Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
File: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft (raw, json)
Hash identifier: fmOEuzUh3/8+qt5wQ8xjqMwbcStWj0UD0y0umGS4UGc=
Subject key identifier: FD:B5:78:70:1B:D5:F3:7B:AE:09:2A:E9:78:6F:D2:5F:5A:DD:4F:00
Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
Certificate issuer: /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Certificate serial: 01A0D1248778B5358848FF63278202DA06D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
Manifest number: 04C2
Signing time: Thu 24 Sep 2026 02:00:27 +0000
Manifest this update: Thu 24 Sep 2026 02:00:27 +0000
Manifest next update: Fri 25 Sep 2026 02:00:27 +0000
Files and hashes: 1: 9K4KSgE7a4TINjU8T65DCXK4OQE.roa (hash: 7Bektqw00nC0RCcxYyN+Y6qpUZR67WY00DYz/0pmVKk=)
2: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl (hash: V9qmk7f1KmoCywH4XuioEfp1o4Hs+no/mmNoGdqDmA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:87:78:b5:35:88:48:ff:63:27:82:02:da:06:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Validity
Not Before: Sep 24 02:00:27 2026 GMT
Not After : Sep 25 02:00:27 2026 GMT
Subject: CN=fdb578701bd5f37bae092ae9786fd25f5add4f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:2a:3a:76:09:fe:d5:30:c2:0c:bf:f7:d1:
fc:18:85:7c:aa:cf:c3:b3:c0:ac:f9:b5:7e:c0:a5:
71:76:53:55:0e:ca:28:ca:8c:59:24:04:1b:d0:44:
d7:7e:8f:10:c6:1a:e1:c6:2c:34:3f:2b:fc:be:8d:
43:a7:e2:a2:9c:81:ab:4e:86:20:22:92:4c:a8:60:
67:0f:d8:8c:dc:27:87:05:c7:fd:8c:e8:7f:fa:35:
d8:a4:fb:e4:d5:a0:22:54:a2:13:61:f2:c3:69:93:
35:bc:6b:1c:e0:e9:c4:ca:ae:1c:44:53:23:13:05:
a7:34:c5:a5:b0:e7:4e:2c:2f:db:cc:00:34:18:eb:
e7:40:f3:a3:6f:7b:40:7e:84:4a:0c:f1:62:20:1b:
6e:c9:4e:8d:2e:f9:a0:0a:da:22:74:4a:31:14:3a:
36:ca:10:32:ab:a7:77:6b:cd:e4:ad:98:b6:d2:fe:
31:c7:6f:cd:82:1d:35:84:47:41:5a:8c:a7:4f:42:
db:7d:5f:db:8d:5a:c9:46:fe:d6:e4:fc:8f:3d:b9:
67:40:e4:67:68:7d:47:fa:8b:df:23:ba:b5:39:fd:
17:d0:c1:a3:51:47:04:f2:1d:9d:84:f7:43:49:2d:
71:a2:15:ce:34:00:6e:81:dd:03:45:e1:68:dc:3c:
98:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B5:78:70:1B:D5:F3:7B:AE:09:2A:E9:78:6F:D2:5F:5A:DD:4F:00
X509v3 Authority Key Identifier:
keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1a:7c:ba:c3:f7:04:fe:6b:17:5a:af:2b:fa:6c:3f:02:62:
39:98:42:7a:91:b4:8e:3f:ee:51:12:10:31:06:62:a0:c3:1d:
83:d0:a4:4d:f7:40:9d:e2:e2:e9:e4:61:1a:85:43:59:13:9b:
fe:92:14:22:8f:c7:79:4a:69:d7:0a:7e:0d:c5:68:40:5e:8c:
b8:94:1f:2a:cd:32:ea:f4:17:84:0d:e5:ae:fc:29:f3:2d:d6:
a4:0d:4a:69:72:be:29:5d:a8:0a:e0:44:da:33:a6:b6:b0:a4:
10:ce:cf:2f:f0:f0:bf:c3:0d:1e:21:4e:05:82:d8:fc:0c:d6:
4e:a1:6a:73:51:ea:30:c3:3d:d2:82:99:35:da:5e:8a:88:30:
46:1c:85:d5:96:06:ff:0a:e3:d0:97:6a:0f:a1:c9:fa:2f:8f:
51:06:2a:2a:1c:8f:6b:e1:ed:c5:59:87:df:eb:91:b3:09:e1:
00:3a:67:a1:d9:58:83:ba:3f:e0:57:8c:c6:9f:66:df:dc:40:
17:76:de:fa:fe:50:1b:af:0c:ba:60:d1:e4:94:29:c9:cf:94:
2b:41:9d:02:d4:9c:eb:e2:07:37:5f:8b:11:7d:fa:87:24:0b:
e9:0e:6d:83:a2:0f:90:5e:ac:7d:4d:cc:78:2b:6c:84:d8:0b:
56:18:f4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:23:15 2026 by rpki-client