Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
File: BQKGH5I8fsETK1SPeruGG6yh9AY.mft (raw, json)
Hash identifier: AcuprYdPA0Q/n+vBVf4a74jS7pU/ctIJsYB2TGvyDGA=
Subject key identifier: D9:C0:35:29:A4:F4:FC:39:72:FF:81:B6:A3:BA:39:D6:F1:61:26:4E
Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
Certificate issuer: /CN=0502861f923c7ec1132b548f7abb861baca1f406
Certificate serial: 01A0D2DDD9B09C896D367FE38315E01249B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 10:02:29 +0000
Manifest this update: Thu 24 Sep 2026 10:02:29 +0000
Manifest next update: Fri 25 Sep 2026 10:02:29 +0000
Files and hashes: 1: 4xId8u9b8q-lFzit0aeMYHf1aos.roa (hash: bIiCjOm59k2+DaEA+uzk+kXF+YggLiyq1ws6GVtubmE=)
2: 594tnBsvKIUtd354L79eWkALjbo.roa (hash: se6HFx5gFtOCN0fAvBEYpmYqysJi5f0hio8lxmXV1GI=)
3: BQKGH5I8fsETK1SPeruGG6yh9AY.crl (hash: cSy518uZhwXI9JtoTzgkW5OBkRyeC6L42C9RGzdGiGk=)
4: Ya-kXllajOG6K2U169D7kPW5oi0.roa (hash: Mi0AdJaGKYxd/0M8GSDpvWwVqIj1KoyYG1wJ5svzyI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:dd:d9:b0:9c:89:6d:36:7f:e3:83:15:e0:12:49:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406
Validity
Not Before: Sep 24 10:02:29 2026 GMT
Not After : Sep 25 10:02:29 2026 GMT
Subject: CN=d9c03529a4f4fc3972ff81b6a3ba39d6f161264e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:4f:6b:66:bb:b0:fc:2c:1c:7c:1b:d0:84:
f8:b0:dc:c8:f8:e8:3e:df:39:f9:5d:24:d1:fe:bc:
1d:dd:6f:a6:27:56:eb:a3:6a:45:42:44:ef:8e:6f:
63:55:b0:6b:82:84:02:d9:7e:fd:ad:80:a5:e8:1e:
b2:99:0c:55:1e:1a:ee:9f:a3:71:f4:12:9d:b6:38:
0b:25:10:dc:8f:a4:34:fb:34:ac:c9:9d:c3:49:bb:
9a:bf:8d:3d:29:06:e0:18:23:08:82:24:af:ce:d2:
7d:33:eb:15:aa:b5:9f:27:6d:65:2f:1c:1f:cf:b9:
97:dd:65:1f:3b:0c:4e:98:bb:56:f7:b8:0a:ab:ec:
9e:d9:8a:27:43:d2:51:c3:c2:bf:80:03:41:59:98:
80:94:e6:74:17:11:33:a1:99:ac:c2:80:be:91:9a:
30:53:b6:bc:cc:2e:1a:e7:4f:61:f8:52:68:9a:4e:
48:16:ec:23:29:56:a5:4a:48:ec:04:94:e8:8a:d1:
46:7d:54:30:65:ce:5f:b0:66:6b:e3:0a:d4:0d:66:
48:8a:99:23:4e:c8:dc:31:36:c2:64:8e:d4:22:9c:
09:05:9c:8d:1c:6a:a4:c5:1c:e1:f5:62:ec:9c:1c:
15:7b:f8:c0:8c:6d:77:7f:4e:85:da:57:cc:a8:b1:
b2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C0:35:29:A4:F4:FC:39:72:FF:81:B6:A3:BA:39:D6:F1:61:26:4E
X509v3 Authority Key Identifier:
keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:99:07:dd:a8:75:ca:5e:5e:e3:04:1a:1d:ca:24:8a:89:23:
c3:95:54:51:52:2f:37:4a:be:ee:28:e1:59:11:da:71:3e:c4:
46:e0:c2:9d:a7:72:89:c4:d5:7d:69:c5:fb:04:ca:29:42:9f:
c0:5d:a5:70:78:12:bd:9b:51:7f:57:7f:38:b2:8f:c5:4c:97:
5b:49:31:7b:48:70:e4:c3:ef:9d:76:49:4f:f0:a8:44:1a:b3:
7b:3a:9d:87:b6:72:8c:46:77:f5:dc:e0:b1:ac:38:16:0b:e5:
b0:f2:2b:0c:5a:cd:db:41:fd:57:25:56:80:2c:46:a2:84:7c:
2e:24:54:93:74:74:f1:17:fd:1d:18:e0:a2:ca:4f:e7:9b:60:
c2:79:58:7b:fc:a3:25:e4:7c:b6:c2:7e:92:ac:50:5d:a2:e8:
c3:3e:e5:ba:71:52:8e:85:cd:3b:42:be:c0:a3:b1:a4:2e:63:
41:c5:95:2d:d1:3d:29:9f:df:bc:13:99:53:d2:1e:d9:11:f4:
65:4c:88:f8:74:ac:b1:b8:42:bb:a6:ab:1e:7f:a5:80:0d:60:
c8:d3:90:03:0c:1c:30:50:b4:9f:ea:04:13:fa:00:07:9a:25:
00:cc:00:51:1f:42:e3:3e:82:06:0a:23:23:72:7b:d2:21:6b:
58:00:9c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:19:58 2026 by rpki-client