Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
File: BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft (raw, json)
Hash identifier: 8PkvHyH3mZrvVQpJ4zThJgKOZ4kn5CwkANbCZHWBEVU=
Subject key identifier: 23:06:90:58:80:2E:E4:BD:5C:D9:0F:4F:7A:73:E4:7C:4A:06:DC:67
Authority key identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
Certificate issuer: /CN=06a757442e47f82608bef423dac344c25358dbf9
Certificate serial: 019D2929ACA0AE399EB828865E06F6C2D866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
Manifest number: 0DE1
Signing time: Thu 26 Mar 2026 08:01:30 +0000
Manifest this update: Thu 26 Mar 2026 08:01:30 +0000
Manifest next update: Fri 27 Mar 2026 08:01:30 +0000
Files and hashes: 1: BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl (hash: JsWIbb3cOU3x04scuyNuwuO9SQt7D9scPrj6KUTH9WA=)
2: qPxd8qMxhd6Yq15uwp5rXHAxZ2E.roa (hash: 7ZX3c0L8iUXI21GiIPtHoJrfkVa81NDxH/D4ulRW6l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:ac:a0:ae:39:9e:b8:28:86:5e:06:f6:c2:d8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a757442e47f82608bef423dac344c25358dbf9
Validity
Not Before: Mar 26 08:01:30 2026 GMT
Not After : Mar 27 08:01:30 2026 GMT
Subject: CN=23069058802ee4bd5cd90f4f7a73e47c4a06dc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b1:ca:eb:27:ff:f6:68:9e:e9:b0:c3:fd:c6:
85:4b:5a:f3:7f:6f:11:9d:10:99:fd:16:dc:4d:0d:
77:cd:c8:45:43:b8:f2:b9:82:7e:6f:43:e9:10:8a:
ea:a4:f3:ea:c1:31:13:05:cc:89:a9:cf:49:5b:d3:
7b:50:10:af:90:d7:0a:8c:b4:6d:c8:8c:2b:d0:01:
91:56:be:16:3f:eb:73:c8:8f:da:c0:9c:95:f5:49:
d6:34:7f:60:d2:35:d2:52:41:1c:e5:ab:35:0e:48:
c0:7d:2d:4a:25:f2:43:ca:59:14:97:e1:23:e3:3a:
35:9d:be:1d:88:d8:cb:3d:fe:7e:5d:44:35:41:69:
16:b6:b2:a7:88:14:2a:b6:1e:2f:72:1b:d1:bc:ea:
d6:90:68:1e:92:ad:c4:1b:25:e0:53:93:ef:d3:2f:
e7:21:84:c7:5a:a3:bb:15:7e:d5:ce:2c:87:fd:3d:
2d:a2:bc:e4:ba:0f:d8:ec:ed:1e:6e:f4:28:9f:82:
5d:df:2a:85:25:69:14:9c:08:df:64:09:10:8d:d6:
4c:35:62:84:f3:f7:f0:63:d3:ce:f3:a6:b2:8b:f5:
d5:ad:fa:39:ed:cf:4e:58:27:54:07:2b:6a:4c:93:
3e:9a:8b:e8:c7:54:bf:60:57:01:c6:92:de:16:9a:
e9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:06:90:58:80:2E:E4:BD:5C:D9:0F:4F:7A:73:E4:7C:4A:06:DC:67
X509v3 Authority Key Identifier:
keyid:06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:46:92:66:3e:41:94:ec:e7:f6:89:f6:0d:ca:90:14:80:b8:
38:d2:b4:39:f1:8a:09:3f:25:35:f5:76:f7:54:5e:f5:90:c8:
6b:46:a1:2b:9a:76:e3:77:38:95:7c:a5:17:b6:de:af:58:36:
20:ef:6b:ad:d3:69:cd:0d:bd:0a:62:04:8f:12:08:a9:f5:42:
e3:e7:94:83:91:f1:44:5d:46:15:b8:57:49:21:bc:fb:7d:4a:
ef:51:86:4e:e1:db:2e:ea:5d:61:8d:70:c9:d4:8c:fe:15:c7:
d6:ef:bf:21:6c:d2:a9:18:83:4b:25:68:eb:92:0c:02:95:0f:
99:0f:67:26:0d:be:90:88:21:f0:20:46:5b:dc:64:fa:90:0d:
31:cb:da:9d:6f:48:ce:63:78:88:2d:8e:cb:41:18:db:fd:82:
48:78:83:23:49:8e:ff:6a:51:31:2a:da:d0:cc:54:87:f3:c8:
5b:a8:6b:54:20:4a:0e:c1:f1:4c:f3:48:85:c0:08:9c:3d:18:
d4:19:0d:95:5f:56:55:5f:9e:2d:9b:ec:7f:40:39:fa:96:3d:
1f:9f:81:d9:92:a6:55:56:be:4e:6b:59:0a:24:a4:5e:27:90:
58:70:29:b1:ba:52:64:9a:ac:7f:80:3a:3c:93:41:fc:f2:3f:
c9:ad:48:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:27 2026 by rpki-client