Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
File: BqTBjS4g22T_nbUpKzefU4t2oVE.mft (raw, json)
Hash identifier: 7jNr0XSPIvAwOD3ol2h41jCbwHr9xROY8G23mxJLvkU=
Subject key identifier: 4E:01:76:E3:38:CA:39:16:F0:53:9F:92:0A:1C:D6:30:9B:EB:0C:AC
Authority key identifier: 06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
Certificate issuer: /CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Certificate serial: 019D29614079BE46C282EE503F849B0478F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
Manifest number: 0F85
Signing time: Thu 26 Mar 2026 09:02:12 +0000
Manifest this update: Thu 26 Mar 2026 09:02:12 +0000
Manifest next update: Fri 27 Mar 2026 09:02:12 +0000
Files and hashes: 1: BqTBjS4g22T_nbUpKzefU4t2oVE.crl (hash: 0jdVXKXzk7xlTc9hMOyz2f59VwuQZrPXCRT0162WjFY=)
2: zv32VZMT2QpjwCNJQuKZWRRffIQ.roa (hash: kObmfO3vi0I5D4zj8YBTzKwtPE3NArat9hAGR+jsK8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:40:79:be:46:c2:82:ee:50:3f:84:9b:04:78:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Validity
Not Before: Mar 26 09:02:12 2026 GMT
Not After : Mar 27 09:02:12 2026 GMT
Subject: CN=4e0176e338ca3916f0539f920a1cd6309beb0cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b5:d6:a0:65:ea:c3:29:6f:cd:19:c2:da:b7:
15:d1:f8:fb:7f:96:dd:3b:88:a8:a8:7f:bd:d3:fd:
92:74:ae:90:29:7e:c3:ce:0c:41:39:64:45:a0:4d:
52:df:09:f3:00:c8:21:3b:d4:0e:07:66:51:e9:db:
e5:af:10:0b:80:48:dd:87:17:6c:3d:7b:7c:93:2c:
97:23:fe:2d:e7:93:60:15:60:84:d8:f4:1e:d1:13:
ff:ad:83:2d:a5:1c:1b:0b:98:58:09:e5:ae:c2:19:
12:ed:d3:14:ae:ee:dc:9a:d5:1c:07:f9:d6:11:e4:
b5:1b:23:7f:ae:7f:ba:af:aa:c8:51:70:f3:88:26:
4e:05:3c:f8:a3:c3:5b:6b:2c:0d:70:8b:46:82:db:
15:3b:06:62:31:8f:84:d5:2a:65:44:5a:11:63:b0:
c8:28:d9:a6:7e:f5:bb:ef:68:dc:41:6d:d2:88:b5:
bf:c3:d5:7c:fe:8e:9b:f3:3f:c2:b7:1f:5a:5a:ac:
91:c1:b2:b2:27:cb:d6:87:89:0a:90:93:4d:ca:49:
1d:e6:16:2b:6d:26:2e:b9:b2:e0:d4:c8:46:6e:2d:
cf:27:1c:e4:66:b9:e1:c3:27:a3:16:2c:8e:84:7e:
18:70:ce:6e:05:9d:5b:85:fd:ff:61:79:a5:41:a1:
f1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:01:76:E3:38:CA:39:16:F0:53:9F:92:0A:1C:D6:30:9B:EB:0C:AC
X509v3 Authority Key Identifier:
keyid:06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4f:5c:99:e0:b8:92:ea:31:76:ed:60:be:19:85:43:1b:78:
83:aa:67:a3:3c:e3:ab:3b:6b:0f:a9:32:53:41:67:ea:ed:1d:
bc:76:c8:62:25:99:a4:db:93:eb:75:27:05:76:1d:22:9f:1a:
c1:89:ae:25:38:6d:5c:c0:c6:0c:47:d2:23:d1:da:1a:2e:dd:
bb:ff:46:b7:77:a3:59:27:91:a8:c1:39:68:f9:9f:e5:0d:c6:
b0:43:41:19:7c:6a:e2:64:73:15:ae:b2:d6:38:1c:e8:e2:ae:
c4:00:47:90:cb:4d:ec:f1:92:d4:93:11:45:08:42:9c:f8:70:
b8:c3:09:51:7b:9d:22:8a:df:7e:94:88:81:6b:2b:d5:95:14:
38:fb:13:52:54:d9:5c:1b:3b:14:2a:67:32:bb:d4:d0:27:c3:
9e:d3:db:5f:64:11:a7:c2:50:58:be:01:15:6d:f9:53:a8:ad:
32:55:ed:16:a0:5f:4c:ae:63:a7:a8:c7:f0:c9:43:5f:ae:98:
cb:08:0b:db:80:16:23:53:55:ee:d8:3a:49:1e:c6:d1:63:ba:
ce:52:ce:a4:0b:87:99:66:76:35:0e:51:50:f4:91:6a:af:4f:
ca:2c:9b:93:6e:04:aa:ee:fe:3a:3c:df:07:c5:81:90:2f:fd:
86:f6:e9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:57:50 2026 by rpki-client