Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
File: BQKGH5I8fsETK1SPeruGG6yh9AY.mft (raw, json)
Hash identifier: PaSkDmwMw7/rpQsKTG7vQcLqkhN5U46rEeq98CBnhbQ=
Subject key identifier: 4B:26:70:37:92:CF:0B:27:DF:00:9D:84:BF:D8:6B:95:53:29:F5:CE
Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
Certificate issuer: /CN=0502861f923c7ec1132b548f7abb861baca1f406
Certificate serial: 019F9059EFAE73F062ACC6954D83B86B3187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 19:00:40 +0000
Manifest this update: Thu 23 Jul 2026 19:00:40 +0000
Manifest next update: Fri 24 Jul 2026 19:00:40 +0000
Files and hashes: 1: 4xId8u9b8q-lFzit0aeMYHf1aos.roa (hash: bIiCjOm59k2+DaEA+uzk+kXF+YggLiyq1ws6GVtubmE=)
2: 594tnBsvKIUtd354L79eWkALjbo.roa (hash: se6HFx5gFtOCN0fAvBEYpmYqysJi5f0hio8lxmXV1GI=)
3: BQKGH5I8fsETK1SPeruGG6yh9AY.crl (hash: r9G8E2vB8wuaV0XuioxR3txxdL8aY6O5WSDl3WiZew4=)
4: Ya-kXllajOG6K2U169D7kPW5oi0.roa (hash: Mi0AdJaGKYxd/0M8GSDpvWwVqIj1KoyYG1wJ5svzyI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:ef:ae:73:f0:62:ac:c6:95:4d:83:b8:6b:31:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406
Validity
Not Before: Jul 23 19:00:40 2026 GMT
Not After : Jul 24 19:00:40 2026 GMT
Subject: CN=4b26703792cf0b27df009d84bfd86b955329f5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:bd:af:91:a2:08:e2:1d:eb:13:42:59:31:
b4:1b:50:5f:7b:8b:aa:74:57:2a:2c:2d:ef:ba:4f:
5b:0a:50:64:0a:64:1b:8f:f5:06:ec:33:bd:98:27:
d2:1c:33:ae:4d:e2:28:55:62:41:de:72:d0:89:b1:
73:e3:a4:09:44:53:d7:7b:60:ba:69:b8:40:e7:f3:
10:45:47:f7:f8:54:41:8a:76:4f:c6:56:33:89:72:
cf:fe:8f:5a:96:0e:40:43:dc:12:8c:dd:57:50:83:
a6:85:eb:b4:7c:59:85:fa:70:bc:e6:43:0c:bd:2b:
c9:ff:2f:f8:a8:4b:3c:d6:dc:71:84:88:b9:b1:97:
96:10:6e:2f:74:cd:28:6f:8f:c6:87:5c:04:26:93:
2c:e8:75:fc:18:d9:52:54:6d:4a:af:b7:6c:76:6b:
6f:3f:0f:e7:9e:49:53:76:21:e8:78:9e:55:9a:8d:
93:20:5c:4f:9f:88:da:ac:91:ed:a0:a7:af:f0:22:
c9:fd:5e:ab:67:82:d8:42:b4:41:99:b9:7d:1b:b9:
68:4d:4b:48:7f:79:f7:48:83:23:7d:9d:e3:1a:b3:
55:d4:4b:b7:6a:0d:7e:de:af:b0:f1:8f:70:5c:c0:
7f:6b:26:5c:9c:9a:df:b8:d3:07:7d:ad:2f:21:3e:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:26:70:37:92:CF:0B:27:DF:00:9D:84:BF:D8:6B:95:53:29:F5:CE
X509v3 Authority Key Identifier:
keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e2:21:5a:bb:97:00:77:52:f5:06:18:bc:55:21:0f:7e:f2:
f9:2b:66:df:f4:05:59:d0:8e:7c:67:09:44:3e:ea:ca:63:17:
c8:da:c9:d2:00:8a:3c:12:fe:b4:e4:8d:bc:4b:18:fc:01:56:
ad:50:24:ad:4c:3c:a0:fd:11:26:f2:30:f7:0a:44:6f:a7:d3:
5c:9b:0b:96:69:4b:59:61:a6:4b:cc:ba:41:2a:24:c1:94:5a:
c1:c6:77:34:29:ac:29:4d:bc:b6:44:a9:df:fe:f4:a0:dd:04:
34:6f:7e:c8:9f:87:10:59:cb:9d:8e:b3:d1:4c:7e:32:34:49:
64:ff:01:2d:ff:5f:49:49:62:0c:f8:2e:f2:82:21:5c:59:f1:
d0:1e:be:d5:73:d5:e0:98:62:8a:8e:13:7f:7f:c4:77:c0:c0:
de:b3:ec:3b:cf:25:30:1f:b3:a5:a4:78:37:42:c0:51:26:14:
87:52:3f:8f:cd:ad:03:31:44:95:6f:e5:32:f8:b4:3a:f3:c3:
fe:3e:b3:1f:18:8a:e5:a0:6e:12:67:75:70:4c:5d:22:42:91:
8d:6d:d3:59:17:0f:f7:53:fa:f0:c1:e8:d7:82:3e:c9:c8:07:
b1:2a:0f:e8:0b:ef:aa:a2:45:ad:e9:ab:16:58:3b:22:2d:93:
8e:30:62:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:14 2026 by rpki-client