Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
File: BQKGH5I8fsETK1SPeruGG6yh9AY.mft (raw, json)
Hash identifier: QW1zzFzu/1j+sl2xB7B6EVdBRiVvDCeeWJEvbL1rNAM=
Subject key identifier: B2:38:38:75:49:57:4F:E7:BD:CE:B0:C3:28:80:4F:21:F6:D5:17:BA
Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
Certificate issuer: /CN=0502861f923c7ec1132b548f7abb861baca1f406
Certificate serial: 019E1D904C89BC455A3D85D371EFF4DE1349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 19:00:56 +0000
Manifest this update: Tue 12 May 2026 19:00:56 +0000
Manifest next update: Wed 13 May 2026 19:00:56 +0000
Files and hashes: 1: 4xId8u9b8q-lFzit0aeMYHf1aos.roa (hash: bIiCjOm59k2+DaEA+uzk+kXF+YggLiyq1ws6GVtubmE=)
2: 594tnBsvKIUtd354L79eWkALjbo.roa (hash: se6HFx5gFtOCN0fAvBEYpmYqysJi5f0hio8lxmXV1GI=)
3: BQKGH5I8fsETK1SPeruGG6yh9AY.crl (hash: Gu6Mrglxop5apaoIi9vp2rKYLX2+Am1LYoFuafoW8RE=)
4: Ya-kXllajOG6K2U169D7kPW5oi0.roa (hash: Mi0AdJaGKYxd/0M8GSDpvWwVqIj1KoyYG1wJ5svzyI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:4c:89:bc:45:5a:3d:85:d3:71:ef:f4:de:13:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406
Validity
Not Before: May 12 19:00:56 2026 GMT
Not After : May 13 19:00:56 2026 GMT
Subject: CN=b238387549574fe7bdceb0c328804f21f6d517ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:04:d4:ad:10:21:0f:32:9e:f5:53:93:05:
b0:bb:ef:bf:4f:83:a7:b4:6d:13:4b:4d:29:aa:48:
e1:7a:43:dd:ea:6f:b0:90:73:8a:f3:11:c7:c5:72:
54:e7:e1:6b:d3:93:ae:1d:78:64:7c:ea:0c:20:af:
f5:94:2b:ae:b1:bb:5e:d9:a7:e6:3c:3e:2d:fb:b0:
a8:7e:6e:84:47:43:0b:0a:ed:30:36:06:41:04:b5:
b5:38:bb:fd:8f:9d:ef:7f:83:26:e2:23:a0:a2:98:
ef:24:46:84:57:bb:ac:23:b7:17:86:71:72:28:fc:
82:2c:1c:39:75:a1:90:a8:97:6a:15:42:97:47:0e:
71:45:49:9d:9e:f7:f1:b6:4c:db:09:33:da:db:6d:
b4:a8:68:56:4b:a3:48:2e:81:7f:2a:f9:70:86:77:
ef:43:b2:34:ca:e3:ad:e8:bf:92:c9:5c:09:59:27:
bd:a3:11:af:8e:2d:eb:9c:25:06:b3:2a:49:53:fa:
08:4f:20:c5:7f:d7:19:1c:fa:a4:39:ba:a7:6c:10:
55:c7:98:6d:a9:59:68:95:6f:d9:fb:58:94:d3:50:
b3:32:f6:75:07:6b:57:7b:77:70:d6:1c:de:52:09:
ef:70:28:f8:20:45:d6:54:a6:0b:89:43:ad:69:e6:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:38:38:75:49:57:4F:E7:BD:CE:B0:C3:28:80:4F:21:F6:D5:17:BA
X509v3 Authority Key Identifier:
keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:23:fc:4a:73:32:2a:a5:dc:34:14:9b:fe:f6:e4:dd:14:a8:
df:07:48:13:ab:8a:e2:0d:b7:cf:0a:79:39:1a:38:88:0a:9a:
92:8e:9b:a9:62:f5:b9:87:95:bd:3a:50:dc:d0:60:23:ed:f6:
67:fa:b8:57:3d:37:29:c3:e8:80:a4:e6:73:34:6b:12:bd:be:
2c:64:0d:1e:48:05:24:a5:c5:7b:f5:94:f3:2d:11:43:bc:ac:
5c:e8:f2:39:81:73:75:9f:3f:26:a4:ea:0c:bd:2b:c7:07:45:
d8:b8:e4:27:dc:59:9f:1f:f2:87:2d:38:3a:fe:2a:55:d9:a2:
b6:51:76:7e:1f:63:c0:d0:2b:d5:11:48:7b:b5:cb:9c:45:d5:
7f:eb:35:9a:1c:82:55:32:ca:7b:e4:ed:c7:23:e5:55:70:c5:
6d:f4:02:d0:d5:ae:e0:9c:43:f2:e4:15:74:5a:db:44:a8:ed:
fe:7d:a9:1d:c3:9a:d0:75:c4:3c:91:2f:84:f2:e9:96:ea:9c:
56:00:9e:b5:63:48:0c:3c:36:2a:63:e2:e3:a8:cb:53:cf:85:
57:ed:4b:be:4c:6a:fb:cc:f6:39:8a:ec:cb:8b:a4:f6:c3:28:
f6:7c:06:27:7c:1d:61:d6:db:f8:83:28:d6:55:4a:97:b8:96:
8c:78:42:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkEyJvEVaPYXTce/03hNJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MDI4NjFmOTIzYzdlYzExMzJiNTQ4ZjdhYmI4NjFiYWNh
MWY0MDYwHhcNMjYwNTEyMTkwMDU2WhcNMjYwNTEzMTkwMDU2WjAzMTEwLwYDVQQD
EyhiMjM4Mzg3NTQ5NTc0ZmU3YmRjZWIwYzMyODgwNGYyMWY2ZDUxN2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0YE1K0QIQ8ynvVTkwWwu++/T4On
tG0TS00pqkjhekPd6m+wkHOK8xHHxXJU5+Fr05OuHXhkfOoMIK/1lCuusbte2afm
PD4t+7Cofm6ER0MLCu0wNgZBBLW1OLv9j53vf4Mm4iOgopjvJEaEV7usI7cXhnFy
KPyCLBw5daGQqJdqFUKXRw5xRUmdnvfxtkzbCTPa2220qGhWS6NILoF/Kvlwhnfv
Q7I0yuOt6L+SyVwJWSe9oxGvji3rnCUGsypJU/oITyDFf9cZHPqkObqnbBBVx5ht
qVlolW/Z+1iU01CzMvZ1B2tXe3dw1hzeUgnvcCj4IEXWVKYLiUOtaebrRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLI4OHVJV0/nvc6wwyiATyH21Re6MB8GA1UdIwQY
MBaAFAUChh+SPH7BEytUj3q7hhusofQGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlFLR0g1SThmc0VUSzFTUGVydUdHNnloOUFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hOTI3NmYtZThjMS00NWQ2LWE0MmQt
MGM2NGRlYmU5ZWM0LzEvQlFLR0g1SThmc0VUSzFTUGVydUdHNnloOUFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9hOTI3NmYtZThjMS00NWQ2LWE0MmQtMGM2NGRlYmU5ZWM0
LzEvQlFLR0g1SThmc0VUSzFTUGVydUdHNnloOUFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSP8SnMy
KqXcNBSb/vbk3RSo3wdIE6uK4g23zwp5ORo4iAqako6bqWL1uYeVvTpQ3NBgI+32
Z/q4Vz03KcPogKTmczRrEr2+LGQNHkgFJKXFe/WU8y0RQ7ysXOjyOYFzdZ8/JqTq
DL0rxwdF2LjkJ9xZnx/yhy04Ov4qVdmitlF2fh9jwNAr1RFIe7XLnEXVf+s1mhyC
VTLKe+TtxyPlVXDFbfQC0NWu4JxD8uQVdFrbRKjt/n2pHcOa0HXEPJEvhPLpluqc
VgCetWNIDDw2KmPi46jLU8+FV+1Lvkxq+8z2OYrsy4uk9sMo9nwGJ3wdYdbb+IMo
1lVKl7iWjHhCzw==
-----END CERTIFICATE-----
Generated at Wed May 13 00:59:59 2026 by rpki-client