Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
File: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft (raw, json)
Hash identifier: gPwXbpy9yGrClqr5Xen6jrS3TU3ii0OuP9EeDwQ8NCk=
Subject key identifier: 33:5A:C3:52:73:38:63:72:7C:A0:41:4D:34:92:8E:D7:97:2F:0A:9A
Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
Certificate issuer: /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Certificate serial: 019D28845C4B45711E4F3D385A488D9D5906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
Manifest number: 02DD
Signing time: Thu 26 Mar 2026 05:00:56 +0000
Manifest this update: Thu 26 Mar 2026 05:00:56 +0000
Manifest next update: Fri 27 Mar 2026 05:00:56 +0000
Files and hashes: 1: 9K4KSgE7a4TINjU8T65DCXK4OQE.roa (hash: 7Bektqw00nC0RCcxYyN+Y6qpUZR67WY00DYz/0pmVKk=)
2: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl (hash: NMzvw45XYGvfO3xA1tL4txCF6MSnCWadvMNzVrZeMAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:5c:4b:45:71:1e:4f:3d:38:5a:48:8d:9d:59:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Validity
Not Before: Mar 26 05:00:56 2026 GMT
Not After : Mar 27 05:00:56 2026 GMT
Subject: CN=335ac352733863727ca0414d34928ed7972f0a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:40:11:f7:e2:ba:cf:cf:03:a4:a3:d9:04:f3:
be:b4:55:c8:83:e8:a1:14:37:a1:38:39:b9:bb:32:
a0:c5:3a:c7:24:33:a5:68:bf:1a:e3:a6:75:19:fd:
55:f8:c9:3a:6b:50:2a:3b:05:8b:55:39:01:44:b4:
b6:62:35:28:ef:ac:8c:12:47:09:64:2e:08:d6:25:
a5:28:55:53:08:6c:73:74:2c:46:34:66:40:c6:3e:
c7:80:13:6c:41:8e:13:5b:38:b8:c8:ed:fd:c4:8e:
b5:e6:3e:08:83:ae:32:cb:05:60:bf:22:d8:8c:e3:
a9:c0:cb:c2:6c:35:a2:7e:1b:4e:37:a7:8e:14:9c:
e7:88:33:26:29:59:18:83:06:e9:22:22:15:d0:dc:
c8:8d:17:31:6c:18:9e:80:82:b2:d2:d3:fd:f1:fd:
25:18:96:68:56:38:ec:3b:e5:82:bd:a8:29:10:35:
53:76:63:78:c7:58:e4:33:73:3c:d5:df:88:2d:c3:
cb:2e:64:c6:78:d3:b9:70:8f:16:d0:ac:90:05:b1:
a7:bd:c0:b7:8c:14:01:ed:93:d4:71:b5:9b:91:d2:
bf:bb:34:fb:89:7d:35:c1:f4:ef:55:4c:7f:a5:3c:
51:cc:6e:f2:b6:83:90:57:8c:27:aa:a6:44:a6:df:
14:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5A:C3:52:73:38:63:72:7C:A0:41:4D:34:92:8E:D7:97:2F:0A:9A
X509v3 Authority Key Identifier:
keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f6:e4:d8:17:83:fb:ee:6f:1b:13:00:51:89:6c:37:f8:5e:
3b:f0:7d:1c:0d:42:5f:94:dc:7f:80:c5:18:be:b2:03:2d:d7:
4d:1c:5a:49:b3:0e:23:3d:7d:9f:ce:bf:a1:dd:0a:3d:32:4b:
f6:29:9b:e1:c6:a6:f3:a3:24:20:6f:48:1a:90:6d:84:f8:a3:
f8:42:44:51:f0:1f:40:af:2b:fa:d4:a2:83:d7:48:4e:d4:49:
8f:f5:6d:8e:c1:52:b6:1f:ac:63:49:49:dc:03:26:61:b0:c3:
1f:a4:7c:10:d3:48:a1:d2:07:1d:b2:67:6f:29:30:4b:92:79:
1d:ca:a2:ea:4f:19:be:4c:16:50:9d:47:28:9e:bd:4f:3c:48:
d8:8e:9c:0b:e7:ac:db:ea:99:21:a3:7d:b4:60:7a:7a:52:b0:
f3:b6:aa:7f:e5:1c:06:78:f6:63:88:26:21:60:16:66:96:4f:
6e:63:bd:bb:ef:20:c8:45:8b:1c:db:91:1f:c6:bc:36:09:78:
46:d4:10:ff:6b:a4:cf:e2:d0:44:7f:6d:b8:37:47:5d:99:79:
11:b7:d5:fa:a9:e6:10:9a:a2:fb:1e:1f:3b:8f:cf:3a:dc:86:
16:82:94:2e:e8:c0:3b:ff:8c:fc:15:4c:57:86:5e:07:2f:69:
49:0e:12:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:09 2026 by rpki-client