Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
File: BQKGH5I8fsETK1SPeruGG6yh9AY.mft (raw, json)
Hash identifier: 8o/SV0P9B5eBmYvx0XqIlVYWFgbW2r5rGnhQoI0hSpY=
Subject key identifier: 4A:C5:79:14:2D:5C:26:3C:49:36:4D:E1:FD:3B:7A:20:CE:1C:BB:E3
Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
Certificate issuer: /CN=0502861f923c7ec1132b548f7abb861baca1f406
Certificate serial: 019A006BDDB16475534F3862171725A1602B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 07:01:00 +0000
Manifest this update: Mon 20 Oct 2025 07:01:00 +0000
Manifest next update: Tue 21 Oct 2025 07:01:00 +0000
Files and hashes: 1: 1-cuEh2EPyWBKZZW9Ux10_rTtiMs.roa (hash: 0D28OLhEHvWPWn+YHZLbb/jrZsxhbIGE8alDluVW7tA=)
2: BQKGH5I8fsETK1SPeruGG6yh9AY.crl (hash: DXSS7iyVebM+lsiy1+YwGeHLyXgEd2HUxaJ0J2dlIhY=)
3: FJdpsV6pjhMSL6IT7vB41CVTVRI.roa (hash: S25aXExUDruwqgW26JBpjwRzCwZa0LN7qVcFUwKAsy4=)
4: SHQabxNAl7yCxPIYXS8QEWqbJ8s.roa (hash: 8gBiOpFpyvnrW5MWvLhoQ1iXNHnnsflwwhdtkDHOWgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:dd:b1:64:75:53:4f:38:62:17:17:25:a1:60:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406
Validity
Not Before: Oct 20 07:01:00 2025 GMT
Not After : Oct 21 07:01:00 2025 GMT
Subject: CN=4ac579142d5c263c49364de1fd3b7a20ce1cbbe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:56:0c:60:86:3e:48:e1:24:17:31:9b:a6:
09:d1:e0:c0:71:97:de:9a:6b:55:99:2c:5f:61:6b:
70:e7:81:f0:b9:da:83:47:5d:fc:cb:e8:51:ba:58:
d0:11:a1:f5:61:fe:f6:ff:10:aa:04:3b:bb:36:ab:
d5:22:7a:99:32:06:5c:46:4f:71:7f:07:33:f0:4d:
ef:07:57:a8:20:85:b8:8a:9a:a7:98:87:e1:98:a1:
cc:56:d6:6b:61:3a:7e:0e:b4:e5:e7:51:ae:a3:21:
fd:7f:78:6e:79:91:c1:4e:b6:74:2b:ca:03:35:d4:
a6:93:ea:ab:90:6e:fc:10:9a:24:63:53:90:e6:8c:
b6:b2:02:bd:b4:8b:5d:bb:66:4b:d9:2e:66:5a:8c:
8d:81:39:73:5b:ab:1e:65:82:28:d2:3d:46:43:47:
f8:74:71:83:fd:68:58:8b:79:6f:13:75:d7:17:04:
b8:71:71:90:49:50:6b:45:fd:8e:9b:e3:4c:9b:8e:
6f:a2:a7:29:e4:51:74:ce:7d:f8:4e:9e:01:53:7d:
19:ae:6e:24:dd:cd:fb:88:f2:da:3c:19:8f:cf:98:
da:6c:b3:88:f6:86:8a:30:72:c6:cf:95:31:6d:62:
42:56:3e:8c:c3:78:65:05:62:a8:d9:86:63:d7:2e:
c8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C5:79:14:2D:5C:26:3C:49:36:4D:E1:FD:3B:7A:20:CE:1C:BB:E3
X509v3 Authority Key Identifier:
keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:35:f8:77:e6:ba:f4:e2:ba:55:d5:34:95:48:8a:f7:d6:68:
2f:d5:ce:39:6a:8a:86:ef:e9:1a:eb:dc:bd:f8:c3:ce:02:0a:
d8:38:92:0a:ed:02:e0:8d:35:fb:1b:27:9e:ff:99:10:d7:0f:
77:57:47:fe:27:28:4b:50:87:bd:6a:bb:20:8a:a5:d5:03:c1:
3e:76:f5:60:49:dd:9a:21:2f:8d:97:ec:6a:98:74:f2:7c:b3:
f1:ac:48:aa:b1:af:97:2c:1c:1e:0f:14:95:6d:51:e6:70:5b:
fc:17:4d:ce:85:af:27:da:66:5e:77:5d:53:9e:18:aa:8c:e6:
76:77:15:c9:75:f6:53:93:ef:bf:e4:a2:49:cf:c3:b1:95:0f:
8d:f9:aa:56:71:ce:7b:71:1e:0f:2d:b3:02:32:af:85:f1:f1:
15:1a:a0:e2:11:eb:fa:6c:6c:2a:56:d0:e9:a4:f0:ca:d8:45:
84:01:bc:70:1a:15:e0:76:f0:2d:ac:09:19:c0:bd:7e:e9:d9:
a9:e1:ce:dd:33:27:21:65:2e:8c:b4:d8:0c:29:08:1a:f8:b0:
99:72:7d:cd:af:a3:dd:73:73:c3:0d:a6:d0:46:f0:0d:e0:16:
db:d4:e3:97:9e:2e:84:f6:85:e0:3e:df:0e:75:80:9e:df:98:
0f:ea:48:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAa92xZHVTTzhiFxcloWArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MDI4NjFmOTIzYzdlYzExMzJiNTQ4ZjdhYmI4NjFiYWNh
MWY0MDYwHhcNMjUxMDIwMDcwMTAwWhcNMjUxMDIxMDcwMTAwWjAzMTEwLwYDVQQD
Eyg0YWM1NzkxNDJkNWMyNjNjNDkzNjRkZTFmZDNiN2EyMGNlMWNiYmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRhWDGCGPkjhJBcxm6YJ0eDAcZfe
mmtVmSxfYWtw54HwudqDR138y+hRuljQEaH1Yf72/xCqBDu7NqvVInqZMgZcRk9x
fwcz8E3vB1eoIIW4ipqnmIfhmKHMVtZrYTp+DrTl51GuoyH9f3hueZHBTrZ0K8oD
NdSmk+qrkG78EJokY1OQ5oy2sgK9tItdu2ZL2S5mWoyNgTlzW6seZYIo0j1GQ0f4
dHGD/WhYi3lvE3XXFwS4cXGQSVBrRf2Om+NMm45voqcp5FF0zn34Tp4BU30Zrm4k
3c37iPLaPBmPz5jabLOI9oaKMHLGz5UxbWJCVj6Mw3hlBWKo2YZj1y7ICwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErFeRQtXCY8STZN4f07eiDOHLvjMB8GA1UdIwQY
MBaAFAUChh+SPH7BEytUj3q7hhusofQGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlFLR0g1SThmc0VUSzFTUGVydUdHNnloOUFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hOTI3NmYtZThjMS00NWQ2LWE0MmQt
MGM2NGRlYmU5ZWM0LzEvQlFLR0g1SThmc0VUSzFTUGVydUdHNnloOUFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9hOTI3NmYtZThjMS00NWQ2LWE0MmQtMGM2NGRlYmU5ZWM0
LzEvQlFLR0g1SThmc0VUSzFTUGVydUdHNnloOUFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjX4d+a6
9OK6VdU0lUiK99ZoL9XOOWqKhu/pGuvcvfjDzgIK2DiSCu0C4I01+xsnnv+ZENcP
d1dH/icoS1CHvWq7IIql1QPBPnb1YEndmiEvjZfsaph08nyz8axIqrGvlywcHg8U
lW1R5nBb/BdNzoWvJ9pmXnddU54YqozmdncVyXX2U5Pvv+SiSc/DsZUPjfmqVnHO
e3EeDy2zAjKvhfHxFRqg4hHr+mxsKlbQ6aTwythFhAG8cBoV4HbwLawJGcC9funZ
qeHO3TMnIWUujLTYDCkIGviwmXJ9za+j3XNzww2m0EbwDeAW29Tjl54uhPaF4D7f
DnWAnt+YD+pIVQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:50 2025 by rpki-client