Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
File: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft (raw, json)
Hash identifier: eeIuSIsJCj/ByKIVCgn4KEaei02J2k1y239Kkin9ak8=
Subject key identifier: 73:8A:FA:27:A7:2A:9E:92:32:23:4C:84:D6:09:E7:7A:91:4C:69:74
Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
Certificate issuer: /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Certificate serial: 019E1BD94D80E1BCBAE9B6DF0B63CBBF96E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
Manifest number: 035B
Signing time: Tue 12 May 2026 11:01:26 +0000
Manifest this update: Tue 12 May 2026 11:01:26 +0000
Manifest next update: Wed 13 May 2026 11:01:26 +0000
Files and hashes: 1: 9K4KSgE7a4TINjU8T65DCXK4OQE.roa (hash: 7Bektqw00nC0RCcxYyN+Y6qpUZR67WY00DYz/0pmVKk=)
2: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl (hash: cNZMYy4OYoX3lXvnUI1DLXz0t1vsYaRWpaEj5wmohhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:4d:80:e1:bc:ba:e9:b6:df:0b:63:cb:bf:96:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Validity
Not Before: May 12 11:01:26 2026 GMT
Not After : May 13 11:01:26 2026 GMT
Subject: CN=738afa27a72a9e9232234c84d609e77a914c6974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:83:f4:74:e2:34:ef:73:4b:a1:ca:4e:21:b9:
71:58:2e:aa:8b:25:81:0e:01:46:8a:d9:af:b2:dd:
f3:22:66:cf:e1:4d:07:09:21:3f:e5:3c:1c:70:32:
1d:3d:f5:72:88:73:f3:6d:66:ec:13:b9:68:1f:27:
76:c9:3f:55:48:db:49:bf:43:ba:9a:6e:6f:e9:0f:
e8:5f:90:6e:ff:11:9f:99:33:b0:dc:71:5b:12:81:
33:8d:5e:de:f3:d1:aa:41:b6:ff:35:41:0a:fb:79:
1b:94:fe:af:a5:13:e4:12:bd:25:2b:49:0a:93:9e:
72:52:e5:e2:2e:20:9a:90:c1:92:ae:28:ed:4f:1f:
5a:8b:c9:aa:ea:69:11:90:cb:95:14:a9:a8:08:c7:
93:65:24:60:db:62:23:7e:a3:1e:fb:94:41:e5:03:
17:92:65:fa:6b:68:36:92:e8:31:f7:d1:fa:5c:34:
81:93:e6:98:31:01:5a:5e:88:44:71:1d:62:14:11:
ae:29:c3:b9:c1:cd:78:f5:dd:41:51:e8:95:b2:76:
4d:f1:7c:b2:1e:4c:a3:a7:a6:a3:06:be:7f:1b:53:
5f:79:e0:8d:d0:39:b4:6e:42:03:9d:fe:bc:c8:21:
ef:05:72:f3:53:c9:35:14:50:75:73:2a:b0:a5:50:
20:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8A:FA:27:A7:2A:9E:92:32:23:4C:84:D6:09:E7:7A:91:4C:69:74
X509v3 Authority Key Identifier:
keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4a:1f:9d:75:81:e5:3a:84:7d:3f:6d:9e:c0:60:ef:03:f7:
11:f5:1b:c1:27:03:23:b6:e7:41:3f:4e:98:87:1f:de:e5:fc:
f6:f6:bf:dd:0f:ab:b4:b5:35:8b:32:da:2a:97:4d:47:9c:c3:
25:f4:b4:aa:e4:af:e6:60:c1:d5:c1:4b:a5:25:af:c6:27:2d:
b3:a0:4f:5b:86:11:0d:e6:f5:68:d0:a9:b1:6b:94:80:44:7b:
c3:a3:99:ad:e1:46:c1:58:ec:06:83:a3:7c:60:dd:d4:73:05:
69:c4:54:25:c1:b8:41:f6:b0:d0:22:e8:b2:ba:26:e4:e8:54:
20:f5:3a:21:f2:a6:25:54:c9:c8:5d:16:f1:46:51:79:2c:0c:
9b:4c:34:c9:93:1e:51:f7:e1:85:23:dc:a1:bd:b3:a0:aa:10:
1f:44:b1:2a:3f:df:0a:4f:c4:f7:91:96:05:d5:21:0c:06:f6:
dd:e5:bd:50:e8:0b:14:5d:1c:e3:88:6c:5b:f7:6a:d2:2a:92:
fc:c5:ec:fa:5d:67:dc:cb:b9:2b:aa:8c:71:54:51:23:cd:e5:
89:e9:65:6d:1b:91:01:cc:ce:6f:ad:e5:50:bc:1a:53:48:eb:
65:9e:6d:dd:6b:2f:96:04:a5:bb:ea:96:74:56:ae:e1:8f:fc:
d7:13:fe:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:41 2026 by rpki-client