Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: 26O2zi4IDDHzZEoPzVg4O7mzottAAMHTmyzKnULaBWI=
Subject key identifier: A0:4A:F1:A0:3B:01:3F:90:AF:9E:75:B3:09:4F:1B:8B:9F:3E:9F:A8
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 019D284D44A72E418BF5F1DA8F89A144508A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 04:00:45 +0000
Manifest this update: Thu 26 Mar 2026 04:00:45 +0000
Manifest next update: Fri 27 Mar 2026 04:00:45 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: fPgfPq8Erc/whd6Ztb2wU4skyUKT5wFC7vzar60+/yA=)
2: cnybTQdw-1JzZEmKBwChzF9nwdA.roa (hash: mUaYCEj2VPDWjtCv1k3iVXZhYm/cAKjBAxkBrbEbBps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:44:a7:2e:41:8b:f5:f1:da:8f:89:a1:44:50:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Mar 26 04:00:45 2026 GMT
Not After : Mar 27 04:00:45 2026 GMT
Subject: CN=a04af1a03b013f90af9e75b3094f1b8b9f3e9fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4c:05:63:b9:03:c6:69:b1:68:b6:d4:b0:0c:
2e:d8:a0:14:95:91:ec:4e:20:05:20:74:fa:95:d7:
e7:ac:dc:a0:f0:56:76:a0:3c:38:52:da:32:43:96:
1a:fc:29:8c:a2:46:1a:6e:cd:5c:a1:a8:b8:7a:b4:
d1:46:25:97:08:bd:f3:b1:d3:b2:e2:4f:cc:1a:a4:
70:99:c7:47:ae:24:c1:ae:29:1c:51:a0:0f:b3:a8:
3c:37:ee:a9:aa:df:84:53:06:32:b4:d0:83:64:b4:
4e:fd:53:fb:6b:15:05:0d:8a:74:7f:07:49:46:c0:
1a:aa:81:c9:c3:77:41:ad:7a:20:89:de:ef:63:f1:
00:df:ca:98:3c:1f:d5:a5:74:26:3f:98:18:d0:7e:
01:66:00:55:8e:5d:83:b2:2e:f0:18:65:3a:7b:e2:
36:44:79:45:b9:b1:75:ad:19:41:d7:b3:af:f0:e1:
f6:39:51:05:a5:68:4e:bf:b8:f0:ba:27:68:01:c8:
cc:92:79:87:ca:5c:03:22:cb:d3:fa:59:67:c6:83:
fa:8b:c6:c4:2c:a7:b0:21:d8:3f:81:9a:95:8d:11:
d8:bf:2e:2e:9c:77:8f:0e:df:bd:36:59:83:63:80:
98:99:c9:25:da:6d:19:b3:5e:1f:58:43:ae:79:34:
53:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4A:F1:A0:3B:01:3F:90:AF:9E:75:B3:09:4F:1B:8B:9F:3E:9F:A8
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:78:bb:bc:29:e4:f2:76:b2:29:fb:1e:0c:ce:be:b0:1f:ca:
59:87:58:c7:d9:80:ee:83:75:ec:a9:6a:46:7e:95:b4:b1:ea:
2f:6f:02:74:83:91:2b:24:b4:26:ae:a1:fb:64:ea:d4:6f:95:
43:f6:3c:d3:43:a2:0f:88:87:52:64:bc:04:a7:bc:28:e4:cb:
15:e7:f0:47:51:c4:ae:36:d1:73:f2:ae:fe:b6:c1:2b:78:cd:
23:b3:7e:b0:be:a4:ef:7c:c7:c4:44:c9:5a:c8:ec:8a:51:5c:
72:ee:a0:49:00:6f:0d:1b:90:77:f7:07:4d:56:19:22:6d:da:
33:56:39:69:40:01:01:1f:6f:34:5f:e5:b8:62:25:16:a8:8a:
d3:22:e4:e9:2f:cc:08:62:c6:be:d8:70:72:0f:92:47:14:23:
2f:a6:69:c8:03:76:a9:58:14:57:3e:ed:57:88:e9:74:a2:9a:
ef:b2:fb:b6:2f:2f:0f:55:69:f7:f7:80:5d:69:d8:e0:3d:c8:
b9:98:77:0f:d6:3d:bf:db:45:36:b3:d6:83:ed:51:91:11:66:
07:26:59:6e:8a:bc:d7:ea:fa:35:e9:a7:c9:f6:bc:73:82:09:
aa:72:91:ac:9c:ac:1e:79:08:95:2d:7d:ff:e3:0a:aa:5e:a9:
ec:05:c1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:02:06 2026 by rpki-client