Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: GrEe2DyP43DLMqFc7F33S0WYjmc9S0H/tTYU/JXiWE0=
Subject key identifier: 39:7A:84:5C:B9:69:21:37:FA:B4:68:F3:7B:31:F4:FB:FF:4B:53:1F
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 019F9059F61C8D7E13BC25400BF2FB0DDE31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 19:00:42 +0000
Manifest this update: Thu 23 Jul 2026 19:00:42 +0000
Manifest next update: Fri 24 Jul 2026 19:00:42 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: CR7ziCDXb7iAQvMhSppRiYPpC+IvY4g/9xiloYg60tw=)
2: cnybTQdw-1JzZEmKBwChzF9nwdA.roa (hash: mUaYCEj2VPDWjtCv1k3iVXZhYm/cAKjBAxkBrbEbBps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:f6:1c:8d:7e:13:bc:25:40:0b:f2:fb:0d:de:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Jul 23 19:00:42 2026 GMT
Not After : Jul 24 19:00:42 2026 GMT
Subject: CN=397a845cb9692137fab468f37b31f4fbff4b531f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7e:c9:5e:7c:62:0f:c1:40:29:78:78:d3:f4:
f3:35:26:3f:77:a3:82:49:ea:ba:ad:8b:5a:61:a5:
76:52:a8:74:73:49:a9:c7:fa:07:2f:5c:18:24:68:
3a:5a:ca:a6:94:3e:69:5c:35:89:8b:b6:b8:75:9a:
57:3b:bb:0e:51:de:aa:ba:67:3c:75:4a:84:a2:32:
a7:a8:28:cd:71:05:a3:ae:b5:fe:26:0a:70:6e:4b:
86:00:34:8c:57:96:60:ca:db:ff:0a:ea:e1:7a:29:
98:50:e6:f6:98:f6:c6:a2:60:1d:b0:3e:93:59:dd:
41:c4:c0:98:68:d9:6f:7c:10:95:46:5a:90:f8:e5:
ab:54:b7:5b:17:fc:9a:cb:cf:2d:98:63:ea:94:c7:
f0:7b:b1:d5:98:8a:fb:db:6b:48:47:fb:93:e9:09:
d4:97:69:01:b7:5d:f5:ce:ee:df:77:07:db:9d:34:
d6:66:25:de:51:bd:8d:e7:cf:ca:5f:2c:16:7d:24:
63:98:f8:52:b9:ea:c9:8b:5b:09:34:27:e2:7a:14:
2e:04:1d:30:f4:59:19:cc:83:6e:8a:28:2d:d3:4a:
c3:05:9d:81:69:dc:13:f2:c0:46:85:a3:07:c2:bf:
33:d8:0e:a4:5f:c0:dc:55:be:ef:c5:29:4f:96:78:
15:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7A:84:5C:B9:69:21:37:FA:B4:68:F3:7B:31:F4:FB:FF:4B:53:1F
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:11:15:ed:56:84:cb:df:42:ae:07:3b:20:31:9e:d3:7d:0a:
1d:75:3e:32:11:e5:f0:46:50:ba:54:3c:db:14:db:3e:93:c0:
2b:b7:6e:70:06:10:33:f7:ff:ea:64:e9:5b:a0:2a:e1:6a:5f:
e8:03:0f:3f:a6:e4:98:f8:57:df:5d:27:22:3a:2d:9d:52:52:
af:b9:99:62:83:e2:6a:ae:18:c2:00:8c:c0:07:06:2a:6a:1d:
1a:bd:2a:b1:17:9d:d7:0f:81:2c:e4:8a:21:21:d4:f0:04:12:
d8:18:0f:0e:60:05:58:6c:6e:fa:2e:07:4b:b6:4e:53:23:13:
dc:ce:8b:35:b7:88:dc:a0:47:7c:2c:4b:dd:20:45:e8:f8:b7:
6a:2b:a2:3d:42:df:e2:c6:37:bb:d0:43:0d:87:60:4c:0b:ce:
61:dc:6e:10:fc:57:70:e5:cd:d6:a4:a1:fb:d2:f1:97:53:bc:
d4:d5:f4:52:9e:11:60:c5:00:72:8d:f8:51:07:36:a0:26:ce:
9c:46:a4:29:ee:0e:d0:2b:1c:6c:a2:84:40:86:0c:d6:d0:97:
d3:3e:07:58:8a:5e:98:95:9e:ec:36:15:79:5c:2f:e9:40:ae:
97:ec:57:44:04:23:23:8f:a4:90:a6:21:37:a9:d4:ab:b4:8b:
f4:54:38:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:04 2026 by rpki-client