Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: KwIietyHszue+R0YodnfT40x2wfHGy3APS8zB/Gkp78=
Subject key identifier: CC:5B:F5:64:A8:AF:32:FF:4D:34:37:FF:F5:CE:99:4F:12:9C:A5:15
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 019E1D910ABB92CAB1716D170E91D68698F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 19:01:45 +0000
Manifest this update: Tue 12 May 2026 19:01:45 +0000
Manifest next update: Wed 13 May 2026 19:01:45 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: On83/n6Ui1GvcuBAhX/Z2jGWRw0O2hF2vRgUNuoP9QU=)
2: cnybTQdw-1JzZEmKBwChzF9nwdA.roa (hash: mUaYCEj2VPDWjtCv1k3iVXZhYm/cAKjBAxkBrbEbBps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:0a:bb:92:ca:b1:71:6d:17:0e:91:d6:86:98:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: May 12 19:01:45 2026 GMT
Not After : May 13 19:01:45 2026 GMT
Subject: CN=cc5bf564a8af32ff4d3437fff5ce994f129ca515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:11:38:57:13:7f:33:83:f9:5c:28:84:f4:57:
19:42:b2:dc:df:55:ae:36:76:e6:39:8b:fb:77:56:
05:17:86:5c:4d:d0:a5:50:3d:c4:58:8e:f3:69:68:
36:01:35:18:d6:e3:f3:4a:b4:60:e6:0c:cc:f4:62:
11:01:c6:bf:ee:78:8f:db:11:da:29:5c:b9:22:cf:
86:37:b5:c1:ee:a1:f2:9e:fa:be:1a:70:57:f7:32:
37:aa:1c:94:52:69:eb:6f:c9:ce:3d:ad:6e:78:63:
56:9f:d4:4d:75:6f:39:9c:ca:06:66:e0:1a:fc:83:
5c:87:cb:c2:7a:90:b6:e0:9c:8b:23:b3:5c:07:c6:
01:d2:2b:87:be:d7:e1:4e:cd:81:24:7e:3b:fa:fe:
c5:27:e1:6c:2d:ee:72:59:3f:03:df:9c:1f:49:25:
d1:45:dd:d3:b1:f8:ea:a3:97:b9:a0:47:aa:fb:13:
9e:ea:ff:87:52:5d:c3:43:6f:6b:a7:36:f6:d0:cf:
db:40:8f:47:11:9b:be:5a:0d:1e:bf:ff:a6:48:1c:
19:d5:1e:a2:c5:2f:c6:20:72:ad:6a:48:aa:ab:08:
9a:1f:0c:d1:6e:1d:2e:f9:05:99:5f:f6:c6:bf:ca:
61:b4:8a:34:90:cb:0d:44:1b:09:ed:69:ad:9a:bd:
ae:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5B:F5:64:A8:AF:32:FF:4D:34:37:FF:F5:CE:99:4F:12:9C:A5:15
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:06:a4:d0:8d:ce:1f:97:48:74:b3:9e:11:4c:97:e2:98:f1:
b5:06:70:c9:96:1c:b9:d6:7b:93:da:fb:5d:e3:6b:1f:4f:9a:
58:b5:16:1e:a2:3c:c9:4e:c6:94:d6:38:26:3a:13:b6:e3:ef:
aa:60:23:89:91:9d:e5:a6:7f:eb:2d:3c:cf:46:8c:12:0c:96:
02:8c:01:49:d8:65:59:c2:cd:90:81:98:4b:2d:c0:b4:75:0f:
30:9e:0b:e7:de:f5:4e:a8:55:73:49:5e:3d:87:0b:f5:82:60:
55:22:2e:fe:bb:b2:c2:8a:46:96:36:06:3f:a1:c4:01:87:21:
ab:22:05:49:bf:73:d2:5c:1f:14:12:58:3e:b3:59:f2:32:ad:
d5:06:fb:28:0e:e7:28:81:27:36:2a:1e:f6:05:7d:a9:3b:6d:
33:b5:ba:0c:0a:4a:16:4b:93:8c:48:8c:64:b1:54:72:0c:c9:
37:f9:65:16:c1:64:d1:c7:23:64:bf:32:b3:4f:48:2f:9b:a8:
a4:c0:a2:18:8d:45:4b:73:d3:e4:7c:a3:20:0e:80:9d:80:6c:
84:4a:e2:77:f4:e8:82:2b:bf:ef:19:2c:f0:0b:89:21:2c:61:
11:76:bf:38:cb:4c:a3:0f:23:6c:6a:46:5c:85:a4:46:71:65:
af:3b:14:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:14 2026 by rpki-client