Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
File: X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft (raw, json)
Hash identifier: VVxJb9fKplle+HMLMEhyHquv1RGqXfoLbK0QNYqaH5s=
Subject key identifier: 03:6B:FA:2B:9D:C1:63:F0:4D:2E:66:61:3B:63:95:6C:FF:48:67:B1
Authority key identifier: 5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39
Certificate issuer: /CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39
Certificate serial: 019D2A3BAAF7EC4847D2B39E0480083E3047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
Manifest number: 06BE
Signing time: Thu 26 Mar 2026 13:00:46 +0000
Manifest this update: Thu 26 Mar 2026 13:00:46 +0000
Manifest next update: Fri 27 Mar 2026 13:00:46 +0000
Files and hashes: 1: BpF57bVVwTA43ZXOpKIcTo0yCy0.roa (hash: pjFV8qfYifG/BRFE6yEd3HYMs5X+Dr5JAfSfN8z6EsA=)
2: X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl (hash: RbMQwZA0HFtRNtVmp5UL+11uFVkgD1fZ7XrbGufgdJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:aa:f7:ec:48:47:d2:b3:9e:04:80:08:3e:30:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39
Validity
Not Before: Mar 26 13:00:46 2026 GMT
Not After : Mar 27 13:00:46 2026 GMT
Subject: CN=036bfa2b9dc163f04d2e66613b63956cff4867b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:61:d2:d5:b7:f3:1b:41:4d:5b:67:ee:7b:
e3:1f:f0:d3:77:c1:e7:ae:37:c2:84:bb:43:44:6d:
90:8a:76:14:f8:a5:d8:59:72:24:d3:08:3e:59:6b:
6c:1c:09:ef:7f:a7:33:63:3d:93:6d:17:26:30:13:
bb:dc:1a:27:ac:f7:17:06:d5:27:0e:1e:df:9c:d0:
14:06:ac:c7:bb:d2:cf:3a:b3:bd:3f:f2:d7:3d:ec:
3f:f8:13:79:35:e3:bb:12:f5:3e:05:2e:49:17:be:
70:51:88:b0:11:12:df:b6:a9:57:ef:8c:3a:99:57:
65:58:e5:2a:9a:ea:5f:ca:c3:d8:2d:a5:7f:18:d2:
14:3e:08:2f:20:52:fc:ef:da:9e:1f:42:1c:ef:c1:
61:93:63:c5:d8:4c:6b:84:b6:f0:fc:b4:d7:c5:eb:
d6:92:51:ac:4a:d2:35:53:c2:96:5d:05:10:f0:c6:
3b:29:43:ca:3b:56:bf:6c:7f:75:c9:5e:38:03:5a:
2b:dd:06:c0:8d:1a:a6:2f:3f:f1:5c:40:ac:74:e7:
fa:79:42:3e:95:3e:5a:96:a2:e3:b8:fd:c2:a2:4c:
d6:f6:40:cb:e3:9e:49:35:db:c5:84:25:e8:c9:60:
c6:be:41:bf:39:27:03:fa:a3:60:fd:3b:47:56:bb:
7e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6B:FA:2B:9D:C1:63:F0:4D:2E:66:61:3B:63:95:6C:FF:48:67:B1
X509v3 Authority Key Identifier:
keyid:5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ec:d5:36:a0:20:67:54:5b:0f:04:11:0b:d3:61:b9:a6:82:
e0:99:97:be:85:1d:d3:2c:b8:49:5f:a0:6b:19:d0:c2:07:36:
22:67:c9:c2:72:54:da:e3:8e:47:24:2f:32:34:2a:21:72:42:
8b:6e:01:e0:a9:2e:ff:fa:63:06:83:0c:f7:59:b0:2f:99:67:
d0:ac:12:72:54:b4:e0:ca:e9:17:6b:8c:63:36:0c:9b:f8:d8:
fd:0b:17:75:e4:2b:3c:02:5b:19:f8:03:c0:ee:63:fd:6f:8d:
c9:c1:ab:cb:55:db:1b:9d:86:b0:ed:d9:ba:40:ae:f0:3a:4f:
98:65:fd:08:2d:d9:05:ee:6f:26:6c:cc:30:fd:27:72:2a:2d:
c7:b0:d9:45:92:4f:f3:ae:eb:ba:40:3c:7c:38:dd:8e:00:2c:
e5:3c:e6:75:cf:77:f4:46:0a:d2:fc:e8:da:c7:e5:1a:02:87:
eb:91:b5:5a:93:c7:43:46:e5:27:e6:e5:2b:7a:0b:75:17:85:
76:d2:08:83:0e:89:8f:19:70:53:22:a0:1b:cc:e4:88:bf:88:
0e:6a:f2:6c:af:7f:32:76:91:52:ae:d5:33:77:8a:cf:59:59:
26:cd:95:8f:af:96:59:18:dd:56:6e:2a:4e:5c:9c:ae:e4:68:
41:cd:e8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:35:23 2026 by rpki-client