul 2026 00:00:24 +0000
Manifest next update: Sat 25 Jul 2026 00:00:24 +0000
Files and hashes: 1: BqTBjS4g22T_nbUpKzefU4t2oVE.crl (hash: MfVzAW6xPeCbftKQLr/CUvlf4J3rke2G0rBJt8g9tAo=)
2: zv32VZMT2QpjwCNJQuKZWRRffIQ.roa (hash: kObmfO3vi0I5D4zj8YBTzKwtPE3NArat9hAGR+jsK8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:58:2b:23:cc:78:a5:f9:16:38:6d:3c:2b:31:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Validity
Not Before: Jul 24 00:00:24 2026 GMT
Not After : Jul 25 00:00:24 2026 GMT
Subject: CN=9ffb577866391fab2536da9423d97dcca3dd2637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:c5:59:0e:6c:ae:7a:20:c3:3b:80:95:31:
35:94:55:a8:c4:a0:65:24:60:83:fd:ba:d5:6a:0a:
b5:11:c3:51:e1:43:61:84:14:bb:5c:b7:32:29:de:
d4:04:fe:76:d5:d5:53:01:9d:62:28:87:51:95:f6:
33:1b:b7:ba:6e:da:bf:94:bf:5d:f1:12:56:8d:d8:
67:76:6c:e5:94:81:fd:b8:dc:ef:8d:da:92:0c:56:
10:92:8b:83:5d:36:77:02:4d:47:21:8b:0f:ac:21:
f8:8a:3c:da:47:f9:9d:9b:98:90:fb:87:1f:f4:0f:
c1:f8:09:78:81:3b:55:44:d0:8c:11:9f:b5:e0:6c:
af:ff:df:c2:bc:eb:99:59:14:4d:40:36:6a:98:1a:
84:dc:68:13:58:e0:c2:0a:c7:e1:5a:8f:a8:e2:77:
f8:5e:d6:a1:ba:1b:ee:99:26:f5:e6:b7:8f:b1:cc:
be:b5:66:16:e5:63:97:c6:72:a3:2e:cf:91:3b:14:
45:19:90:6b:6c:8b:1c:65:6c:7b:c4:81:8e:c8:56:
96:7f:13:6f:e1:92:56:50:95:6e:d1:45:74:90:6c:
e9:ef:66:47:ec:26:ad:98:a4:96:3b:35:57:9b:6d:
eb:83:1a:be:79:a2:a7:b8:04:04:c7:40:e4:18:9a:
6e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FB:57:78:66:39:1F:AB:25:36:DA:94:23:D9:7D:CC:A3:DD:26:37
X509v3 Authority Key Identifier:
keyid:06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:95:13:2f:dc:7a:25:82:4b:08:31:22:aa:46:30:86:0a:cc:
65:77:57:fd:1e:51:74:63:95:46:99:dd:6e:92:76:57:ea:c1:
f5:9e:81:53:c8:66:5e:2a:a7:8e:a1:ea:04:ae:25:63:13:01:
35:6a:95:83:ef:71:b4:34:e1:48:25:c1:7a:5b:bf:bf:19:b0:
6c:8c:3d:49:9e:30:ee:59:3e:87:0d:fc:d3:07:0a:8e:08:f3:
ec:81:92:38:58:e7:26:71:74:89:d1:c9:5a:c4:57:68:f6:31:
2d:cf:14:61:86:41:db:47:8b:bd:05:bd:fb:70:74:9e:57:25:
b4:2b:40:31:3e:2a:76:d9:3d:0e:0d:33:c0:51:27:00:2a:84:
0e:da:46:f0:91:bb:ac:51:87:5f:b8:55:35:0d:31:e3:fb:40:
5b:5a:9c:44:1b:e0:7e:0a:c9:35:ff:3d:e6:d8:19:f3:9b:20:
b3:20:2f:d1:e1:c0:aa:39:48:6f:67:bf:ad:59:1a:ee:e9:f9:
ef:fb:3f:9a:ba:fa:1a:ee:ca:b1:30:24:d7:4d:18:25:2a:08:
c6:a9:bf:c1:90:d1:60:07:ae:75:46:80:5a:08:b1:df:b0:78:
25:89:d6:4c:b6:60:ec:37:ef:74:95:49:6b:c4:6d:cf:99:83:
32:16:b7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:59:26 2026 by rpki-client