Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: KHhzzOm16I7NNscWzTn971PMLPEs4j9F3ebLa5kvw80=
Subject key identifier: D9:73:DD:55:59:0B:2F:C6:D2:17:52:F1:02:7A:C8:01:D2:3C:B2:F5
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 01A0CB2246E8D36124CFC90882C5061831F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 22:00:15 +0000
Manifest this update: Tue 22 Sep 2026 22:00:15 +0000
Manifest next update: Wed 23 Sep 2026 22:00:15 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: Iw+HYPoRaPby5ipJ3WBSj0V+qQxDVojCjb/c30Vi+y0=)
2: cnybTQdw-1JzZEmKBwChzF9nwdA.roa (hash: mUaYCEj2VPDWjtCv1k3iVXZhYm/cAKjBAxkBrbEbBps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:46:e8:d3:61:24:cf:c9:08:82:c5:06:18:31:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Sep 22 22:00:15 2026 GMT
Not After : Sep 23 22:00:15 2026 GMT
Subject: CN=d973dd55590b2fc6d21752f1027ac801d23cb2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:12:b9:71:fc:0b:18:db:79:14:42:d5:3e:
80:ee:aa:45:ef:19:f1:62:53:67:4b:1a:a1:bb:41:
7a:c7:d4:28:fc:9c:85:0a:3a:9f:61:3d:c3:67:62:
bb:e8:4f:54:5b:97:e4:e1:f0:e8:f1:7e:79:ef:1a:
e9:81:5b:23:e6:7e:43:a7:62:22:63:37:69:5a:f3:
eb:13:0d:aa:a8:00:0d:58:cc:72:0b:2b:ff:f4:31:
68:0c:e7:ba:8c:3c:62:c4:49:22:9b:bf:7e:82:d4:
0f:1d:30:25:db:dc:23:68:4d:78:6e:62:ec:cc:93:
e3:43:91:71:dd:38:41:8e:24:a9:67:09:79:4a:03:
00:57:f6:81:2d:10:ad:db:76:b7:10:76:fc:de:09:
29:7c:fb:a9:81:f7:4c:11:57:96:a1:84:e4:b5:90:
03:af:76:7d:43:9c:b5:35:dd:a7:3d:87:ba:3a:7e:
34:ac:c3:1f:23:8d:a7:a1:d7:07:1d:80:08:a9:aa:
2d:d2:71:7f:cf:f3:9f:db:79:d2:40:e2:67:e2:80:
92:15:82:25:27:8d:df:7b:07:8c:4e:67:7d:a2:39:
af:6e:e1:f2:a7:65:31:2f:f2:05:33:d0:27:9f:a1:
10:f9:90:cf:94:fb:f9:c2:9f:cf:96:86:8e:15:e2:
e2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:73:DD:55:59:0B:2F:C6:D2:17:52:F1:02:7A:C8:01:D2:3C:B2:F5
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:88:34:37:20:fa:a2:b8:f4:4a:4c:47:85:5f:27:fa:2b:58:
66:fc:73:4e:d6:36:ec:2f:6d:05:bb:b5:b2:1a:fa:72:cc:c9:
80:db:c1:3e:3b:d5:3e:af:0e:3c:ff:61:f0:8b:22:62:b3:9e:
a6:76:2d:da:65:0b:15:8b:af:2e:a3:4d:84:c8:02:84:d9:65:
89:94:5c:77:17:a0:75:2d:4f:0a:1b:9f:bc:46:c6:b6:b5:c2:
c1:11:42:fc:61:e2:e9:fe:2c:11:30:e9:13:13:48:28:19:dd:
37:cd:d2:3e:90:fb:42:1e:20:7f:a4:c0:a7:79:c3:1a:c0:1b:
d9:21:db:ce:c7:03:49:89:c5:1f:12:5b:66:aa:f3:82:b1:1e:
b0:f3:8a:53:87:0d:d9:93:87:56:a1:d4:48:1b:1c:a3:8f:a1:
d1:8e:22:0d:54:c1:59:51:84:34:3c:c1:16:48:0c:d7:4f:76:
a3:60:f3:7f:6c:16:5f:de:94:1e:f5:63:7d:ba:4e:13:e4:4e:
8e:47:c4:59:e4:18:0c:16:52:c8:3e:57:3d:2b:0a:52:e6:5b:
59:4b:44:8e:31:6c:9d:f9:c3:4c:31:22:70:0f:10:0e:f1:e2:
c5:f1:74:4e:f9:a1:82:78:95:a0:3d:85:13:c2:f1:2f:a0:90:
dc:ed:91:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:59:51 2026 by rpki-client